[Bug 144869] Please sync irssi-scripts (universe) from Debian unstable (main)

Michael Bienia michael at vorlon.ping.de
Tue Sep 25 18:18:20 BST 2007


Public bug reported:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: RIPEMD160

 affects ubuntu/irssi-scripts
 status confirmed
 subscribe ubuntu-archive

Please sync irssi-scripts (universe) from Debian unstable (main).
Changelog since current gutsy version 20070412:

irssi-scripts (20070925) unstable; urgency=medium

  * Fix multiple CRLF injection vulnerabilities in "now playing" scripts.
    Thanks to Wouter Coekaerts for the patches.
    (Closes: #439840, CVE-2007-4396, CVE-2007-4398).

 -- Christoph Berg <myon at debian.org>  Tue, 25 Sep 2007 00:11:46 +0200


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.4 (GNU/Linux)

iQCVAwUBRvlCwaPP1313boLqAQOd5wQAvl04RP1wawBnvJEvnfmzyM8Ls9T+2VtU
pm3j7tkhZ3f4DnIGZGOIfUuNmAPu8SFNSlTnlHZgysqix7GGq5/ZWY/vmE8UBcW5
WtHVvCCafGcsCohvSLJ8lTsWkXZq9GyErSqW42lG7t8pQ+VMSLdlCVE+ImHgY/Ej
mhyxy2eLUVA=
=KdmS
-----END PGP SIGNATURE-----

** Affects: irssi-scripts (Ubuntu)
     Importance: Undecided
         Status: Confirmed

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2007-4396

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2007-4398

-- 
Please sync irssi-scripts (universe) from Debian unstable (main)
https://bugs.launchpad.net/bugs/144869
You received this bug notification because you are a member of Ubuntu
Package Archive Administrators, which is a direct subscriber.



More information about the ubuntu-archive mailing list