Bug#894724: ncmpc: Crash in chat screen when another client sends a long line

2018-04-03 Thread Salvatore Bonaccorso
Control: retitle -1 ncmpc: CVE-2018-9240: Crash in chat screen when another client sends a long line Hi Jonathan, On Tue, Apr 03, 2018 at 04:48:23PM +0200, Jonathan Neusch??fer wrote: > I tagged this report as "security"-related, because the client can be > crashed by the actions of another

Bug#894724: ncmpc: Crash in chat screen when another client sends a long line

2018-04-03 Thread Jonathan Neuschäfer
Package: ncmpc Version: 0.27-1 Severity: normal Tags: patch security Hi, Ncmpc can be crashed when the user uses the chat screen and another client sends a long chat message, due to a NULL pointer dereference. I have a patch that fixes this for v0.27 (currently in Debian) and v0.29 (newest