Updated znc packages fix security vulnerabilities

🗓️ 12 Sep 2019 19:09:52Reported by Gentoo FoundationType

Updated ZNC packages fix security vulnerabilities. Two vulnerabilities discovered in ZNC IRC bouncer, leading to privilege escalation, denial of service, and remote code execution

Reporter	Title	Published	Views	Family All 126
FreeBSD	znc -- privilege escalation	13 Jun 201900:00	–	freebsd
FreeBSD	znc -- Denial of Service	21 Mar 201900:00	–	freebsd
FreeBSD	znc -- multiple vulnerabilities	14 Jul 201800:00	–	freebsd
AlpineLinux	CVE-2018-14055	15 Jul 201801:00	–	alpinelinux
AlpineLinux	CVE-2018-14056	15 Jul 201801:00	–	alpinelinux
AlpineLinux	CVE-2019-12816	15 Jun 201915:40	–	alpinelinux
AlpineLinux	CVE-2019-9917	27 Mar 201905:41	–	alpinelinux
ArchLinux	[ASA-201807-11] znc: multiple issues	19 Jul 201800:00	–	archlinux
BDU FSTEC	The vulnerabilities in the LoadModule, GetModInfo, and GetModPathInfo functions from src/Modules.cpp of the client disconnection mechanism from the IRC server or the selected channel allow a malicious user to elevate their privileges and execute arbitrary code.	20 Aug 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerabilities in the modules src/User.cpp, src/znc.cpp, and src/IRCNetwork.cpp, which are responsible for disabling clients from connecting to the IRC server or the selected channel, allow a malicious actor to cause service failures.	20 Aug 201900:00	–	bdu_fstec