Debian Security Advisory

DLA-1174-1 konversation -- LTS security update

Date Reported:
18 Nov 2017
Affected Packages:
konversation
Vulnerable:
Yes
Security database references:
In Mitre's CVE dictionary: CVE-2017-15923.
More information:

It was discovered that there was a denial of service vulnerability in the konversation IRC client related to parsing of color formatting codes.

For Debian 7 Wheezy, this issue has been fixed in konversation version 1.4-1+deb7u2.

We recommend that you upgrade your konversation packages.