Your message dated Fri, 03 Jul 2009 19:54:16 +0000
with message-id <[email protected]>
and subject line Bug#531357: fixed in irssi 0.8.10-3
has caused the Debian Bug report #531357,
regarding irssi WALLOPS heap off-by-one
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
531357: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=531357
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: irssi
Version: 1.3-18
Severity: grave
A remotely exploitable off-by-one was found in irssi 0.8.13. It's
exloitable from a server only.
See http://bugs.irssi.org/index.php?do=details&task_id=662 and
http://xorl.wordpress.com/2009/05/28/irssi-event_wallops-off-by-one-readwrite/
Best regards,
Craig
--- End Message ---
--- Begin Message ---
Source: irssi
Source-Version: 0.8.10-3
We believe that the bug you reported is fixed in the latest version of
irssi, which is due to be installed in the Debian FTP archive:
irssi-dev_0.8.10-3_powerpc.deb
to pool/main/i/irssi/irssi-dev_0.8.10-3_powerpc.deb
irssi-text_0.8.10-3_powerpc.deb
to pool/main/i/irssi/irssi-text_0.8.10-3_powerpc.deb
irssi_0.8.10-3.diff.gz
to pool/main/i/irssi/irssi_0.8.10-3.diff.gz
irssi_0.8.10-3.dsc
to pool/main/i/irssi/irssi_0.8.10-3.dsc
irssi_0.8.10-3_powerpc.deb
to pool/main/i/irssi/irssi_0.8.10-3_powerpc.deb
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Gerfried Fuchs <[email protected]> (supplier of updated irssi package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.7
Date: Fri, 19 Jun 2009 12:08:54 +0200
Source: irssi
Binary: irssi-dev irssi-text irssi
Architecture: source powerpc
Version: 0.8.10-3
Distribution: oldstable
Urgency: low
Maintainer: David Pashley <[email protected]>
Changed-By: Gerfried Fuchs <[email protected]>
Description:
irssi - terminal based IRC client
irssi-dev - text-mode version of the irssi IRC client development files
irssi-text - irssi dummy transition package
Closes: 531357
Changes:
irssi (0.8.10-3) oldstable; urgency=low
.
* Fetch patch wallops-fix to fix CVE-2009-1959 off-by-one in event_wallops
(closes: #531357)
Files:
4a07f543a25747f38529b2a1081ae9a5 713 net optional irssi_0.8.10-3.dsc
51ad83871d7577a01111ddea991cc1ec 158088 net optional irssi_0.8.10-3.diff.gz
36c582d785e9508b0a8bcb995b9eff0d 1101372 net optional
irssi_0.8.10-3_powerpc.deb
ac37a24e16408c6251f7b1bf2a3007a6 253398 net optional
irssi-dev_0.8.10-3_powerpc.deb
164f75484914a65752e815d630607eab 205350 net optional
irssi-text_0.8.10-3_powerpc.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
iEYEARECAAYFAko7lOQACgkQELuA/Ba9d8ZtRgCdEjTKKWLVGsJ2HkAwn6VRfxcn
JV4An2/gwAvIv4wf1S9FUN/+CVf0lo8u
=QYwG
-----END PGP SIGNATURE-----
--- End Message ---
