Your message dated Thu, 12 Sep 2019 15:39:10 +0000
with message-id <[email protected]>
and subject line Bug#936074: fixed in irssi 1.2.2-1
has caused the Debian Bug report #936074,
regarding irssi: CVE-2019-15717
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
936074: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=936074
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: irssi
Version: 1.2.1-1
Severity: important
Tags: security upstream
Control: found -1 1.2.0-2
Hi,
The following vulnerability was published for irssi.
CVE-2019-15717[0]:
| Irssi 1.2.x before 1.2.2 has a use-after-free if the IRC server sends
| a double CAP.
If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.
For further information see:
[0] https://security-tracker.debian.org/tracker/CVE-2019-15717
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15717
[1] https://irssi.org/security/irssi_sa_2019_08.txt
[2]
https://github.com/irssi/irssi/commit/5a4e7ab659aba2855895c9f43e9a7a131f4e89b3
Regards,
Salvatore
--- End Message ---
--- Begin Message ---
Source: irssi
Source-Version: 1.2.2-1
We believe that the bug you reported is fixed in the latest version of
irssi, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Rhonda D'Vine <[email protected]> (supplier of updated irssi package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Thu, 12 Sep 2019 16:11:43 +0200
Source: irssi
Architecture: source
Version: 1.2.2-1
Distribution: unstable
Urgency: high
Maintainer: Rhonda D'Vine <[email protected]>
Changed-By: Rhonda D'Vine <[email protected]>
Closes: 926493 935813 936074
Changes:
irssi (1.2.2-1) unstable; urgency=high
.
* New upstream bugfix release:
- fixes use-after-free issue, CVE-2019-15717 (closes: #936074)
- fixes intermittent segfault on startup (closes: #935813)
* Rename the debian/NEWS file so that it actually gets installed into the
binary packages (closes: #926493)
Checksums-Sha1:
e626120a465e1d9fdef523bf4b06fb967c7e39f3 2233 irssi_1.2.2-1.dsc
9a85b72bfbe327eecf223a03433a9979b50a039a 1140844 irssi_1.2.2.orig.tar.xz
1e8265e101e25f94725be03b1e033f4216270829 195 irssi_1.2.2.orig.tar.xz.asc
ee647e34e6fac914ca5b909b04776afe48ce3087 21300 irssi_1.2.2-1.debian.tar.xz
356b5caa0eecf5e32fad2c3d746df42dd26872ec 5300 irssi_1.2.2-1_source.buildinfo
Checksums-Sha256:
d8e3c1df5a257a4f11ff16a7dabf227e5c0c61c7b689ce8f70d6f933ec56fe27 2233
irssi_1.2.2-1.dsc
6727060c918568ba2ff4295ad736128dba0b995d7b20491bca11f593bd857578 1140844
irssi_1.2.2.orig.tar.xz
aff7b926afc283a2821ba4abec9d8f5d01ad2122d744dc2aec81af6ff10b67ea 195
irssi_1.2.2.orig.tar.xz.asc
639ca5b61b65d869cbdd05d9a62b8577eb7a750993855265e9aedafe2e5dc2fa 21300
irssi_1.2.2-1.debian.tar.xz
713e91e34d19e47f952c6b2c296dc9c778acbab2a0011cd01e154ded8a3400e3 5300
irssi_1.2.2-1_source.buildinfo
Files:
be756029f46d26aa252be3492abc7987 2233 net optional irssi_1.2.2-1.dsc
8547f89e014e23e1bbbb665bcf7e2f70 1140844 net optional irssi_1.2.2.orig.tar.xz
41a4c77472524ac88d27b11cff99cfe6 195 net optional irssi_1.2.2.orig.tar.xz.asc
32d76477621e86cc29cfb9fbd06eb688 21300 net optional irssi_1.2.2-1.debian.tar.xz
9520df52f1cb86f2a088785213cff2b1 5300 net optional
irssi_1.2.2-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=qRGQ
-----END PGP SIGNATURE-----
--- End Message ---
