[Bug 1456778] Re: default configuration for irc clients should use ssl servers

Launchpad Bug Tracker 1456778 at bugs.launchpad.net
Fri Jul 27 21:54:29 UTC 2018


This bug was fixed in the package irssi - 1.1.1-1ubuntu1

---------------
irssi (1.1.1-1ubuntu1) devel; urgency=medium

  * Merge from Debian. Remaining changes:
    - Refresh and re-enabled 20fix_ssl_proxy_hostname_check.
      - When we have a proxy setting, we expect the CN to match
        the proxy hostname, not the server hostname.
    - d/p/03firsttimer_text:
      + Adapt 03firsttimer_text so it tells you about
        connecting to freenode and joining #ubuntu.
  * Changes no longer needed:
    - d/p/90irc-ubuntu-com:
      + irc.ubuntu.com was a CNAME to irc.freenode.net, but this prevents us
        from recommending and verifying TLS connections.  (LP: #1456778)

irssi (1.1.1-1) unstable; urgency=medium

  [ Rhonda D'Vine ]
  * New upstream release.
  * Uploaded from mIRC.
  * Adjust 03firsttimer_text patch for new location of the text.
  * Update copyright format URL to use https.
  * Install example scripts.
  * Bump Standards-Version to 4.1.4.
  * Move repository to salsa, update Vcs-* URLs.

  [ Unit 193 ]
  * Use https for upstream homepage.
  * /connect OFTC instead of irc.debian.org to get an ssl connection.

 -- Unit 193 <unit193 at ubuntu.com>  Fri, 27 Jul 2018 07:01:51 -0400

** Changed in: irssi (Ubuntu)
       Status: Confirmed => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to irssi in Ubuntu.
https://bugs.launchpad.net/bugs/1456778

Title:
  default configuration for irc clients should use ssl servers

Status in irssi package in Ubuntu:
  Fix Released

Bug description:
  Ubuntu 14.04.2 LTS irssi 0.8.15-5ubuntu3

  irssi installs a default list of IRC networks and servers, all using
  unencrypted communications. This allows eavesdropping, e.g. if people
  access the Internet from an insecure wifi connection. This allows
  eavesdroppers to record conversations and nickserv passwords and
  possibly to impersonate the legitimate users.

  Many of these networks (e.g. OFTC, Freenode) now provide SSL servers.
  They should be configured in the default irssi configuration file that
  is installed if the user has none.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/irssi/+bug/1456778/+subscriptions



More information about the foundations-bugs mailing list