{"affected":[{"ecosystem_specific":{"binaries":[{"irssi":"1.1.1-43.1","irssi-devel":"1.1.1-43.1"}]},"package":{"ecosystem":"SUSE:Package Hub 12","name":"irssi","purl":"pkg:rpm/suse/irssi&distro=SUSE%20Package%20Hub%2012"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"1.1.1-43.1"}],"type":"ECOSYSTEM"}]}],"aliases":[],"details":"This update for irssi fixes the following security issues:\n\n- CVE-2018-7054: Use after free when server is disconnected during netsplits\n- CVE-2018-7053: Use after free when SASL messages are received in unexpected order\n- CVE-2018-7050: Null pointer dereference when an 'empty' nick has been observed\n- CVE-2018-7052: When the number of windows exceed the available space, Irssi would crash due to Null pointer dereference\n- CVE-2018-7051: Certain nick names could result in out of bounds access when printing theme strings\n","id":"openSUSE-SU-2018:0475-1","modified":"2018-02-19T08:15:17Z","published":"2018-02-19T08:15:17Z","references":[{"type":"ADVISORY","url":null},{"type":"REPORT","url":"https://bugzilla.suse.com/1081238"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2018-7050"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2018-7051"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2018-7052"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2018-7053"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2018-7054"}],"related":["CVE-2018-7050","CVE-2018-7051","CVE-2018-7052","CVE-2018-7053","CVE-2018-7054"],"summary":"Security update for irssi","upstream":["CVE-2018-7050","CVE-2018-7051","CVE-2018-7052","CVE-2018-7053","CVE-2018-7054"]}