Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

openSUSE: 2021:0595-1 Moderate: Irssi Memory Leak Issue

opensuse
Calendar Grey April 22, 2021
Dist Opensuse Esm H88
The latest patch for irssi addresses multiple vulnerabilities, correcting a memory overflow and resolving connectivity problems specifically on Fedora platforms.
An update that contains security fixes can now be installed

Description

This update for irssi fixes the following issues:

irssi was updated to 1.2.3 (boo#1184848)

- Fix the compilation of utf8proc (#1021)

- Fix wrong call to free. By Zero King (#1076)

- Fix a colour reset in true colour themes when encountering mIRC colours (#1059)

- Fix memory leak on malformed CAP requests (#1120)

- Fix an erroneous free of SASL data. Credit to Oss-Fuzz (#1128, #1130)

- Re-set the TLS flag when reconnecting (#1027, #1134)

- Fix the scrollback getting stuck after /clear (#1115, #1136)

- Fix the input of Ctrl+C as the first character (#1153, #1154)

- Fix crash on quit during unloading of modules on certain platforms

(#1167)

- Fix Irssi freezing input after Ctrl+Space on GLib >2.62 (#1180, #1183)

- Fix layout of IDCHANs. By Lauri Tirkkonen (#1197)

- Fix crash when server got reconnected before it was properly connected

(#1210, #1211)

- Fix multiple identical active caps (#1249)

- Minor help corrections...

Read the Full Advisory

Patch

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods

like YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

- openSUSE Backports SLE-15-SP2:

zypper in -t patch openSUSE-2021-595=1

Package List

- openSUSE Backports SLE-15-SP2 (aarch64 ppc64le s390x x86_64):

irssi-1.2.3-bp152.5.4.1

irssi-devel-1.2.3-bp152.5.4.1

References

https://bugzilla.suse.com/1184848

Announcement ID: openSUSE-SU-2021:0595-1
Rating: moderate
Affected Products: openSUSE Backports SLE-15-SP2 .

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here