From c5ebf0390ade522cd1ee234f49f2a37aa3da7c52 Mon Sep 17 00:00:00 2001 From: Thorsten Alteholz Date: Sat, 21 Aug 2021 05:34:27 +0000 Subject: add DLA-2746-1 --- english/lts/security/2021/dla-2746.data | 10 ++++++++++ english/lts/security/2021/dla-2746.wml | 25 +++++++++++++++++++++++++ 2 files changed, 35 insertions(+) create mode 100644 english/lts/security/2021/dla-2746.data create mode 100644 english/lts/security/2021/dla-2746.wml diff --git a/english/lts/security/2021/dla-2746.data b/english/lts/security/2021/dla-2746.data new file mode 100644 index 00000000000..b9554dcab10 --- /dev/null +++ b/english/lts/security/2021/dla-2746.data @@ -0,0 +1,10 @@ +DLA-2746-1 scrollz +2021-8-21 +CVE-2021-29376 +scrollz +yes +yes +no + +#use wml::debian::security + diff --git a/english/lts/security/2021/dla-2746.wml b/english/lts/security/2021/dla-2746.wml new file mode 100644 index 00000000000..c6d50dfae23 --- /dev/null +++ b/english/lts/security/2021/dla-2746.wml @@ -0,0 +1,25 @@ +LTS security update + + +

An issue has been found in scrollz, an advanced ircII-based IRC client. +A crafted CTCP UTC message could allow an attacker to disconnect the +victim from an IRC server due to a segmentation fault and client crash.

+ + +

For Debian 9 stretch, this problem has been fixed in version +2.2.3-1+deb9u1.

+ +

We recommend that you upgrade your scrollz packages.

+ +

For the detailed security status of scrollz please refer to +its security tracker page at: +https://security-tracker.debian.org/tracker/scrollz

+ +

Further information about Debian LTS security advisories, how to apply +these updates to your system and frequently asked questions can be +found at: https://wiki.debian.org/LTS

+
+ +# do not modify the following line +#include "$(ENGLISHDIR)/lts/security/2021/dla-2746.data" +# $Id: $ -- cgit v1.2.3