From 910c0df5a39a05974c9e508fd144a0cdb4a253ab8eeb6c1efa45e69d183526a7 Mon Sep 17 00:00:00 2001 From: Ailin Nemui Date: Sun, 22 Oct 2017 14:36:47 +0000 Subject: [PATCH 1/2] Accepting request 535789 from home:ailin_nemui:branches:server:irc MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit - update to 1.0.5 - Fix missing -sasl_method '' in /NETWORK (#718, #719). - Fix incorrect restoration of term state when hitting SUSP inside screen (#737, #733). - Fix out of bounds read when compressing colour sequences. Found by Hanno Böck (GL#12, GL!18). CVE-2017-15228 - Fix use after free condition during a race condition when waiting on channel sync during a rejoin (GL#13, GL!19). CVE-2017-15227 - Fix null pointer dereference when parsing certain malformed CTCP DCC messages (GL#14, GL!20). CVE-2017-15721 - Fix crash due to null pointer dereference when failing to split messages due to overlong nick or target (GL#15, GL!21). CVE-2017-15723 - Fix out of bounds read when trying to skip a safe channel ID without verifying that the ID is long enough (GL#16, GL!22). CVE-2017-15722 - Fix return of random memory when inet_ntop failed (#769). - Minor statusbar help update. By Robert Bisewski (#758, #763). OBS-URL: https://build.opensuse.org/request/show/535789 OBS-URL: https://build.opensuse.org/package/show/server:irc/irssi?expand=0&rev=93 --- irssi-1.0.4.tar.xz | 3 --- irssi-1.0.4.tar.xz.asc | 6 ------ irssi-1.0.5.tar.xz | 3 +++ irssi-1.0.5.tar.xz.asc | 6 ++++++ irssi.changes | 25 +++++++++++++++++++++++++ irssi.spec | 2 +- 6 files changed, 35 insertions(+), 10 deletions(-) delete mode 100644 irssi-1.0.4.tar.xz delete mode 100644 irssi-1.0.4.tar.xz.asc create mode 100644 irssi-1.0.5.tar.xz create mode 100644 irssi-1.0.5.tar.xz.asc diff --git a/irssi-1.0.4.tar.xz b/irssi-1.0.4.tar.xz deleted file mode 100644 index d9b5187..0000000 --- a/irssi-1.0.4.tar.xz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:b85c07dbafe178213eccdc69f5f8f0ac024dea01c67244668f91ec1c06b986ca -size 1030956 diff --git a/irssi-1.0.4.tar.xz.asc b/irssi-1.0.4.tar.xz.asc deleted file mode 100644 index de2677f..0000000 --- a/irssi-1.0.4.tar.xz.asc +++ /dev/null @@ -1,6 +0,0 @@ ------BEGIN PGP SIGNATURE----- - -iF0EABECAB0WIQR+5l4wgqX7Bqx8No0AzLWH3b7w4QUCWV1CpAAKCRAAzLWH3b7w -4Tm1AJ9nRPAFLh7sttB4cRFFgRP1Z7h4XACfd78nuZRIjdfdl7fdAt4FB3/4ee4= -=qXos ------END PGP SIGNATURE----- diff --git a/irssi-1.0.5.tar.xz b/irssi-1.0.5.tar.xz new file mode 100644 index 0000000..b7cd907 --- /dev/null +++ b/irssi-1.0.5.tar.xz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:c2556427e12eb06cabfed40839ac6f57eb8b1aa6365fab6dfcd331b7a04bb914 +size 1032308 diff --git a/irssi-1.0.5.tar.xz.asc b/irssi-1.0.5.tar.xz.asc new file mode 100644 index 0000000..fd4ef21 --- /dev/null +++ b/irssi-1.0.5.tar.xz.asc @@ -0,0 +1,6 @@ +-----BEGIN PGP SIGNATURE----- + +iF0EABECAB0WIQR+5l4wgqX7Bqx8No0AzLWH3b7w4QUCWeoXfAAKCRAAzLWH3b7w +4V4fAKCFQv0QZ5fRqkEemOkYYKXV/bI53QCfWx2ScwDs15115ceOGrxQLIIDv54= +=Atv1 +-----END PGP SIGNATURE----- diff --git a/irssi.changes b/irssi.changes index eea52f9..ab80f27 100644 --- a/irssi.changes +++ b/irssi.changes @@ -1,3 +1,28 @@ +------------------------------------------------------------------- +Sun Oct 22 13:46:51 UTC 2017 - ailin.nemui@gmail.com + +- update to 1.0.5 + - Fix missing -sasl_method '' in /NETWORK (#718, #719). + - Fix incorrect restoration of term state when hitting SUSP + inside screen (#737, #733). + - Fix out of bounds read when compressing colour + sequences. Found by Hanno Böck (GL#12, GL!18). CVE-2017-15228 + - Fix use after free condition during a race condition when + waiting on channel sync during a rejoin (GL#13, GL!19). + CVE-2017-15227 + - Fix null pointer dereference when parsing certain malformed + CTCP DCC messages (GL#14, GL!20). + CVE-2017-15721 + - Fix crash due to null pointer dereference when failing to + split messages due to overlong nick or target (GL#15, GL!21). + CVE-2017-15723 + - Fix out of bounds read when trying to skip a safe channel ID + without verifying that the ID is long enough (GL#16, GL!22). + CVE-2017-15722 + - Fix return of random memory when inet_ntop failed (#769). + - Minor statusbar help update. By Robert Bisewski (#758, + #763). + ------------------------------------------------------------------- Thu Jul 6 13:41:08 UTC 2017 - ailin.nemui@gmail.com diff --git a/irssi.spec b/irssi.spec index 3c9484f..438fc8b 100644 --- a/irssi.spec +++ b/irssi.spec @@ -18,7 +18,7 @@ %bcond_with socks Name: irssi -Version: 1.0.4 +Version: 1.0.5 Release: 0 # Summary: Modular, Secure, and Well Designed IRC Client From 5537ca1c5b6f381aceaf1fa81fec875571675c330612dafbd1967b3883469873 Mon Sep 17 00:00:00 2001 From: Ailin Nemui Date: Sun, 22 Oct 2017 15:55:55 +0000 Subject: [PATCH 2/2] Accepting request 535796 from home:AndreasStieger:branches:server:irc add bugzilla reference boo#1064540 OBS-URL: https://build.opensuse.org/request/show/535796 OBS-URL: https://build.opensuse.org/package/show/server:irc/irssi?expand=0&rev=94 --- irssi.changes | 2 +- irssi.spec | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/irssi.changes b/irssi.changes index ab80f27..5046163 100644 --- a/irssi.changes +++ b/irssi.changes @@ -1,7 +1,7 @@ ------------------------------------------------------------------- Sun Oct 22 13:46:51 UTC 2017 - ailin.nemui@gmail.com -- update to 1.0.5 +- update to 1.0.5 (boo#1064540) - Fix missing -sasl_method '' in /NETWORK (#718, #719). - Fix incorrect restoration of term state when hitting SUSP inside screen (#737, #733). diff --git a/irssi.spec b/irssi.spec index 438fc8b..ba6fe61 100644 --- a/irssi.spec +++ b/irssi.spec @@ -22,9 +22,9 @@ Version: 1.0.5 Release: 0 # Summary: Modular, Secure, and Well Designed IRC Client +# License: GPL-2.0+ Group: Productivity/Networking/IRC -# Url: http://www.irssi.org Source: https://github.com/irssi/irssi/releases/download/%{version}/irssi-%{version}.tar.xz Source1: irssi.desktop