Debian Long Term Support / LTS Security Information / 2018 / Security Information -- DLA-1289-1 irssi

Debian Security Advisory

DLA-1289-1 irssi -- LTS security update

Date Reported:

22 Feb 2018

Affected Packages:

irssi

Vulnerable:

Yes

Security database references:

In Mitre's CVE dictionary: CVE-2018-7050, CVE-2018-7051, CVE-2018-7052.

More information:

It was discovered that there where a number of vulnerabilities in irssi, the terminal based IRC client:

• CVE-2018-7050

  Null pointer dereference for an empty nick.

• CVE-2018-7051

  Certain nick names could result in out-of-bounds access when printing theme strings.

• CVE-2018-7052

  When the number of windows exceeds the available space, a crash could occur due to another NULL pointer dereference.

For Debian 7 Wheezy, these issues have been fixed in irssi version 0.8.15-5+deb7u5.

We recommend that you upgrade your irssi packages.