| |||||||||||||||||||
Fedora alert FEDORA-2010-9312 (ircd-ratbox)
-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2010-9312 2010-05-31 17:43:32 -------------------------------------------------------------------------------- Name : ircd-ratbox Product : Fedora 12 Version : 2.2.8 Release : 7.fc12 URL : http://www.ircd-ratbox.org/ Summary : Ircd-ratbox is an advanced, stable and fast ircd Description : ircd-ratbox is an advanced, stable, fast ircd. It is an evolution where ircd-hybrid left off around version 7-rc1. It supports the TS3 and TS5 protocols, and is used on EFnet and other IRC networks. -------------------------------------------------------------------------------- Update Information: Two vulnerabilities were reported in ircd-hybrid, ircd-ratbox, and oftc-hybrid. The first is an integer overflow that can lead to a denial of service or, possibly, the execution of arbitrary code on the ircd server (CVE-2009-4016 (patch [1])), the second is a NULL pointer dereference that can lead to a denial of service of the ircd server (CVE-2010-0300 (patch [2])). This has been corrected in upstream ircd-ratbox 2.2.9 [3]. CVE-2010-0300 may be ircd- ratbox specific, however CVE-2009-4016 affects both ircd servers. [1] http://ircd.ratbox.org/cgi-bin/index.cgi/ircd- ratbox/branches/RATBOX_3_0/src/cache.c?r1=26334&r2=26732 [2] http://trac.oftc.net/projects/oftc-hybrid/changeset/1062 [3] http://lists.ratbox.org/pipermail/ircd-ratbox/2010-Januar... -------------------------------------------------------------------------------- ChangeLog: * Sat May 29 2010 Rakesh Pandit <rakesh@fedoraproject.org> - 2.2.9-7 - BZ Bug 559383 - CVE-2009-4016 CVE-2010-0300 ircd-{hybrid,ratbox}: multiple vulnerabilities -------------------------------------------------------------------------------- References: [ 1 ] Bug #559382 - CVE-2009-4016 CVE-2010-0300 ircd-{hybrid,ratbox}: multiple vulnerabilities https://bugzilla.redhat.com/show_bug.cgi?id=559382 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update ircd-ratbox' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list package-announce@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/package-... (Log in to post comments)
|
|||||||||||||||||||