Advisories » MGASA-2017-0369

Updated weechat packages fix security vulnerability

Publication date: 13 Oct 2017
Modification date: 13 Oct 2017
Type: security
Affected Mageia releases : 5 , 6
CVE: CVE-2017-14727

Description

It was discovered that logger.c in the logger plugin in WeeChat before
1.9.1 allows a crash via strftime date/time specifiers, because a buffer
is not initialized (CVE-2017-14727).
                

References

• https://bugs.mageia.org/show_bug.cgi?id=21802
• https://security-tracker.debian.org/tracker/CVE-2017-14727
• https://lists.opensuse.org/opensuse-updates/2017-09/msg00123.html
• https://bugzilla.suse.com/show_bug.cgi?id=1060140
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14727

SRPMS

5/core

• weechat-0.4.1-7.2.mga5

6/core

• weechat-1.7.1-1.1.mga6