[SECURITY] [DSA 5725-1] znc security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5725-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 03, 2024 https://www.debian.org/security/faq -...

CVE-2024-39844

In ZNC before 1.9.1, remote code execution can occur in modtcl via a KICK...

CVE-2024-39844

In ZNC before 1.9.1, remote code execution can occur in modtcl via a KICK...

CVE-2010-2488

NULL pointer dereference vulnerability in ZNC before 0.092 caused by traffic stats when there are unauthenticated connections...

CVE-2019-12816

Modules.cpp in ZNC before 1.7.4-rc1 allows remote authenticated non-admin users to escalate privileges and execute arbitrary code by loading a module with a crafted name...

Multiple znc security vulnerabilities

Multiple DoS conditions...

[Backports-security-announce] Security update for znc

Patrick Matthäi uploaded new packages for znc which fixed the following security problems: TEMP-0537977-000291, Debian BTS 537977 It was discovered that znc, an IRC proxy, did not properly process certain DCC requests, allowing attackers to upload arbitrary files. For the etch-backports...