diff options
| author | Ailin Nemui <ailin@z30a.localdomain> | 2017-06-08 19:40:06 +0200 |
|---|---|---|
| committer | Ailin Nemui <ailin@z30a.localdomain> | 2017-06-08 19:40:06 +0200 |
| commit | 63599d405ac18718e64878ea17f6abcfe4032b52 (patch) | |
| tree | 66c371aae17db56a10e28ea114389dd72bc45e5c /_data | |
| parent | 2f634e8e233f2dc61e38b7dbc02236d0264242f3 (diff) | |
| download | irssi.github.io-63599d405ac18718e64878ea17f6abcfe4032b52.zip | |
add 2017-06-06
Diffstat (limited to '_data')
| -rw-r--r-- | _data/security.yml | 29 |
1 files changed, 26 insertions, 3 deletions
diff --git a/_data/security.yml b/_data/security.yml index 64d5c64..a87cde8 100644 --- a/_data/security.yml +++ b/_data/security.yml @@ -61,7 +61,7 @@ to: 0.8.20 fixed_version: 0.8.21 credit: ~ - description: "Use after free when receiving invalid nick message\n" + description: 'Use after free when receiving invalid nick message' - cve: CVE-2017-5356 exploitable_by: formats @@ -88,7 +88,7 @@ to: 0.8.20 fixed_version: 0.8.21 credit: 'Hanno Böck and independently by Joseph Bisch' - description: "Out of bounds read in certain incomplete character sequences\n" + description: 'Out of bounds read in certain incomplete character sequences' - name: IRSSI-SA-2017-03 release_date: 2017-03-10 @@ -103,4 +103,27 @@ to: 1.0.1 fixed_version: 1.0.2 credit: APic - description: "Use after free while producing list of netjoins\n" + description: 'Use after free while producing list of netjoins' +- + name: IRSSI-SA-2017-06 + release_date: 2017-06-06 + git_commit: fb08fc7f1aa6b2e616413d003bf021612301ad55 + bugs: + - + cve: CVE-2017-9468 + exploitable_by: server + affected_versions: + from: '*' + to: 1.0.2 + fixed_version: 1.0.3 + credit: 'Joseph Bisch' + description: 'NULL pointer dereference when receiving a DCC message without source nick/host' + - + cve: CVE-2017-9469 + exploitable_by: client + affected_versions: + from: '*' + to: 1.0.2 + fixed_version: 1.0.3 + credit: 'Joseph Bisch' + description: 'Out of bounds read when parsing incorrectly quoted DCC files'
\ No newline at end of file |