UbuntuUpdates.org

Package "weechat"

Name: weechat

Description:

Fast, light and extensible chat client
Latest version: 1.4-2ubuntu0.1
Release: xenial (16.04)
Level: updates
Repository: universe
Homepage: https://weechat.org/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "weechat"

All arch deb package
APT INSTALL

Other versions of "weechat" in Xenial

Repository Area Version
base universe 1.4-2
security universe 1.4-2ubuntu0.1

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 1.4-2ubuntu0.1 2017-04-28 04:06:49 UTC

  weechat (1.4-2ubuntu0.1) xenial-security; urgency=medium

  * SECURITY UPDATE: remote buffer overflow crash by sending a filename
    via DCC to the IRC plugin (LP: #1686478)
    - debian/patches/03_fix_CVE-2017-8073.patch: Fix quote removal in
      irc_ctcp_dcc_filename_without_quotes function in
      src/plugins/irc/irc-ctcp.c. Patch from 1.7.1 via Debian.
    - CVE-2017-8073

 -- Jeremy Bicha <email address hidden> Wed, 26 Apr 2017 14:10:49 -0400
1686478 CVE-2017-8073 weechat remote crash
CVE-2017-8073 WeeChat before 1.7.1 allows a remote crash by sending a filename via DCC to the IRC plugin. This occurs in the irc_ctcp_dcc_filename_without_quotes f


About   -   Send Feedback to @ubuntu_updates