Updated ngircd package fixes security vulnerability

The Server-Server protocol implementation in ngIRCd before 26rc2 allows an out-of-bounds access, as demonstrated by the IRCNJOIN function. CVE-2020-14148...

Fedora 32 : ngircd (2020-e6d1d849c5)

Update to version 26, a bugfix and security release. FIxes CVE-2020-14148. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora: Security Advisory for ngircd (FEDORA-2020-8c33e3a771)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora 31 : ngircd (2020-8c33e3a771)

Update to version 26, a bugfix and security release. FIxes CVE-2020-14148. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without...

CVE-2020-14148

The Server-Server protocol implementation in ngIRCd before 26rc2 allows an out-of-bounds access, as demonstrated by the IRCNJOIN function...

CVE-2020-14148

The Server-Server protocol implementation in ngIRCd before 26rc2 allows an out-of-bounds access, as demonstrated by the IRCNJOIN function...

CVE-2020-14148

CVE-2020-14148 affects ngIRCd. Multiple sources confirm that ngIRCd prior to 26~rc2 has a vulnerability in the Server-Server protocol implementation, allowing an out-of-bounds access demonstrated by the IRC_NJOIN() function. Impact details in the sources align with partial availability disruption...

CVE-2020-14148

The Server-Server protocol implementation in ngIRCd before 26rc2 allows an out-of-bounds access, as demonstrated by the IRCNJOIN function...

Command injection

Argument injection vulnerability in syntax-highlighting.sh in cgit 9.0.3 and earlier allows remote authenticated users with permissions to add files to execute arbitrary commands via the --plug-in argument to the highlight command...