Bug 777978

Summary:	<net-irc/ircii-20210314: ReDoS vulnerability
Product:	Gentoo Security	Reporter:	John Helmert III <ajak>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	RESOLVED DUPLICATE
Severity:	minor	CC:	bkohler
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
URL:	https://www.openwall.com/lists/oss-security/2021/03/24/2
Whiteboard:
Package list:		Runtime testing required:	---

Description John Helmert III archtester

2021-03-24 13:03:21 UTC

From URL:

  A malicious irc user could nuke any other irc user that uses bitchx, ircii or
  scrollz out of irc (crash their irc client) by connecting to the same irc
  network and sending a malicious CTCP UTC message.

Solution:

  For ircii: Update to ircii-20210314
  For bitchx and scrollz: none yet


Please stabilize 20210314.

Comment 1 John Helmert III archtester

2021-03-24 13:04:06 UTC

Actually, this is a duplicate. My bad.

*** This bug has been marked as a duplicate of bug 776772 ***