[Pkg-silc-devel] Bug#601521: irssi-plugin-silc vulnerable to CVE-2010-1156

[Silvio Cesare]

Package: irssi-plugin-silc
Version: 1.1.4-1+lenny
Severity: important
Tags: security

silc-client embeds irssi. irssi has this known vulnerability
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1156. I have
confirmed that the following patch has not been applied
http://svn.irssi.org/cgi-bin/viewvc.cgi/irssi/trunk/src/core/nicklist.c?root=irssi&r1=4922&r2=5126
.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/pkg-silc-devel/attachments/20101027/9e6b3370/attachment.htm>