Hi,

thanks for the notice.
I'll prepare a new package upload tonight.

Thanks,

Thomas

Am Freitag, den 09.09.2011 um 0:58 schrieb Timo Juhani Lindfors:
> Package: quassel
> Version: 0.6.3-2
> Severity: important
> Tags: security
> 
> When people send me
> 
> 00000010  75 74 61 73 21 7a 7a 40  31 37 38 2d 33 37 2d 31  |utas!zz@178-37-1|
> 00000020  30 34 2d 34 32 2e 61 64  73 6c 2e 69 6e 65 74 69  |04-42.adsl.ineti|
> 00000030  61 2e 70 6c 20 4a 4f 49  4e 20 23 71 75 61 73 73  |a.pl JOIN #quass|
> 00000040  65 6c 0d 0a 37 36 36 37  30 3a 55 c3 8c a6 5b 7e  |el..76670:U...[~|
> 00000050  8a 26 3a 6b 75 74 61 73  21 7a 7a 40 31 37 38 2d  |.&:kutas!zz@178-|
> 00000060  33 37 2d 31 30 34 2d 34  32 2e 61 64 73 6c 2e 69  |37-104-42.adsl.i|
> 00000070  6e 65 74 69 61 2e 70 6c  20 50 52 49 56 4d 53 47  |netia.pl PRIVMSG|
> 00000080  20 23 71 75 61 73 73 65  6c 20 3a 01 41 43 54 49  | #quassel :.ACTI|
> 00000090  4f 4e 20 01 01 56 45 52  53 49 4f 4e 01 01 56 45  |ON ..VERSION..VE|
> 000000a0  52 53 49 4f 4e 01 01 56  45 52 53 49 4f 4e 01 01  |RSION..VERSION..|
> 000000b0  56 45 52 53 49 4f 4e 01  01 56 45 52 53 49 4f 4e  |VERSION..VERSION|
> 000000c0  01 01 56 45 52 53 49 4f  4e 01 01 56 45 52 53 49  |..VERSION..VERSI|
> 000000d0  4f 4e 01 01 56 45 52 53  49 4f 4e 01 01 56 45 52  |ON..VERSION..VER|
> 000000e0  53 49 4f 4e 01 01 56 45  52 53 49 4f 4e 01 01 56  |SION..VERSION..V|
> 000000f0  45 52 53 49 4f 4e 01 01  56 45 52 53 49 4f 4e 01  |ERSION..VERSION.|
> 00000100  01 56 45 52 53 49 4f 4e  01 01 56 45 52 53 49 4f  |.VERSION..VERSIO|
> 00000110  4e 01 01 56 45 52 53 49  4f 4e 01 01 56 45 52 53  |N..VERSION..VERS|
> 00000120  49 4f 4e 01 01 56 45 52  53 49 4f 4e 01 01 56 45  |ION..VERSION..VE|
> 00000130  52 53 49 4f 4e 01 01 56  45 52 53 49 4f 4e 01 01  |RSION..VERSION..|
> 00000140  56 45 52 53 49 4f 4e 01  01 56 45 52 53 49 4f 4e  |VERSION..VERSION|
> 00000150  01 01 56 45 52 53 49 4f  4e 01 01 56 45 52 53 49  |..VERSION..VERSI|
> 00000160  4f 4e 01 01 56 45 52 53  49 4f 4e 01 01 56 45 52  |ON..VERSION..VER|
> 00000170  53 49 4f 4e 01 01 56 45  52 53 49 4f 4e 01 01 56  |SION..VERSION..V|
> 00000180  45 52 53 49 4f 4e 01 01  56 45 52 53 49 4f 4e 01  |ERSION..VERSION.|
> 00000190  01 56 45 52 53 49 4f 4e  01 01 56 45 52 53 49 4f  |.VERSION..VERSIO|
> 000001a0  4e 01 01 56 45 52 53 49  4f 4e 01 01 56 45 52 53  |N..VERSION..VERS|
> 000001b0  49 4f 4e 01 01 56 45 52  53 49 4f 4e 01 01 56 45  |ION..VERSION..VE|
> 000001c0  52 53 49 4f 4e 01 01 56  45 52 53 49 4f 4e 01 01  |RSION..VERSION..|
> 000001d0  56 45 52 53 49 4f 4e 01  01 0d 0a                 |VERSION....|
> 
> quasselcore crashes. The upstream bug report is
> 
> http://bugs.quassel-irc.org/issues/1095
> 
> Gentoo bug report is
> 
> https://bugs.gentoo.org/382313
> 
> (there is some mention about requesting a CVE)
> 
> Workaround:
> 
> 1) Settings->Configure Quassel->IRC->Ignore List->New
> 2) Strictness: Dynamic
> 3) Rule Type: CTCP
> 4) Ignore Rule: * VERSION
> 5) Scope: Global
> 
> 
> Where is the Vcs for quassel? I could prepare a fix.
> 
> 
> -- System Information:
> Debian Release: 6.0.2
>   APT prefers stable-updates
>   APT policy: (500, 'stable-updates'), (500, 'stable')
> Architecture: amd64 (x86_64)
> 
> Kernel: Linux 2.6.32-5-amd64 (SMP w/1 CPU core)
> Locale: LANG=C, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)
> Shell: /bin/sh linked to /bin/dash
> 
> Versions of packages quassel depends on:
> ii  dbus-x11            1.2.24-4+squeeze1    simple interprocess messaging 
> syst
> ii  gawk                1:3.1.7.dfsg-5       GNU awk, a pattern scanning and 
> pr
> ii  libc6               2.11.2-10            Embedded GNU C Library: Shared 
> lib
> ii  libgcc1             1:4.4.5-8            GCC support library
> ii  libphonon4          4:4.6.0really4.4.2-1 the core library of the Phonon 
> mul
> ii  libqt4-dbus         4:4.6.3-4+squeeze1   Qt 4 D-Bus module
> ii  libqt4-network      4:4.6.3-4+squeeze1   Qt 4 network module
> ii  libqt4-script       4:4.6.3-4+squeeze1   Qt 4 script module
> ii  libqt4-sql          4:4.6.3-4+squeeze1   Qt 4 SQL module
> ii  libqt4-sql-sqlite   4:4.6.3-4+squeeze1   Qt 4 SQLite 3 database driver
> ii  libqt4-webkit       4:4.6.3-4+squeeze1   Qt 4 WebKit module
> ii  libqt4-xmlpatterns  4:4.6.3-4+squeeze1   Qt 4 XML patterns module
> ii  libqtcore4          4:4.6.3-4+squeeze1   Qt 4 core module
> ii  libqtgui4           4:4.6.3-4+squeeze1   Qt 4 GUI module
> ii  libstdc++6          4.4.5-8              The GNU Standard C++ Library v3
> ii  phonon              4:4.6.0really4.4.2-1 metapackage for the Phonon 
> multime
> ii  quassel-data        0.6.3-2              distributed IRC client - shared 
> da
> 
> quassel recommends no packages.
> 
> quassel suggests no packages.
> 
> -- no debconf information



--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to