[slackware-security] irssi

New irssi packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix a security issue. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/irssi-1.1.3-i586-1slack14.2.txz: Upgraded. This update fixes a security issue: Use after free when sending SASL login to...

CVE-2019-13045

Irssi before 1.0.8, 1.1.x before 1.1.3, and 1.2.x before 1.2.1, when SASL is enabled, has a use after free when sending SASL login to the server...

CVE-2019-13045

Irssi before 1.0.8, 1.1.x before 1.1.3, and 1.2.x before 1.2.1, when SASL is enabled, has a use after free when sending SASL login to the server...

Design/Logic Flaw

Irssi before 1.0.8, 1.1.x before 1.1.3, and 1.2.x before 1.2.1, when SASL is enabled, has a use after free when sending SASL login to the server...

CVE-2019-13045

CVE-2019-13045 affects the IRC client irssi prior to 1.0.8, 1.1.x before 1.1.3, and 1.2.x before 1.2.1 when SASL is enabled. The root cause is a use-after-free during SASL login handling sent to the server, leading to potential remote code execution or crash (as indicated by multiple advisories)....

CVE-2019-13045

Irssi before 1.0.8, 1.1.x before 1.1.3, and 1.2.x before 1.2.1, when SASL is enabled, has a use after free when sending SASL login to the server...

CVE-2019-13045

Irssi before 1.0.8, 1.1.x before 1.1.3, and 1.2.x before 1.2.1, when SASL is enabled, has a use after free when sending SASL login to the server...

CVE-2019-13045

Irssi before 1.0.8, 1.1.x before 1.1.3, and 1.2.x before 1.2.1, when SASL is enabled, has a use after free when sending SASL login to the server...

UBUNTU-CVE-2019-13045

Irssi before 1.0.8, 1.1.x before 1.1.3, and 1.2.x before 1.2.1, when SASL is enabled, has a use after free when sending SASL login to the server...

CVE-2019-13045

Irssi before 1.0.8, 1.1.x before 1.1.3, and 1.2.x before 1.2.1, when SASL is enabled, has a use after free when sending SASL login to the server...

irssi -- Use after free when sending SASL login to the server

Irssi reports: Use after free when sending SASL login to the server found by ilbelkyr. CWE-416, CWE-825...

curl: Integer overflow leading to heap-based buffer overflow in Curl_sasl_create_plain_message()

Curl versions 7.33.0 through 7.61.1 are vulnerable to a buffer overrun in the SASL authentication code that may lead to denial of service...

EulerOS Virtualization 3.0.1.0 : thrift (EulerOS-SA-2019-1458)

According to the versions of the thrift packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The Apache Thrift Node.js static web server in versions 0.9.2 through 0.11.0 have been determined to contain a security...

EulerOS Virtualization for ARM 64 3.0.1.0 : memcached (EulerOS-SA-2019-1396)

According to the versions of the memcached package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - An integer overflow flaw, leading to a heap-based buffer overflow, was found in the memcached binary protocol. An...

openSUSE Security Update : curl (openSUSE-2019-1311)

This update for curl fixes the following issues : Security issue fixed : - CVE-2018-16839: Fixed a buffer overflow in the SASL authentication code bsc1112758. This update was imported from the SUSE:SLE-12:Update update project. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...

SUSE SLED12 / SLES12 Security Update : curl (SUSE-SU-2019:0996-1)

This update for curl fixes the following issues : Security issue fixed : CVE-2018-16839: Fixed a buffer overflow in the SASL authentication code bsc1112758. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has...

SUSE-SU-2019:0996-1 Security update for curl

This update for curl fixes the following issues: Security issue fixed: - CVE-2018-16839: Fixed a buffer overflow in the SASL authentication code bsc1112758...

EulerOS Virtualization 2.5.3 : cyrus-sasl (EulerOS-SA-2019-1173)

According to the version of the cyrus-sasl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - Cyrus SASL 2.1.23, 2.1.26, and earlier does not properly handle when a NULL value is returned upon an error by the crypt functio...

openSUSE Security Update : curl (openSUSE-2019-903)

This update for curl fixes the following issues : - CVE-2018-16839: A SASL password overflow via integer overflow was fixed which could lead to crashes bsc1112758 - CVE-2018-16840: A use-after-free in SASL handle close was fixed which could lead to crashes bsc1112758 - CVE-2018-16842: A...

SUSE-SU-2019:0339-1 Security update for curl

This update for curl fixes the following issues: Security issues fixed: - CVE-2019-3822: Fixed a NTLMv2 type-3 header stack buffer overflow bsc1123377. - CVE-2019-3823: Fixed an out-of-bounds read in the SMTP end-of-response bsc1123378. - CVE-2018-16890: Fixed an out-of-bounds buffer read in NTLM...