Bug 675082 (CVE-2019-5882)

Summary:	<net-irc/irssi-1.1.2: Use after free (CVE-2019-5882)
Product:	Gentoo Security	Reporter:	Hanno Böck <hanno>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	RESOLVED FIXED
Severity:	normal	CC:	monsieurp, swegener, zlogene
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
URL:	https://www.openwall.com/lists/oss-security/2019/01/10/1
Whiteboard:	B3 [noglsa cve]
Package list:		Runtime testing required:	---

Description Hanno Böck gentoo-dev

2019-01-10 11:38:25 UTC

See advisory
https://www.openwall.com/lists/oss-security/2019/01/10/1

Please bump.

Comment 1 Mikle Kolyada (RETIRED) archtester

2019-01-10 11:53:26 UTC

fixed

Comment 2 Sebastian 2019-01-11 07:12:53 UTC

Good job guys! Thanks for the quick action!

Comment 3 Larry the Git Cow gentoo-dev

2019-02-12 22:19:24 UTC

The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=ed551bcce4ea46efc147d0719285076bbf0a9955

commit ed551bcce4ea46efc147d0719285076bbf0a9955
Author:     Jeroen Roovers <jer@gentoo.org>
AuthorDate: 2019-02-12 22:19:00 +0000
Commit:     Jeroen Roovers <jer@gentoo.org>
CommitDate: 2019-02-12 22:19:20 +0000

    net-irc/irssi: Stable for HPPA (bug #675082).
    
    Package-Manager: Portage-2.3.60, Repoman-2.3.12
    RepoMan-Options: --ignore-arches
    Bug: https://bugs.gentoo.org/675082
    Signed-off-by: Jeroen Roovers <jer@gentoo.org>

 net-irc/irssi/irssi-1.1.2.ebuild | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)