[ubuntu/artful-proposed] irssi 1.0.2-1ubuntu1 (Accepted)

Thu May 4 12:23:14 UTC 2017

irssi (1.0.2-1ubuntu1) artful; urgency=medium

  * Merge from Debian. Remaining changes:
    - Re-enabled 20fix_ssl_proxy_hostname_check.
      - When we have a proxy setting, we expect the CN to match
        the proxy hostname, not the server hostname.
    - d/p/90irc-ubuntu-com:
      + Add the Ubuntu network with irc.ubuntu.com as the server,
        which is currently a CNAME for chat.freenode.net.
    - d/p/03firsttimer_text:
      + Adapt 03debian_firsttimer_text so it tells you about
        connecting to Ubuntu and joining #ubuntu.

irssi (1.0.2-1) unstable; urgency=high

  * New upstream pure bugfix release:
    - Prevent some null-pointer crashes.
    - Fix compilation with OpenSSL 1.1.0.
    - Correct dereferencing of already freed server objects during
      output of netjoins. Found by APic. (closes: #857502)
    - Fix in command arg parser to detect missing arguments in tail place.
    - Fix regression that broke incoming DCC file transfers.
    - Fix issue with escaping \ in evaluated strings.

irssi (1.0.1-1) unstable; urgency=high

  * New upstream pure bugfix release:
    - Fix Perl compilation in object dir.
    - Disable EC cryptography on Solaris to fix build.
    - Fix incorrect HELP SERVER example.
    - Correct memory leak in /OP and /VOICE.
    - Fix regression that broke second level completion.
    - Correct missing NULL termination in perl_parse.
    - Sync broken mail.pl script.

irssi (1.0.0-1) unstable; urgency=medium

  * New upstream release.
  * Add patch 25tls-ssl-compat-defines provided by upstream's dx for backward
    compatibility to not require modules using these functions to change code.
  * Update patch 22fix-perl-hardening.

irssi (0.8.21-1) unstable; urgency=medium

  * New upstream security release (Closes: #850403):
    - CVE-2017-5193: NULL pointer dereference in the nickcmp function
    - CVE-2017-5194: Use-after-freee when receiving invalid nick message
    - CVE-2017-5195: Out-of-bounds read in certain incomplete control codes
    - CVE-2017-5196: Out-of-bounds read in certain incomplete character
      sequences
  * Remove patch 23fix-buf.pl which is included in upstream release.
  * Set PACKAGE_VERSION for configure as suggested by upstream.

