Alerts This Week
Warning Icon 1 626
Alerts This Week
Warning Icon 1 626

Slackware 14.x: 2019-011-01 Critical: Irssi Security Fix

slackware
Calendar Grey January 11, 2019
Dist Slackware Esm H88
Fresh updates for irssi have been made available for Slackware 14.x, targeting significant problems identified in earlier iterations.
New irssi packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues

Summary

Here are the details from the Slackware 14.2 ChangeLog: patches/packages/irssi-1.1.2-i586-1_slack14.2.txz: Upgraded. This update addresses bugs including security and stability issues: A NULL pointer dereference occurs for an "empty" nick. Certain nick names could result in out-of-bounds access when printing theme strings. Crash due to a NULL pointer dereference w hen the number of windows exceeds the available space. Use-after-free when SASL messages are received in an unexpected order. Use-after-free when a server is disconnected during netsplits. Use-after-free when hidden lines were expired from the scroll buffer. For more information, see: https://www.cve.org/CVERecord?id=CVE-2018-7050 https://www.cve.org/CVERecord?id=CVE-2018-7051 https://www.cve.org/CVERecord?id=CVE-2018-7052 https://www.cve.org/CVERecord?id=CVE-2018-7053 https://www.cve.org/CVERecord?id=CVE-2018-7054 https://www.cve.org/CVERecord?id=CVE-2019-5882 (* Security

Read the Full Advisory

Where Find New Packages

Thanks to the friendly folks at the OSU Open Source Lab (https://osuosl.org/) for donating FTP and rsync hosting to the Slackware project! :-)
Also see the "Get Slack" section on http://www.slackware.com/ for additional mirror sites near you.
Updated package for Slackware 14.0:
Updated package for Slackware x86_64 14.0:
Updated package for Slackware 14.1:
Updated package for Slackware x86_64 14.1:
Updated package for Slackware 14.2:
Updated package for Slackware x86_64 14.2:
Updated package for Slackware -current:
Updated package for Slackware x86_64 -current:

MD5 Signatures

Slackware 14.0 package: 118b1b29671bdc6baf5395e6f61a01cb irssi-1.1.2-i486-1_slack14.0.txz
Slackware x86_64 14.0 package: 64ba78a75fc90f87a07d46dc83401ec3 irssi-1.1.2-x86_64-1_slack14.0.txz
Slackware 14.1 package: 4041a1c4e5c085cfb3620bf96060fe86 irssi-1.1.2-i486-1_slack14.1.txz
Slackware x86_64 14.1 package: 1c0e906da9e4b661296f568239ed9cd9 irssi-1.1.2-x86_64-1_slack14.1.txz
Slackware 14.2 package: f0b3aaad26e6f973d02d4787ecc55d36 irssi-1.1.2-i586-1_slack14.2.txz
Slackware x86_64 14.2 package: de513f411e82498d0e8a5ee928f67fcc irssi-1.1.2-x86_64-1_slack14.2.txz
Slackware -current package: 2305420644a7a6f787616ddb14f9249a n/irssi-1.1.2-i586-1.txz
Slackware x86_64 -current package: 2b657957f83393f58e729442cee236a9 n/irssi-1.1.2-x86_64-1.txz

Severity
critical
Lowest
Low
Medium
High
Critical

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Installation Instructions

Installation instructions: Upgrade the package as root: # upgradepkg irssi-1.1.2-i586-1_slack14.2.txz

Related News

Your message here