[SECURITY] [DSA 3063-1] quassel security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3063-1 [email protected] http://www.debian.org/security/ Luciano Bello November 02, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3063-1] quassel security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3063-1 [email protected] http://www.debian.org/security/ Luciano Bello November 02, 2014 http://www.debian.org/security/faq -...

DSA-3063-1 quassel - security update

Bulletin has no description...

Debian: Security Advisory (DSA-3063-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MGASA-2014-0436 Updated quassel packages fix security vulnerability

Due to and out-of-bounds read issue in Quassel core in The ECB Blowfish decryption function, a malicious client can cause either denial of service or disclosure of information from process memory by using an improperly formed message CVE-2014-8483...

Updated quassel packages fix security vulnerability

Due to and out-of-bounds read issue in Quassel core in The ECB Blowfish decryption function, a malicious client can cause either denial of service or disclosure of information from process memory by using an improperly formed message CVE-2014-8483...

CVE-2014-8483

The blowfishECB function in core/cipher.cpp in Quassel IRC 0.10.0 allows remote attackers to cause a denial of service out-of-bounds read via a malformed string...

UBUNTU-CVE-2014-8483

The blowfishECB function in core/cipher.cpp in Quassel IRC 0.10.0 allows remote attackers to cause a denial of service out-of-bounds read via a malformed string...

openSUSE Security Update : quassel (openSUSE-SU-2014:0114-1)

Add back /etc/sysconfig/quasselcore bnc849850 - Drop fix-CVE-2013-6404.diff: Merged upstream - Update to 0.9.2 - Don't crash if /topic contains newlines. - Fix SSL-related issues. - Fix Phonon notifications not playing sound. - Pingout if connection drops during SASL auth phase. - Prevent...

openSUSE Security Update : quassel (openSUSE-SU-2013:1929-1)

Add fix-CVE-2013-6404.diff: Fix a vulnerability by which an authenticated malicious user using a custom client, could access the backlog of all users of a quassel core. This fixes CVE-2013-6404 bnc852847. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks...

Fedora Update for quassel FEDORA-2014-1734

Check for the Version of quassel OpenVAS Vulnerability Test Fedora Update for quassel FEDORA-2014-1734 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for quassel FEDORA-2014-1734

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 19 : quassel-0.9.2-1.fc19 (2014-1734)

Update to latest release of Quassel from upstream. Fix CVE-2013-4422 - Postgresql, possible SQL injection vulnerability New package for EPEL - quassel IRC Fix CVE-2013-4422 - Postgresql, possible SQL injection vulnerability New package for EPEL - quassel IRC Fix CVE-2013-4422 - Postgresql, possib...

Fedora 20 : quassel-0.9.2-1.fc20 (2014-1742)

Update to latest release of Quassel from upstream. Fix CVE-2013-4422 - Postgresql, possible SQL injection vulnerability New package for EPEL - quassel IRC Fix CVE-2013-4422 - Postgresql, possible SQL injection vulnerability New package for EPEL - quassel IRC Fix CVE-2013-4422 - Postgresql, possib...

[SECURITY] Fedora 19 Update: quassel-0.9.2-1.fc19

Quassel IRC is a modern, distributed IRC client, meaning that one or multiple clients can attach to and detach from a central core -- much like the popular combination of screen and a text-based IRC client such as WeeChat, but graphical...

[SECURITY] Fedora 20 Update: quassel-0.9.2-1.fc20

Quassel IRC is a modern, distributed IRC client, meaning that one or multiple clients can attach to and detach from a central core -- much like the popular combination of screen and a text-based IRC client such as WeeChat, but graphical...

CVE-2013-6404

Quassel core server daemon in Quassel IRC before 0.9.2 does not properly verify the user ID when accessing user backlogs, which allows remote authenticated users to read other users' backlogs via the bufferid in 1 16/selectbufferbyid.sql, 2 16/selectbufferbyid.sql, and 3 16/selectbufferbyid.sql i...

DEBIAN-CVE-2013-6404

Quassel core server daemon in Quassel IRC before 0.9.2 does not properly verify the user ID when accessing user backlogs, which allows remote authenticated users to read other users' backlogs via the bufferid in 1 16/selectbufferbyid.sql, 2 16/selectbufferbyid.sql, and 3 16/selectbufferbyid.sql i...

CVE-2013-6404

Quassel core server daemon in Quassel IRC before 0.9.2 does not properly verify the user ID when accessing user backlogs, which allows remote authenticated users to read other users' backlogs via the bufferid in 1 16/selectbufferbyid.sql, 2 16/selectbufferbyid.sql, and 3 16/selectbufferbyid.sql i...

Code injection

Quassel core server daemon in Quassel IRC before 0.9.2 does not properly verify the user ID when accessing user backlogs, which allows remote authenticated users to read other users' backlogs via the bufferid in 1 16/selectbufferbyid.sql, 2 16/selectbufferbyid.sql, and 3 16/selectbufferbyid.sql i...