936197 – <net-irc/ergo-2.13.1: exploitable deadlock leading to denial of service

Bug 936197 - <net-irc/ergo-2.13.1: exploitable deadlock leading to denial of service

Summary: <net-irc/ergo-2.13.1: exploitable deadlock leading to denial of service

Status:	CONFIRMED

Alias:	None

Product:	Gentoo Security
Classification:	Unclassified
Component:	Vulnerabilities (show other bugs)
Hardware:	All Linux

Importance:	Normal normal (vote)
Assignee:	Gentoo Security

URL:
Whiteboard:	B3 [cleanup glsa?]
Keywords:

Depends on:	936198
Blocks:
	Show dependency tree

Reported:	2024-07-17 05:36 UTC by Sam James
Modified:	2024-07-17 10:03 UTC (History)
CC List:	1 user (show)

See Also:	https://github.com/ergochat/ergo/issues/2149
Package list:
Runtime testing required:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Sam James archtester

2024-07-17 05:36:18 UTC

See https://github.com/ergochat/ergo/releases/tag/v2.13.1.

"""
Security
    Fixed an exploitable deadlock that could lead to a denial of service (#2149)
"""

-> https://github.com/ergochat/ergo/issues/2149

Comment 1 Larry the Git Cow gentoo-dev

2024-07-17 05:54:15 UTC

The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=7a17ef4dd4007cbea04835f686476be4b740977c

commit 7a17ef4dd4007cbea04835f686476be4b740977c
Author:     Sam James <sam@gentoo.org>
AuthorDate: 2024-07-17 05:35:43 +0000
Commit:     Sam James <sam@gentoo.org>
CommitDate: 2024-07-17 05:53:05 +0000

    net-irc/ergo: add 2.13.1
    
    Bug: https://bugs.gentoo.org/936197
    Signed-off-by: Sam James <sam@gentoo.org>

 net-irc/ergo/Manifest           |  1 +
 net-irc/ergo/ergo-2.13.1.ebuild | 78 +++++++++++++++++++++++++++++++++++++++++
 2 files changed, 79 insertions(+)