Protect yourself against future threats.
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2013.0110.2 ircd-ratbox security update 12 February 2013 =========================================================================== AusCERT Security Bulletin Summary --------------------------------- Product: ircd-ratbox Publisher: Debian Operating System: Debian GNU/Linux 6 Linux variants BSD variants Solaris Impact/Access: Denial of Service -- Remote/Unauthenticated Resolution: Patch/Upgrade CVE Names: CVE-2012-6084 Original Bulletin: http://www.debian.org/security/2013/dsa-2612 Comment: This advisory references vulnerabilities in products which run on platforms other than Debian. It is recommended that administrators running ircd-ratbox check for an updated version of the software for their operating system. Revision History: February 12 2013: Vendor altered version number January 25 2013: Initial Release - --------------------------BEGIN INCLUDED TEXT-------------------- - -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - - ------------------------------------------------------------------------- Debian Security Advisory DSA-2612-2 security@debian.org http://www.debian.org/security/ Moritz Muehlenhoff February 10, 2013 http://www.debian.org/security/faq - - ------------------------------------------------------------------------- Package : ircd-ratbox Vulnerability : programming error Problem type : remote Debian-specific: no CVE ID : CVE-2012-6084 This update to the previous ircd-ratbox DSA only raises the version number to ensure that a higher version is used than a previously binNMU on some architectures. For the stable distribution (squeeze), this problem has been fixed in version 3.0.6.dfsg-2+squeeze1. We recommend that you upgrade your ircd-ratbox packages. Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: http://www.debian.org/security/ Mailing list: debian-security-announce@lists.debian.org - -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iEUEARECAAYFAlEX6JUACgkQXm3vHE4uylpioQCcDQvyJFUkZ53pzs3k7CFDvlL1 v6gAlAkyL/gZnYMKLZiUgbE7m3Stvg0= =J5xk - -----END PGP SIGNATURE----- - -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - - ------------------------------------------------------------------------- Debian Security Advisory DSA-2612-1 security@debian.org http://www.debian.org/security/ Moritz Muehlenhoff January 24, 2013 http://www.debian.org/security/faq - - ------------------------------------------------------------------------- Package : ircd-ratbox Vulnerability : programming error Problem type : remote Debian-specific: no CVE ID : CVE-2012-6084 It was discovered that a bug in the server capability negotiation code of ircd-ratbox could result in denial of service. For the stable distribution (squeeze), this problem has been fixed in version 3.0.6.dfsg-2squeeze1. For the testing distribution (wheezy), this problem has been fixed in version 3.0.7.dfsg-3. For the unstable distribution (sid), this problem has been fixed in version 3.0.7.dfsg-3. We recommend that you upgrade your ircd-ratbox packages. Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: http://www.debian.org/security/ Mailing list: debian-security-announce@lists.debian.org - -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iEYEARECAAYFAlEBqQcACgkQXm3vHE4uylqiNQCeMoOg3cwLxuUxFMx4if6HRZ5n Q1UAoIZ5vDAHxoyDGAx2oY2q++Dc4qNV =O+2l - -----END PGP SIGNATURE----- - --------------------------END INCLUDED TEXT-------------------- You have received this e-mail bulletin as a result of your organisation's registration with AusCERT. The mailing list you are subscribed to is maintained within your organisation, so if you do not wish to continue receiving these bulletins you should contact your local IT manager. If you do not know who that is, please send an email to auscert@auscert.org.au and we will forward your request to the appropriate person. NOTE: Third Party Rights This security bulletin is provided as a service to AusCERT's members. As AusCERT did not write the document quoted above, AusCERT has had no control over its content. The decision to follow or act on information or advice contained in this security bulletin is the responsibility of each user or organisation, and should be considered in accordance with your organisation's site policies and procedures. AusCERT takes no responsibility for consequences which may arise from following or acting on information or advice contained in this security bulletin. NOTE: This is only the original release of the security bulletin. It may not be updated when updates to the original are made. If downloading at a later date, it is recommended that the bulletin is retrieved directly from the author's website to ensure that the information is still current. Contact information for the authors of the original document is included in the Security Bulletin above. If you have any questions or need further information, please contact them directly. Previous advisories and external security bulletins can be retrieved from: http://www.auscert.org.au/render.html?cid=1980 =========================================================================== Australian Computer Emergency Response Team The University of Queensland Brisbane Qld 4072 Internet Email: auscert@auscert.org.au Facsimile: (07) 3365 7031 Telephone: (07) 3365 4417 (International: +61 7 3365 4417) AusCERT personnel answer during Queensland business hours which are GMT+10:00 (AEST). On call after hours for member emergencies only. =========================================================================== -----BEGIN PGP SIGNATURE----- Comment: http://www.auscert.org.au/render.html?it=1967 iQIVAwUBURnI8u4yVqjM2NGpAQLURxAAo0X7+A8I/3UDDP1SCnVMaAaKCExObHiR VniHsaL+gXsdCnRmWpU5TS67l3nFC16HtmFdwyZRmDn7+s91789rnP7RVCivIY2C FlbjSgCdv76wc38u8+ZeNZLfhDG/LljLoky5ZKKEAJiWCWsIajFtUFX0ILe5p3oS RoVVjaEZhKgQZqEhwOiV937UWK1TnD6LV+QIfYX+L87lhBKy/ZP++HwKY8Pw2NPn 15oOTBtwJymOWPFH5gvSN1omSq48iGZCvyfiIW4ZM/fUIcV5iaXTqppdIYvD+U8h yEMCujk5E9vBnUvFsPxKOR0mSgQ8ohzurnjbDCaltsXLG9SzT5D26PQErat7P0a8 mJqBFFnTEv63l8IDnxYe37+6e3Vjgzvla2sQaj4K4NOFyaqWxh1+0ZTaNquWE9n0 19nGT4z3gL99fPn3ECEReYhhIY6HdRKYm+YnREENQFvhu/4RwJed8ZpbAQfoKX4e uJlsNF/QEFbu4Qm8dxyEv04ArQ8cW2ntYBOE8wXOU0lhrfRr9l6xz/xr+Vbggu+y Lio4TefzfKaOsJ3PyKrh/qP4MjERnT89XXYrkcOmHRjh1quAFxg302kfuMPfyRBT NeadEOVgvHAOhXGQtCh3p2PrqgQTrqFi6zy9Yph5u2rINTL0zlgATHEOyLzCipdI NLtauwGplSY= =ufF6 -----END PGP SIGNATURE-----