UbuntuUpdates.org

Package "weechat-doc"

Name: weechat-doc

Description:

Fast, light and extensible chat client - documentation

Latest version: 0.4.2-3ubuntu0.1
Release: trusty (14.04)
Level: security
Repository: universe
Head package: weechat
Homepage: http://weechat.org/

Links


Download "weechat-doc"


Other versions of "weechat-doc" in Trusty

Repository Area Version
base universe 0.4.2-3
updates universe 0.4.2-3ubuntu0.1

Changelog

Version: 0.4.2-3ubuntu0.1 2017-04-28 03:06:37 UTC

  weechat (0.4.2-3ubuntu0.1) trusty-security; urgency=medium

  * SECURITY UPDATE: remote buffer overflow crash by sending a filename
    via DCC to the IRC plugin (LP: #1686478)
    - debian/patches/03_fix_CVE-2017-8073.patch: Fix quote removal in
      irc_ctcp_dcc_filename_without_quotes function in
      src/plugins/irc/irc-ctcp.c. Patch from 1.7.1 via Debian.
    - CVE-2017-8073

 -- Jeremy Bicha <email address hidden> Wed, 26 Apr 2017 14:10:49 -0400

1686478 CVE-2017-8073 weechat remote crash
CVE-2017-8073 WeeChat before 1.7.1 allows a remote crash by sending a filename via DCC to the IRC plugin. This occurs in the irc_ctcp_dcc_filename_without_quotes f



About   -   Send Feedback to @ubuntu_updates