[SECURITY] [DLA 1318-1] irssi security update

Package : irssi Version : 0.8.15-5+deb7u6 CVE ID : CVE-2018-7051 Debian Bug : 890677 It was discovered that there was an issue in the irssi IRC client where certain nick names could result in out-of-bounds access when printing theme strings. For Debian 7 "Wheezy", this issue has been fixed in irs...

USN-3590-1: Irssi vulnerabilities

It was discovered that Irssi incorrectly handled certain empty nick names. An attacker could possibly use this issue to cause a denial of service. CVE-2018-7050 It was discovered that Irssi incorrectly handled certain nick names. An attacker could possibly use this to access sensitive information...

[SECURITY] Fedora 27 Update: irssi-1.0.7-1.fc27

Irssi is a modular IRC client with Perl scripting. Only text-mode frontend is currently supported. The GTK/GNOME frontend is no longer being maintained...

[SECURITY] Fedora 26 Update: irssi-1.0.7-1.fc26

Irssi is a modular IRC client with Perl scripting. Only text-mode frontend is currently supported. The GTK/GNOME frontend is no longer being maintained...

Debian DLA-1289-1 : irssi security update

It was discovered that there where a number of vulnerabilities in irssi, the terminal based IRC client : - CVE-2018-7050: NULL pointer dereference for an 'empty' nick. - CVE-2018-7051: Certain nick names could result in out-of-bounds access when printing theme strings. - CVE-2018-7052: When the...

CVE-2018-7050

A NULL pointer dereference was found in Irssi when an "empty" nick joins a channel. A remote attacker, who can control an IRC server, could crash IRC clients by leveraging this vulnerability...

CVE-2018-7053

A use-after-free was found in the way Irssi, version 0.8.18 and later, handled out of order SASL messages sent by an IRC server. A remote attacker, who controls an IRC server, could crash the application by exploiting this flaw...

DEBIAN-CVE-2018-7053

An issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1. There is a use-after-free when SASL messages are received in an unexpected order...

[SECURITY] Fedora 26 Update: irssi-1.0.6-1.fc26

Irssi is a modular IRC client with Perl scripting. Only text-mode frontend is currently supported. The GTK/GNOME frontend is no longer being maintained...

Debian: Security Advisory (DLA-919-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

irc.mavilim.net XSS vulnerability

Open Bug Bounty ID: OBB-518681 Description| Value ---|--- Affected Website:| irc.mavilim.net Open Bug Bounty Program:| Not created yet Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N...

Updated irssi packages fix security vulnerabilities

Joseph Bisch discovered that Irssi incorrectly handled incomplete escape codes. If a user were tricked into using malformed commands or opening malformed files, an attacker could use this issue to cause Irssi to crash, resulting in a denial of service CVE-2018-5205. Joseph Bisch discovered that...

Ubuntu 14.04 LTS / 16.04 LTS : Irssi vulnerabilities (USN-3527-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3527-1 advisory. Joseph Bisch discovered that Irssi incorrectly handled incomplete escape codes. If a user were tricked into using malformed commands or openi...

Irssi Buffer Overflow Vulnerability

Irssi is a free, open source IRC client for use in Linux and Unix operating systems. A heap buffer overflow vulnerability exists in versions of Irssi prior to 1.0.6 that stems from a computational error. An attacker can exploit this vulnerability to affect the stability of Irssi...

Debian DLA-1217-1 : irssi security update

Multiple vulnerabilities have been discovered in Irssi, a terminal based IRC client, which may lead to denial of service or other unspecified impact. For Debian 7 'Wheezy', these problems have been fixed in version 0.8.15-5+deb7u4. We recommend that you upgrade your irssi packages. NOTE: Tenable...

[SECURITY] Fedora 27 Update: konversation-1.7.4-1.fc27

A simple and easy to use IRC client with support for strikeout; multi-channel joins; away / unaway messages; ignore list functionality; support for foreign language characters; auto-connect to server; optional timestamps to chat windows; configurable background colors and much more...

[SECURITY] Fedora 25 Update: konversation-1.7.4-1.fc25

A simple and easy to use IRC client with support for strikeout; multi-channel joins; away / unaway messages; ignore list functionality; support for foreign language characters; auto-connect to server; optional timestamps to chat windows; configurable background colors and much more...

[SECURITY] Fedora 26 Update: konversation-1.7.4-1.fc26

A simple and easy to use IRC client with support for strikeout; multi-channel joins; away / unaway messages; ignore list functionality; support for foreign language characters; auto-connect to server; optional timestamps to chat windows; configurable background colors and much more...

openSUSE Security Update : konversation (openSUSE-2017-1306)

This update for konversation fixes the following issues : Security issue fixed : - CVE-2017-15923: Fixed a crash in parsing IRC color formatting codes boo1068097. Bug fixes : - Update to version 1.7.4 : - Fixed a bug causing the size of a custom chat text view font set via the configuration dialo...

openSUSE Security Update : konversation (openSUSE-2017-1305)

This update for konversation fixes the following issues : Security issue fixed : - CVE-2017-15923: Fix a crash in parsing IRC color formatting codes boo1068097. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...