[Bug 144869] Please sync irssi-scripts (universe) from Debian unstable (main)
Michael Bienia
michael at vorlon.ping.de
Tue Sep 25 18:18:20 BST 2007
Public bug reported:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: RIPEMD160
affects ubuntu/irssi-scripts
status confirmed
subscribe ubuntu-archive
Please sync irssi-scripts (universe) from Debian unstable (main).
Changelog since current gutsy version 20070412:
irssi-scripts (20070925) unstable; urgency=medium
* Fix multiple CRLF injection vulnerabilities in "now playing" scripts.
Thanks to Wouter Coekaerts for the patches.
(Closes: #439840, CVE-2007-4396, CVE-2007-4398).
-- Christoph Berg <myon at debian.org> Tue, 25 Sep 2007 00:11:46 +0200
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.4 (GNU/Linux)
iQCVAwUBRvlCwaPP1313boLqAQOd5wQAvl04RP1wawBnvJEvnfmzyM8Ls9T+2VtU
pm3j7tkhZ3f4DnIGZGOIfUuNmAPu8SFNSlTnlHZgysqix7GGq5/ZWY/vmE8UBcW5
WtHVvCCafGcsCohvSLJ8lTsWkXZq9GyErSqW42lG7t8pQ+VMSLdlCVE+ImHgY/Ej
mhyxy2eLUVA=
=KdmS
-----END PGP SIGNATURE-----
** Affects: irssi-scripts (Ubuntu)
Importance: Undecided
Status: Confirmed
** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2007-4396
** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2007-4398
--
Please sync irssi-scripts (universe) from Debian unstable (main)
https://bugs.launchpad.net/bugs/144869
You received this bug notification because you are a member of Ubuntu
Package Archive Administrators, which is a direct subscriber.
More information about the ubuntu-archive
mailing list