Fedora alert FEDORA-2017-2f30e218e7 (irssi)
From: | updates@fedoraproject.org | |
To: | package-announce@lists.fedoraproject.org | |
Subject: | [SECURITY] Fedora 26 Update: irssi-1.0.3-1.fc26 | |
Date: | Fri, 7 Jul 2017 23:20:09 +0000 (UTC) | |
Message-ID: | <20170707232009.38E3460C9AA9@bastion01.phx2.fedoraproject.org> |
-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2017-2f30e218e7 2017-07-07 22:40:59.827470 -------------------------------------------------------------------------------- Name : irssi Product : Fedora 26 Version : 1.0.3 Release : 1.fc26 URL : http://irssi.org/ Summary : Modular text mode IRC client with Perl scripting Description : Irssi is a modular IRC client with Perl scripting. Only text-mode frontend is currently supported. The GTK/GNOME frontend is no longer being maintained. -------------------------------------------------------------------------------- Update Information: This is an security fix for CVE-2017-9468, CVE-2017-9469. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1459456 - CVE-2017-9468 irssi: Null pointer dereference while receiving a DCC message without source nick/host https://bugzilla.redhat.com/show_bug.cgi?id=1459456 [ 2 ] Bug #1459457 - CVE-2017-9469 irssi: Invalid read when receiving certain incorrectly quoted DCC files https://bugzilla.redhat.com/show_bug.cgi?id=1459457 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade irssi' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgr... All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list -- package-announce@lists.fedoraproject.org To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org