Format: 1.8 Date: Wed, 26 Jun 2019 10:48:57 -0300 Source: znc Binary: znc znc-dbg znc-dev znc-perl znc-python znc-tcl Architecture: i386 Version: 1.6.3-1ubuntu0.2 Distribution: xenial Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Paulo Flabiano Smorigo Description: znc - advanced modular IRC bouncer znc-dbg - advanced modular IRC bouncer (debugging symbols) znc-dev - advanced modular IRC bouncer (development headers) znc-perl - advanced modular IRC bouncer (Perl extension) znc-python - advanced modular IRC bouncer (Python extension) znc-tcl - advanced modular IRC bouncer (Tcl extension) Changes: znc (1.6.3-1ubuntu0.2) xenial-security; urgency=medium . * SECURITY UPDATE: Fix vulnerability that allows remote authenticated non-admin users to escalate privileges and execute arbitrary code by loading a module with a crafted name. - debian/patches/CVE-2019-12816.patch: Fix remote code execution and privilege escalation. - CVE-2019-12816 Checksums-Sha1: ac92d82476f0ec6663971cefcb9ba6b494a5e240 23108632 znc-dbg_1.6.3-1ubuntu0.2_i386.deb 67673d935bf0843ad1efa143230ca86db14ea13b 1100 znc-dbgsym_1.6.3-1ubuntu0.2_i386.ddeb d767303104156cdbf14d91c70205cf441add6c96 1142 znc-dev-dbgsym_1.6.3-1ubuntu0.2_i386.ddeb a7dc692c3387dae76afa319a8ae1a430b55ba5e5 58658 znc-dev_1.6.3-1ubuntu0.2_i386.deb 75c025ad8df6ac2ff3646c1651b033fdfe47d69d 1132 znc-perl-dbgsym_1.6.3-1ubuntu0.2_i386.ddeb 5bb31e09b175e43077df0ff83259de9b3c974503 551018 znc-perl_1.6.3-1ubuntu0.2_i386.deb 76c5a444d245ce32819e69da893bc9474848e2dd 1134 znc-python-dbgsym_1.6.3-1ubuntu0.2_i386.ddeb a5a21fec0a53616e895c767af24bffd3607211b7 595108 znc-python_1.6.3-1ubuntu0.2_i386.deb 2eef53386491d5fa4ab869882474ee9f2050fc93 1134 znc-tcl-dbgsym_1.6.3-1ubuntu0.2_i386.ddeb 6bf1e4423d1f795ecd60c648aa37a4dac5f0145d 29068 znc-tcl_1.6.3-1ubuntu0.2_i386.deb 535297b6bd2d084f9654c99a52cd3fa70aede747 1424276 znc_1.6.3-1ubuntu0.2_i386.deb Checksums-Sha256: 63dfc3421bfdd9df23621f7bc40f03c20ed4ea918acc758c5ce3716d91bd2124 23108632 znc-dbg_1.6.3-1ubuntu0.2_i386.deb cf76bea58072c4c0fe0c01e318a5f4bfadb1aa2714fa46bbeab33e1d31bbf1e3 1100 znc-dbgsym_1.6.3-1ubuntu0.2_i386.ddeb 35a8c388b01975aad4bed313f8bc2c59113c69706d5d6e7e475e755b51959bb1 1142 znc-dev-dbgsym_1.6.3-1ubuntu0.2_i386.ddeb 1c275b253175f6a6d869e7c391599b2bcea42f05abfe7f958bac69fe5e7c167d 58658 znc-dev_1.6.3-1ubuntu0.2_i386.deb 092cabe6a9ceed20b5a1b94b7c0210c2cc76ddd47cbcc7baad1c79c38efa9b4b 1132 znc-perl-dbgsym_1.6.3-1ubuntu0.2_i386.ddeb f7330690203adcc9b305b3a848a30a76e249abcd10fccd29441dfa2ed5128ded 551018 znc-perl_1.6.3-1ubuntu0.2_i386.deb 56d51aba1f652e12dcc2c1175a6e076bc464bb35027dd953e416e76abbf1c899 1134 znc-python-dbgsym_1.6.3-1ubuntu0.2_i386.ddeb f262c7023e35d05fa950cb316322422aac3d8724d8f3b54f1732486420e0afe6 595108 znc-python_1.6.3-1ubuntu0.2_i386.deb 80b3ee2ac2e7404a599160a868b49ba1fab1a3428dcb01456181d1e6bcc2ffc2 1134 znc-tcl-dbgsym_1.6.3-1ubuntu0.2_i386.ddeb 9c0aaf61f7e964ea306800206485b40b37ac18bfda7d7c664f7e258b11853c22 29068 znc-tcl_1.6.3-1ubuntu0.2_i386.deb dc54c269ce9bf9594c69ab2e1c28216dffb69b0c783b526e5184b9549efb286e 1424276 znc_1.6.3-1ubuntu0.2_i386.deb Files: 222bbada122a3fd6f670dc9ebd7ee999 23108632 debug extra znc-dbg_1.6.3-1ubuntu0.2_i386.deb c4958c4295afaf35c8f0252ba8980882 1100 net extra znc-dbgsym_1.6.3-1ubuntu0.2_i386.ddeb 8cc4049913178efaf18c83bbef7c8b63 1142 net extra znc-dev-dbgsym_1.6.3-1ubuntu0.2_i386.ddeb 18fcf0fd2791d15b6a67907c0523d674 58658 net optional znc-dev_1.6.3-1ubuntu0.2_i386.deb 342a68f2b65dc4ed97e1aaa87221aa69 1132 net extra znc-perl-dbgsym_1.6.3-1ubuntu0.2_i386.ddeb 576fe2248bbb30a965dcf3037fcf308a 551018 net optional znc-perl_1.6.3-1ubuntu0.2_i386.deb 2bb8f52d11322655d2f5f11b74dade93 1134 net extra znc-python-dbgsym_1.6.3-1ubuntu0.2_i386.ddeb d9f1de28c3318ee3f20c8d9da6e85d7c 595108 net optional znc-python_1.6.3-1ubuntu0.2_i386.deb 3a283292bd590e869e524bd188255b53 1134 interpreters extra znc-tcl-dbgsym_1.6.3-1ubuntu0.2_i386.ddeb 7577b5ab4d29bea1338010d71459c918 29068 interpreters optional znc-tcl_1.6.3-1ubuntu0.2_i386.deb 7e690f3e2395e73163d40c01fe50fa78 1424276 net optional znc_1.6.3-1ubuntu0.2_i386.deb Original-Maintainer: Patrick Matthäi