Alerts This Week
Warning Icon 1 916
Alerts This Week
Warning Icon 1 916

Debian 9: DLA-2770-1 Critical: WeeChat Crash And Stability Fixes

debian lts
Calendar Grey September 30, 2021
Dist Debian Esm H88
An essential security patch for HexChat tackles several vulnerabilities, improving the reliability of Ubuntu-based platforms.
Several vulnerabilities were fixed in the chat client WeeChat
Topics%20covered

Topics Covered

security advisory critical software update debian crash issue weechat chat client

Summary

CVE-2020-8955

A crafted irc message 324 (channel mode) could result in a crash.

CVE-2020-9759

A crafted irc message 352 (who) could result in a crash.

CVE-2020-9760

A crafted irc message 005 (setting a new mode for a nick) could
result in a crash.

CVE-2021-40516

A crafted WebSocket frame could result in a crash in the Relay plugin.

For Debian 9 stretch, these problems have been fixed in version
1.6-1+deb9u3.

We recommend that you upgrade your weechat packages.

For the detailed security status of weechat please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/source-package/weechat

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS


Severity
critical
Lowest
Low
Medium
High
Critical

Package: weechat
Version: 1.6-1+deb9u3
CVE ID: CVE-2020-8955 CVE-2020-9759 CVE-2020-9760 CVE-2021-40516
Debian Bug: 951289 993803

Topics%20covered

Topics Covered

security advisory critical software update debian crash issue weechat chat client

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here