X-Original-To: alpine-aports@lists.alpinelinux.org Received: from mail-lf0-f65.google.com (mail-lf0-f65.google.com [209.85.215.65]) by lists.alpinelinux.org (Postfix) with ESMTP id 16F425C417D for ; Wed, 18 Jan 2017 08:04:46 +0000 (GMT) Received: by mail-lf0-f65.google.com with SMTP id h65so560423lfi.3 for ; Wed, 18 Jan 2017 00:04:46 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:to:cc:subject:date:message-id; bh=1T3krwWvWl0+NvyU+PJRbJ3PSo5WvNV5zS5sDqyqjB0=; b=XJjinBfPhDl8Eu4lB7wO0ST+LtE8P6YMa3ovRMvFYfXbmDywNFH+kGXJH6z9Me7hiT 9n5Ax/F2YEzKFOKgmPcyUNUTwnF5hmLrGiSuTJ7bJnHfA8B5kbHdwruuEntcxMsLAs2+ MqKYvGQ2VauXUm24tyYqPn2XABO2mZaxhNe7vkLn3G3YFECqAMojFm0AXftK0t9MiBzo XZcE1YpgRIf16g7wE/uB1p2xQhg0IZIzrVTbVUq9iGzqSZRqO7hxYt1WnBBddbhb+bId EJ7T1NyqHYLJNhj81Ky9El5F0AM/C/iNwFx6JLyb4tgAZ6HtI7cjXEZv+PRjuCvgnHUO tkiQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:cc:subject:date:message-id; bh=1T3krwWvWl0+NvyU+PJRbJ3PSo5WvNV5zS5sDqyqjB0=; b=fsZobXTQ/fteWfTTUZhnLLBVP5DJgEvAVQmrH1elSZeNh3g/gzOZqSFN8Yztc5YONf Ju66hooE4gF2lO9DVljzz9FO40eyTdi+ZfFYTkeqQUIkuq6OAk6qa3qTyVfy03CHY93d 1iFGRiFSdaiH/ANS8392JrrV1gU2hvg4VpSnU23t26CaGfczXKtOC1kSxr0tdk2zugVQ ee8QKMbtFeViorCcK+F54KaLQuZpAze2TpRknvyxB3EBBSxZCAxRopUkI/tkasjGL0cV mxagypfDnobkVD1GQRa346mEzVg+p7c1OEz+p1/8e4aYpE5lqF0tisbm570XmIMEbSs5 TnwA== X-Gm-Message-State: AIkVDXIuHYvYcZrRt/82x6iVRep1wDkljlDn9XrD7Jmel66i1E5QmOi8pwnnKfqcVRTnpQ== X-Received: by 10.25.219.156 with SMTP id t28mr641796lfi.163.1484726685001; Wed, 18 Jan 2017 00:04:45 -0800 (PST) Received: from v3-5.util.wtbts.net ([83.145.235.199]) by smtp.gmail.com with ESMTPSA id g95sm10126405lfi.9.2017.01.18.00.04.43 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 18 Jan 2017 00:04:44 -0800 (PST) From: Sergei Lukin To: alpine-aports@lists.alpinelinux.org Cc: Sergei Lukin Subject: [alpine-aports] [PATCH v3.5] main/irssi: security upgrade to 0.8.21 - fixes #6691 Date: Wed, 18 Jan 2017 08:04:37 +0000 Message-Id: <20170118080437.7578-1-sergej.lukin@gmail.com> X-Mailer: git-send-email 2.11.0 X-Mailinglist: alpine-aports Precedence: list List-Id: Alpine Development List-Unsubscribe: List-Post: List-Help: List-Subscribe: CVE-2017-5193: A NULL pointer dereference in the nickcmp function. CVE-2017-5194: Use after free when receiving invalid nick message. CVE-2017-5356: Out of bounds read when Printing the value. CVE-2017-5195: Out of bounds read in certain incomplete control codes. CVE-2017-5196: Out of bounds read in certain incomplete character sequences. --- This release fixes four remote crash issues in older Irssi releases. There are no new features compared to 0.8.20 https://irssi.org/2017/01/05/irssi-0.8.21-released main/irssi/APKBUILD | 11 ++++++----- 1 file changed, 6 insertions(+), 5 deletions(-) diff --git a/main/irssi/APKBUILD b/main/irssi/APKBUILD index b7340a2a2d..c589d36c8d 100644 --- a/main/irssi/APKBUILD +++ b/main/irssi/APKBUILD @@ -1,7 +1,8 @@ +# Contributor: Sergei Lukin # Maintainer: Kiyoshi Aman pkgname=irssi -pkgver=0.8.20 -pkgrel=1 +pkgver=0.8.21 +pkgrel=0 pkgdesc="A modular textUI IRC client with IPv6 support" url="http://irssi.org/" arch="all" @@ -67,6 +68,6 @@ proxy() { mv "$pkgdir"/usr/lib/irssi/modules/libirc_proxy.* "$subpkgdir"/usr/lib/irssi/modules/ } -md5sums="67d48c5feec2d3b949d088aa4abc3601 irssi-0.8.20.tar.xz" -sha256sums="7882c4e821f5aac469c5e69e69d7e235f4986101285c675e81a9a95bfb20505a irssi-0.8.20.tar.xz" -sha512sums="ace39022a3e7461fc33cbd0e8c6635aa84c67fc4f6364b66747f860a4538a4b17bbd677e342fbfa9ae7e97783745f8d7dab350a27330ce14f1702386231296b1 irssi-0.8.20.tar.xz" +md5sums="b820760c3b4f3b0c24abe4db82b6366a irssi-0.8.21.tar.xz" +sha256sums="e433063b8714dcf17438126902c9a9d5c97944b3185ecd0fc5ae25c4959bf35a irssi-0.8.21.tar.xz" +sha512sums="110934ab85c8574fc76bce367c58378e28603898e63a5014a72170ffe441ffe3dbda432531e899176f5c4126f47d929a3a01a2f87bcacbfe0ba4d6d8cb31e642 irssi-0.8.21.tar.xz" -- 2.11.0 --- Unsubscribe: alpine-aports+unsubscribe@lists.alpinelinux.org Help: alpine-aports+help@lists.alpinelinux.org ---