Your message dated Thu, 02 Jul 2009 01:54:31 +0000
with message-id <[email protected]>
and subject line Bug#531357: fixed in irssi 0.8.12-7
has caused the Debian Bug report #531357,
regarding irssi WALLOPS heap off-by-one
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
531357: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=531357
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: irssi
Version: 1.3-18
Severity: grave

A remotely exploitable off-by-one was found in irssi 0.8.13. It's exloitable from a server only.
See http://bugs.irssi.org/index.php?do=details&task_id=662 and
http://xorl.wordpress.com/2009/05/28/irssi-event_wallops-off-by-one-readwrite/

Best regards,

Craig



--- End Message ---
--- Begin Message ---
Source: irssi
Source-Version: 0.8.12-7

We believe that the bug you reported is fixed in the latest version of
irssi, which is due to be installed in the Debian FTP archive:

irssi-dev_0.8.12-7_powerpc.deb
  to pool/main/i/irssi/irssi-dev_0.8.12-7_powerpc.deb
irssi_0.8.12-7.diff.gz
  to pool/main/i/irssi/irssi_0.8.12-7.diff.gz
irssi_0.8.12-7.dsc
  to pool/main/i/irssi/irssi_0.8.12-7.dsc
irssi_0.8.12-7_powerpc.deb
  to pool/main/i/irssi/irssi_0.8.12-7_powerpc.deb



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Gerfried Fuchs <[email protected]> (supplier of updated irssi package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.8
Date: Fri, 19 Jun 2009 10:35:10 +0200
Source: irssi
Binary: irssi irssi-dev
Architecture: source powerpc
Version: 0.8.12-7
Distribution: stable
Urgency: medium
Maintainer: David Pashley <[email protected]>
Changed-By: Gerfried Fuchs <[email protected]>
Description: 
 irssi      - terminal based IRC client
 irssi-dev  - text-mode version of the irssi IRC client development files
Closes: 531357
Changes: 
 irssi (0.8.12-7) stable; urgency=medium
 .
   * Fetch patch wallops-fix to fix CVE-2009-1959 off-by-one in event_wallops
     (closes: #531357)
Checksums-Sha1: 
 a8c6664f0749a7faaa669b5dff55f7baddbe11d0 1270 irssi_0.8.12-7.dsc
 ec60dc5d45dfc9add6ab20ae4c05fe788764365c 19383 irssi_0.8.12-7.diff.gz
 9813457ef9cd6b81a36d5c5fae49687bff81b6b9 1166826 irssi_0.8.12-7_powerpc.deb
 5a96bee55f854f4c6f3ea5b3ebfbe51f0f68a054 271424 irssi-dev_0.8.12-7_powerpc.deb
Checksums-Sha256: 
 04f48c30217a20fca36734c8f13ad3f522e6abb21f72fcf0c6ba583b382ce9fa 1270 
irssi_0.8.12-7.dsc
 5e3f47fb7f366152eced371c6ea9cedb02bb94e919dc48095d9223b055bdc755 19383 
irssi_0.8.12-7.diff.gz
 1ae1a10de72eaf872babb9f23d48b7a4843a0ba0dd462533eff00fc60a6e5d51 1166826 
irssi_0.8.12-7_powerpc.deb
 e8942bb0ecc5c34820038b8bfdd7d68f9982d0cee60aa4beadd74b1b027616fc 271424 
irssi-dev_0.8.12-7_powerpc.deb
Files: 
 42bae2ca9fc165ec296ab2e38e9fd64f 1270 net optional irssi_0.8.12-7.dsc
 c7e382ecb4e8ff5645e60fb76689371c 19383 net optional irssi_0.8.12-7.diff.gz
 ca41d27fcddb5e872d7dbbd5e7fc3466 1166826 net optional 
irssi_0.8.12-7_powerpc.deb
 63cb3068b827328483de9547c90bf042 271424 net optional 
irssi-dev_0.8.12-7_powerpc.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)

iEYEARECAAYFAko7jawACgkQELuA/Ba9d8ZkXgCgvOu8LLZFUoYvybLkzyqVVtlZ
scsAnRUv9FkuogRAtVC7WCWjuHkK0+no
=dDIk
-----END PGP SIGNATURE-----



--- End Message ---

Reply via email to