Ubuntu
weechat package

  1. Bug #1686478
  2. Comment #8

Comment 8 for bug 1686478

Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package weechat - 0.4.2-3ubuntu0.1

---------------
weechat (0.4.2-3ubuntu0.1) trusty-security; urgency=medium

  * SECURITY UPDATE: remote buffer overflow crash by sending a filename
    via DCC to the IRC plugin (LP: #1686478)
    - debian/patches/03_fix_CVE-2017-8073.patch: Fix quote removal in
      irc_ctcp_dcc_filename_without_quotes function in
      src/plugins/irc/irc-ctcp.c. Patch from 1.7.1 via Debian.
    - CVE-2017-8073

 -- Jeremy Bicha <email address hidden> Wed, 26 Apr 2017 14:10:49 -0400