openSUSE-SU-2020:0248-1

Details

Description of the patch:

This update for weechat fixes the following security issue:

CVE-2020-8955: Fixed a buffer overflow in plugins/irc/irc-mode.c that allowed attackers to cause a denial of service (bsc#1163889).

Affected Packages

weechat

SUSE Package Hub 15SUSE Package Hub 15 SP1openSUSE Leap 15.1

Fixed in:

2.1-bp151.4.3.1

weechat-aspell

SUSE Package Hub 15SUSE Package Hub 15 SP1openSUSE Leap 15.1

Fixed in:

2.1-bp151.4.3.1

weechat-devel

SUSE Package Hub 15SUSE Package Hub 15 SP1openSUSE Leap 15.1

Fixed in:

2.1-bp151.4.3.1

weechat-guile

SUSE Package Hub 15SUSE Package Hub 15 SP1openSUSE Leap 15.1

Fixed in:

2.1-bp151.4.3.1

weechat-lang

SUSE Package Hub 15SUSE Package Hub 15 SP1openSUSE Leap 15.1

Fixed in:

2.1-bp151.4.3.1

weechat-lua

SUSE Package Hub 15SUSE Package Hub 15 SP1openSUSE Leap 15.1

Fixed in:

2.1-bp151.4.3.1

weechat-perl

SUSE Package Hub 15SUSE Package Hub 15 SP1openSUSE Leap 15.1

Fixed in:

2.1-bp151.4.3.1

weechat-python

SUSE Package Hub 15SUSE Package Hub 15 SP1openSUSE Leap 15.1

Fixed in:

2.1-bp151.4.3.1

weechat-ruby

SUSE Package Hub 15SUSE Package Hub 15 SP1openSUSE Leap 15.1

Fixed in:

2.1-bp151.4.3.1

weechat-tcl

SUSE Package Hub 15SUSE Package Hub 15 SP1openSUSE Leap 15.1

Fixed in:

2.1-bp151.4.3.1

References

ADVISORY

https://bugzilla.suse.com/1163889

ADVISORY

https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/YO4XVMGQ4UZQXV6A67T4ZCDUID52GKJM/

ADVISORY

https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/YO4XVMGQ4UZQXV6A67T4ZCDUID52GKJM/

ADVISORY

https://www.suse.com/security/cve/CVE-2020-8955/

WEB

https://www.suse.com/support/security/rating/