Format: 1.8 Date: Mon, 08 Jan 2018 14:44:16 -0500 Source: irssi Binary: irssi irssi-dev Architecture: arm64 Version: 0.8.15-5ubuntu3.4 Distribution: trusty Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: irssi - terminal based IRC client irssi-dev - terminal based IRC client - development files Changes: irssi (0.8.15-5ubuntu3.4) trusty-security; urgency=medium . * SECURITY UPDATE: buffer overread via incomplete escape codes - debian/patches/CVE-2018-5205.patch: check for complete char in src/core/misc.c. - CVE-2018-5205 * SECURITY UPDATE: NULL dereference via setting channel topic without specifying a sender - debian/patches/CVE-2018-5206.patch: do not record topic change time when sender is blank in src/irc/core/channel-events.c. - CVE-2018-5206 * SECURITY UPDATE: buffer overread via incomplete variable argument - debian/patches/CVE-2018-5207.patch: disable variable arguments code in src/core/special-vars.c. - CVE-2018-5207 * SECURITY UPDATE: heap overflow in completion code - debian/patches/CVE-2018-5208.patch: check for direct match of separator in src/fe-common/core/completion.c. - CVE-2018-5208 Checksums-Sha1: 4e175129f6b5b7f5ee0d94ef7d5205a848415e78 560092 irssi_0.8.15-5ubuntu3.4_arm64.deb 66633f963a35818e2b23b92b1256760af0a1307b 41128 irssi-dev_0.8.15-5ubuntu3.4_arm64.deb 76e5ab25300f0c463ac764454d8005c09ec3bb35 1276028 irssi-dbgsym_0.8.15-5ubuntu3.4_arm64.ddeb Checksums-Sha256: e6d85a0b82dab7196e34077e7029c00b41429c6b9de18c7ad6dcd762f8cbc28b 560092 irssi_0.8.15-5ubuntu3.4_arm64.deb 8a7812b3324cfa5fc0b4096631acc65cbeab75d5de962993f72e73e8b908a496 41128 irssi-dev_0.8.15-5ubuntu3.4_arm64.deb 1dd9915ea55b1f3bf5254ed69c4af794628069fd0b0d2928be72cc319b2c1439 1276028 irssi-dbgsym_0.8.15-5ubuntu3.4_arm64.ddeb Files: 3c8eb8ba99b58630f0327ca946c6c9c7 560092 net optional irssi_0.8.15-5ubuntu3.4_arm64.deb 12e41f78b24b673352f3c0257968e8ab 41128 net optional irssi-dev_0.8.15-5ubuntu3.4_arm64.deb 5a828816ac5caf1801dc36c005dfad47 1276028 net extra irssi-dbgsym_0.8.15-5ubuntu3.4_arm64.ddeb Original-Maintainer: Gerfried Fuchs