oss-sec mailing list archives

CVE request: irssi 0.8.15

From: Tobias Heinlein <keytoaster () gentoo org>
Date: Sun, 11 Apr 2010 12:02:28 +0200

Not sure if everyone has seen this yet:

http://irssi.org/

"This release fixes two security issues: The first being that Irssi
didn't check hostname on SSL connections and the other being a hard to
exploit remote crash bug."

Some further information can be found in the ChangeLog:
http://irssi.org/news/ChangeLog

Current thread:

CVE request: irssi 0.8.15 Tobias Heinlein (Apr 11)
- <Possible follow-ups>
- Re: CVE request: irssi 0.8.15 Josh Bressers (Apr 12)
  - Re: CVE request: irssi 0.8.15 Steven M. Christey (Apr 12)
    - Re: CVE request: irssi 0.8.15 Josh Bressers (Apr 13)
  - Re: CVE request: irssi 0.8.15 Tomas Hoger (Apr 13)
- Re: CVE request: irssi 0.8.15 Wouter Coekaerts (Apr 13)
  - Re: Re: CVE request: irssi 0.8.15 Jamie Strandboge (Apr 17)
    - Re: Re: CVE request: irssi 0.8.15 Wouter Coekaerts (Apr 26)
    - Re: Re: CVE request: irssi 0.8.15 Steve Langasek (Apr 27)