Package: znc / 1.6.5-1+deb9u2

Metadata

Package Version Patches format
znc 1.6.5-1+deb9u2 3.0 (quilt)

Patch series

view the series file
Patch File delta Description
01 CVE 2018 14056.diff | (download)

src/WebModules.cpp | 8 5 + 3 - 0 !
1 file changed, 5 insertions(+), 3 deletions(-)

---
02 CVE 2018 14055.diff | (download)

src/Client.cpp | 3 2 + 1 - 0 !
src/Config.cpp | 10 7 + 3 - 0 !
src/IRCSock.cpp | 3 2 + 1 - 0 !
3 files changed, 11 insertions(+), 5 deletions(-)

---
03 CVE 2019 12816.diff | (download)

include/znc/Modules.h | 1 1 + 0 - 0 !
src/Modules.cpp | 32 27 + 5 - 0 !
2 files changed, 28 insertions(+), 5 deletions(-)

---
04 CVE 2019 9917.diff | (download)

include/znc/Csocket.h | 1 1 + 0 - 0 !
include/znc/Socket.h | 5 1 + 4 - 0 !
include/znc/znc.h | 5 5 + 0 - 0 !
modules/controlpanel.cpp | 2 1 + 1 - 0 !
modules/modpython.cpp | 2 2 + 0 - 0 !
src/IRCNetwork.cpp | 4 2 + 2 - 0 !
src/Socket.cpp | 6 6 + 0 - 0 !
src/User.cpp | 4 2 + 2 - 0 !
src/znc.cpp | 37 37 + 0 - 0 !
9 files changed, 57 insertions(+), 9 deletions(-)

 [patch] don't crash if user specified invalid encoding.

This is CVE-2019-9917