Ubuntu 17.04: USN-3317-1 Critical: Irssi Denial of Service

ubuntu

June 12, 2017

Irssi could be made to crash if it received specially crafted network traffic.

Summary

Irssi could be made to crash if it received specially crafted network

traffic.

Software Description:

- irssi: terminal based IRC client

Details:

It was discovered that Irssi incorrectly handled certain DCC messages. A

malicious IRC server could use this issue to cause Irssi to crash,

resulting in a denial of service. (CVE-2017-9468)

Joseph Bisch discovered that Irssi incorrectly handled receiving

incorrectly quoted DCC files. A remote attacker could possibly use this

issue to cause Irssi to crash, resulting in a denial of service.

(CVE-2017-9469)

Topics Covered

security advisory denial of service critical software update Ubuntu network traffic irssi

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 17.04:
  irssi                           0.8.20-2ubuntu2.1

Ubuntu 16.10:
  irssi                           0.8.19-1ubuntu2.2

Ubuntu 16.04 LTS:
  irssi                           0.8.19-1ubuntu1.4

Ubuntu 14.04 LTS:
  irssi                           0.8.15-5ubuntu3.2

After a standard system update you need to restart Irssi to make all the
necessary changes.