Hi,

A buffer overflow in decoding of IRC colors in strings has been fixed.

Versions affected are 0.3.6 to 0.3.9 (and devel), problem is fixed in
new stable version 0.3.9.1 (and in devel).

Therefore, all users of a stable version are invited to upgrade to
version 0.3.9.1.
Users with devel version can update to latest devel, which contains
the fix.

If you can not upgrade now, it is recommended to disable IRC colors in
messages using following command:
  /set irc.network.colors_receive off

More info on WeeChat security page: http://weechat.org/security/

-- 
Cordialement / Best regards
Sébastien.

web: flashtux.org / weechat.org      mail: [email protected]
irc: FlashCode @ irc.freenode.net    xmpp: [email protected]

Attachment: signature.asc
Description: Digital signature

_______________________________________________
Weechat-dev mailing list
[email protected]
https://lists.nongnu.org/mailman/listinfo/weechat-dev

Reply via email to