USN-3317-1: Irssi vulnerabilities
USN-3317-1: Irssi vulnerabilities Ubuntu Security Notice USN-3317-1 12th June, 2017 irssi vulnerabilities A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 17.04 Ubuntu 16.10 Ubuntu 16.04 LTS Ubuntu 14.04 LTS Summary Irssi could be made to crash if it received specially crafted network traffic. Software description irssi – terminal based IRC client Details It was discovered that Irssi incorrectly handled certain DCC messages. Amalicious IRC server could use this issue to cause Irssi to crash,resulting in a denial of service. (CVE-2017-9468) Joseph Bisch discovered that Irssi incorrectly handled receivingincorrectly quoted DCC files. A remote attacker could possibly use thisissue to cause Irssi to crash, resulting in a denial of service.(CVE-2017-9469) Update instructions The problem can be corrected by updating your system to the following package version: Ubuntu 17.04: irssi 0.8.20-2ubuntu2.1 Ubuntu 16.10: irssi 0.8.19-1ubuntu2.2 Ubuntu 16.04 LTS: [ more… ]