Date: Thu, 04 May 2017 07:59:52 -0400
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/irssi/1.0.2-1ubuntu1
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 04 May 2017 07:59:52 -0400
Source: irssi
Binary: irssi irssi-dev
Architecture: source
Version: 1.0.2-1ubuntu1
Distribution: artful
Urgency: high
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Description:
 irssi      - terminal based IRC client
 irssi-dev  - terminal based IRC client - development files
Closes: 850403 857502
Changes:
 irssi (1.0.2-1ubuntu1) artful; urgency=medium
 .
   * Merge from Debian. Remaining changes:
     - Re-enabled 20fix_ssl_proxy_hostname_check.
       - When we have a proxy setting, we expect the CN to match
         the proxy hostname, not the server hostname.
     - d/p/90irc-ubuntu-com:
       + Add the Ubuntu network with irc.ubuntu.com as the server,
         which is currently a CNAME for chat.freenode.net.
     - d/p/03firsttimer_text:
       + Adapt 03debian_firsttimer_text so it tells you about
         connecting to Ubuntu and joining #ubuntu.
 .
 irssi (1.0.2-1) unstable; urgency=high
 .
   * New upstream pure bugfix release:
     - Prevent some null-pointer crashes.
     - Fix compilation with OpenSSL 1.1.0.
     - Correct dereferencing of already freed server objects during
       output of netjoins. Found by APic. (closes: #857502)
     - Fix in command arg parser to detect missing arguments in tail place.
     - Fix regression that broke incoming DCC file transfers.
     - Fix issue with escaping \ in evaluated strings.
 .
 irssi (1.0.1-1) unstable; urgency=high
 .
   * New upstream pure bugfix release:
     - Fix Perl compilation in object dir.
     - Disable EC cryptography on Solaris to fix build.
     - Fix incorrect HELP SERVER example.
     - Correct memory leak in /OP and /VOICE.
     - Fix regression that broke second level completion.
     - Correct missing NULL termination in perl_parse.
     - Sync broken mail.pl script.
 .
 irssi (1.0.0-1) unstable; urgency=medium
 .
   * New upstream release.
   * Add patch 25tls-ssl-compat-defines provided by upstream's dx for backward
     compatibility to not require modules using these functions to change code.
   * Update patch 22fix-perl-hardening.
 .
 irssi (0.8.21-1) unstable; urgency=medium
 .
   * New upstream security release (Closes: #850403):
     - CVE-2017-5193: NULL pointer dereference in the nickcmp function
     - CVE-2017-5194: Use-after-freee when receiving invalid nick message
     - CVE-2017-5195: Out-of-bounds read in certain incomplete control codes
     - CVE-2017-5196: Out-of-bounds read in certain incomplete character
       sequences
   * Remove patch 23fix-buf.pl which is included in upstream release.
   * Set PACKAGE_VERSION for configure as suggested by upstream.
Checksums-Sha1:
 99fc630defbd4c1678fbbd4d44528d445bf74f9e 2003 irssi_1.0.2-1ubuntu1.dsc
 37d2e6bd58554204d142acbeff67d9aea70d7305 1027912 irssi_1.0.2.orig.tar.xz
 08ced7f9a7cb86dd16624d90f03770d4b549eb97 22508 irssi_1.0.2-1ubuntu1.debian.tar.xz
 810abef9a99893148376de44d8e6ab035cef6021 6514 irssi_1.0.2-1ubuntu1_source.buildinfo
Checksums-Sha256:
 9964496fddd89f2750174d6841b97b668b2eea3138a8d40ba38099ad10f87c17 2003 irssi_1.0.2-1ubuntu1.dsc
 5c1c3cc2caf103aad073fadeb000e0f8cb3b416833a7f43ceb8bd9fcf275fbe9 1027912 irssi_1.0.2.orig.tar.xz
 e20dec555dbd25a1f3c4b493a4cfa735985367ce4f38c250f55d394865b881aa 22508 irssi_1.0.2-1ubuntu1.debian.tar.xz
 aa9842a37a8d39315bea209a8fa9047a0a6e05c3924770386060757852e65ea6 6514 irssi_1.0.2-1ubuntu1_source.buildinfo
Files:
 dd4b93c39e84ad920a45f75aec95ba34 2003 net optional irssi_1.0.2-1ubuntu1.dsc
 6de949527c07f0930f0c6c95a8d8b99a 1027912 net optional irssi_1.0.2.orig.tar.xz
 84de59f058b467399053e85c93f8d09c 22508 net optional irssi_1.0.2-1ubuntu1.debian.tar.xz
 29b037526bb2eb7dcdd27ce6a4657811 6514 net optional irssi_1.0.2-1ubuntu1_source.buildinfo
Original-Maintainer: Rhonda D'Vine <rhonda at debian.org>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQIcBAEBCgAGBQJZCxz4AAoJEGVp2FWnRL6TZJYQAKzshomWqv01XBWe6qKbWUQD
vejCmoazUHWFVYnjQMSkEi/Ceb319V3hRXkrjqG40ud2UwZbzZ4IpeSZfYVlrbeB
tOXFthf+YpPMRd7nF7L6hv0xNmA2c9JQddKwAJpVHc5VtKGZhyh7GhWRVew/ZFvV
5RaV6DeZSENn2f3QRRoJIjGpxICIUwfiT7GQgPSn92avrIfk9ZIFDvxF/8PCffyw
khcyZ4qDF/lHSad72wejM401Dcr+aFK2WGsvli1G1YLizg+feV+k92YiP+k+v+SY
Ic5i1wTzQ6vF4Mby/C9RGv3xTyScJnnDeaxAy2Esh5+ef5J0ZMw6jqjFW63bzBrE
/oaMAJJmxHyThyycNNAd29g0u2cbu2ImYzXS///AwekCPXMsD1d5FiJBgIm7MzM5
1T9kEocmLjkN01LoGCQMfCGve1+hJIbJ4xnXTj3aQ02gD9lqsFbJDK6c4Nnzw6K9
3/ra1hDpNK2lhITZr4rsEQBqaLgXEutpixkYga6l8j+GFznBSW0F41E1ZJ/Jjl1l
1JdYP/nDrsM5mwYcZNMiqsLsiHqc3/3B6WO4h2rmZSVq/62bHqthWVVW2iPmZLdR
8WsU5RPKth5TLkbELtH4A9nQ9cb3DwhQtO2MxMV45sTwutufn1rZmGsYXJT2VuAS
P87dIFF2vF9NHUeH05q/
=XqqA
-----END PGP SIGNATURE-----