Re: UPDATE: net/znc 1.7.3 -> 1.7.4

2019-06-27 Thread Brad Smith
OK. On 6/26/2019 3:04 PM, Hiltjo Posthuma wrote: Hi, This updates the znc port from 1.7.3 to 1.7.4. It contains a security fix: Modules.cpp in ZNC before 1.7.4-rc1 allows remote authenticated non-admin users to escalate privileges and execute arbitrary code by loading a module with a crafted

Re: UPDATE: net/znc 1.7.3 -> 1.7.4

2019-06-27 Thread Solene Rapenne
On Wed, Jun 26, 2019 at 09:04:10PM +0200, Hiltjo Posthuma wrote: > Hi, > > This updates the znc port from 1.7.3 to 1.7.4. > > It contains a security fix: > > Modules.cpp in ZNC before 1.7.4-rc1 allows remote authenticated non-admin > users > to escalate privileges and execute arbitrary code by

UPDATE: net/znc 1.7.3 -> 1.7.4

2019-06-26 Thread Hiltjo Posthuma
Hi, This updates the znc port from 1.7.3 to 1.7.4. It contains a security fix: Modules.cpp in ZNC before 1.7.4-rc1 allows remote authenticated non-admin users to escalate privileges and execute arbitrary code by loading a module with a crafted name. Reference: