{"id":"openSUSE-SU-2018:0475-1","summary":"Security update for irssi","details":"This update for irssi fixes the following security issues:\n\n- CVE-2018-7054: Use after free when server is disconnected during netsplits\n- CVE-2018-7053: Use after free when SASL messages are received in unexpected order\n- CVE-2018-7050: Null pointer dereference when an 'empty' nick has been observed\n- CVE-2018-7052: When the number of windows exceed the available space, Irssi would crash due to Null pointer dereference\n- CVE-2018-7051: Certain nick names could result in out of bounds access when printing theme strings\n","modified":"2026-01-30T02:45:05.873095Z","published":"2018-02-19T08:15:17Z","related":["CVE-2018-7050","CVE-2018-7051","CVE-2018-7052","CVE-2018-7053","CVE-2018-7054"],"upstream":["CVE-2018-7050","CVE-2018-7051","CVE-2018-7052","CVE-2018-7053","CVE-2018-7054"],"references":[{"type":"ADVISORY"},{"type":"REPORT","url":"https://bugzilla.suse.com/1081238"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2018-7050"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2018-7051"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2018-7052"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2018-7053"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2018-7054"}],"affected":[{"package":{"name":"irssi","ecosystem":"SUSE:Package Hub 12","purl":"pkg:rpm/suse/irssi&distro=SUSE%20Package%20Hub%2012"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1-43.1"}]}],"ecosystem_specific":{"binaries":[{"irssi-devel":"1.1.1-43.1","irssi":"1.1.1-43.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2018:0475-1.json"}}],"schema_version":"1.7.3"}