[ubuntu/karmic-security] irssi (delayed), irssi 0.8.14-1ubuntu1.1 (Accepted)

[Ubuntu Installer]

irssi (0.8.14-1ubuntu1.1) karmic-security; urgency=low

  * SECURITY UPDATE: perform certificate host validation
    - debian/patches/91_CVE-2010-1155.patch: adjust to verify hostname against
      CN. Also use one SSL_CTX per connection and use default trusted CAs if
      nothing specified.
    - CVE-2010-1155
  * SECURITY UPDATE: fix crash when checking for fuzzy nick match when not on
    the channel
    - debian/patches/91_CVE-2010-1156.patch: verify channel is non-NULL in
      src/core/nicklist.c
    - CVE-2010-1156
  * debian/patches/92_disable_sslv2.patch: do not use SSLv2 protocol

Date: Wed, 14 Apr 2010 14:32:04 -0500
Changed-By: Jamie Strandboge <jamie at ubuntu.com>
Maintainer: Ubuntu Core Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/karmic/+source/irssi/0.8.14-1ubuntu1.1
-------------- next part --------------
Format: 1.8
Date: Wed, 14 Apr 2010 14:32:04 -0500
Source: irssi
Binary: irssi irssi-dev
Architecture: source
Version: 0.8.14-1ubuntu1.1
Distribution: karmic-security
Urgency: low
Maintainer: Ubuntu Core Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Jamie Strandboge <jamie at ubuntu.com>
Description: 
 irssi      - terminal based IRC client
 irssi-dev  - terminal based IRC client - development files
Changes: 
 irssi (0.8.14-1ubuntu1.1) karmic-security; urgency=low
 .
   * SECURITY UPDATE: perform certificate host validation
     - debian/patches/91_CVE-2010-1155.patch: adjust to verify hostname against
       CN. Also use one SSL_CTX per connection and use default trusted CAs if
       nothing specified.
     - CVE-2010-1155
   * SECURITY UPDATE: fix crash when checking for fuzzy nick match when not on
     the channel
     - debian/patches/91_CVE-2010-1156.patch: verify channel is non-NULL in
       src/core/nicklist.c
     - CVE-2010-1156
   * debian/patches/92_disable_sslv2.patch: do not use SSLv2 protocol
Checksums-Sha1: 
 959d3dcb08301f1412bc87f1fcfc9069cff20d29 1391 irssi_0.8.14-1ubuntu1.1.dsc
 331788467f84e489d1c66b6cdac305f5394394d4 21546 irssi_0.8.14-1ubuntu1.1.diff.gz
Checksums-Sha256: 
 43007a00443775d37db51ca8cc607ffe54511d4d91fb1af26090844f01c8ae41 1391 irssi_0.8.14-1ubuntu1.1.dsc
 434bc60dc29a3126c0edde973e17348c9b381508059a36e4fd5b3804685b6969 21546 irssi_0.8.14-1ubuntu1.1.diff.gz
Files: 
 7845487e0d0a1a5b186e626afd235ee3 1391 net optional irssi_0.8.14-1ubuntu1.1.dsc
 f4a8783034ccf63328c297664a47d3b3 21546 net optional irssi_0.8.14-1ubuntu1.1.diff.gz
Original-Maintainer: David Pashley <david at davidpashley.com>