UbuntuUpdates.org

Package "weechat-curses"

Name: weechat-curses

Description:

Fast, light and extensible chat client - console client
Latest version: 1.4-2ubuntu0.1
Release: xenial (16.04)
Level: security
Repository: universe
Head package: weechat
Homepage: https://weechat.org/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "weechat-curses"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "weechat-curses" in Xenial

Repository Area Version
base universe 1.4-2
updates universe 1.4-2ubuntu0.1

Changelog

Version: 1.4-2ubuntu0.1 2017-04-28 03:06:38 UTC

  weechat (1.4-2ubuntu0.1) xenial-security; urgency=medium

  * SECURITY UPDATE: remote buffer overflow crash by sending a filename
    via DCC to the IRC plugin (LP: #1686478)
    - debian/patches/03_fix_CVE-2017-8073.patch: Fix quote removal in
      irc_ctcp_dcc_filename_without_quotes function in
      src/plugins/irc/irc-ctcp.c. Patch from 1.7.1 via Debian.
    - CVE-2017-8073

 -- Jeremy Bicha <email address hidden> Wed, 26 Apr 2017 14:10:49 -0400
1686478 CVE-2017-8073 weechat remote crash
CVE-2017-8073 WeeChat before 1.7.1 allows a remote crash by sending a filename via DCC to the IRC plugin. This occurs in the irc_ctcp_dcc_filename_without_quotes f


About   -   Send Feedback to @ubuntu_updates