[SECURITY] [DLA 276-1] inspircd security update

2015-07-1821:43:04

lists.debian.org

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

JSON

Package : inspircd
Version : 1.1.22+dfsg-4+squeeze2
Debian Bug : 780880

Adam <[email protected]>, upstream author of inspircd found the Debian
patch that fixed CVE-2012-1836 was incomplete. Furthermore, it
introduced an issue, since invalid dns packets caused an infinite loop.
This upload corrects these problems.

As of today, no CVEs has been assigned to these Debian-specific flaws.

For the Squeeze distribution, these issues have been fixed in version
1.1.22+dfsg-4+squeeze2 of inspircd.

OSVersionArchitecturePackageVersionFilename
Debian6allinspircd-dbg< 1.1.22+dfsg-4+squeeze2inspircd-dbg_1.1.22+dfsg-4+squeeze2_all.deb
Debian6allinspircd< 1.1.22+dfsg-4+squeeze2inspircd_1.1.22+dfsg-4+squeeze2_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	6	all	inspircd-dbg	< 1.1.22+dfsg-4+squeeze2	inspircd-dbg_1.1.22+dfsg-4+squeeze2_all.deb
Debian	6	all	inspircd	< 1.1.22+dfsg-4+squeeze2	inspircd_1.1.22+dfsg-4+squeeze2_all.deb