-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.8
Date: Fri, 24 Jul 2009 10:59:59 +0200
Source: znc
Binary: znc
Architecture: source amd64
Version: 0.058-2+lenny3
Distribution: stable-security
Urgency: high
Maintainer: Patrick Matthäi <pmatthaei@debian.org>
Changed-By: Patrick Matthäi <pmatthaei@debian.org>
Description:
znc - advanced modular IRC bouncer
Closes: 537977
Changes:
znc (0.058-2+lenny3) stable-security; urgency=high
.
* Fixes an high-impact directory traversal bug, where unprivileged users can
save about DCC SEND files on the server with the rights of the znc process.
The attacker could also use the exploit to get a shell on the server.
Closes: #537977
Checksums-Sha1:
c4e3bd3709fc17e95b5c6e20bf6c6cf669c7b2da 1037 znc_0.058-2+lenny3.dsc
1a834a0e3e72aa9f795e8ed2638213989f21b0f5 9628 znc_0.058-2+lenny3.diff.gz
d375eb69a8f3c99cbedeaaa7dd66ee23c0b4c416 1031744 znc_0.058-2+lenny3_amd64.deb
Checksums-Sha256:
8511df881369ca538399b93a19072cf54cda9b023d9c445b6a755f69157114ef 1037 znc_0.058-2+lenny3.dsc
7f45d1a108f3bee681af3f9b6ba1a3a283ccc4d10c7fcb67d33994ec76e5a125 9628 znc_0.058-2+lenny3.diff.gz
bb4eb14d973e62c224443014e2279d8b1767d0609bc267e0dfc1392e7147bfd0 1031744 znc_0.058-2+lenny3_amd64.deb
Files:
93fe1b9b7bd7aeebd7b3e0c3854a477f 1037 net optional znc_0.058-2+lenny3.dsc
6fd05e2dbb8e6796dcc647bd79e9d1a0 9628 net optional znc_0.058-2+lenny3.diff.gz
bc265fa88c9bb707b67e757b63ed5853 1031744 net optional znc_0.058-2+lenny3_amd64.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
iEYEARECAAYFAkpt0JkACgkQ2XA5inpabMdkqACgn00ZdobCUhTjBz9d/iVJArkU
IhkAoJk8SnR1iTnTY0sMWcmD+p+SZZXT
=sMjV
-----END PGP SIGNATURE-----
Accepted:
znc_0.058-2+lenny3.diff.gz
to pool/main/z/znc/znc_0.058-2+lenny3.diff.gz
znc_0.058-2+lenny3.dsc
to pool/main/z/znc/znc_0.058-2+lenny3.dsc
znc_0.058-2+lenny3_amd64.deb
to pool/main/z/znc/znc_0.058-2+lenny3_amd64.deb