CVSROOT: /cvs Module name: ports Changes by: st...@cvs.openbsd.org 2017/01/05 14:37:52
Modified files: net/irssi : Makefile distinfo Log message: SECURITY update to irssi-0.8.21 (minimal patches to fix security issues only) - ok jca@ krw@ (a) A NULL pointer dereference in the nickcmp function found by Joseph Bisch. (CWE-690) (b) Use after free when receiving invalid nick message (Issue #466, CWE-146) (c) Out of bounds read in certain incomplete control codes found by Joseph Bisch. (CWE-126) (d) Out of bounds read in certain incomplete character sequences found by Hanno Böck and independently by J. Bisch. (CWE-126)