USN-409-1: ksirc vulnerability
===========================================================
Ubuntu Security Notice USN-409-1 January 15, 2007
kdenetwork vulnerability
CVE-2006-6811
===========================================================
A security issue affects the following Ubuntu releases:
Ubuntu 5.10
Ubuntu 6.06 LTS
Ubuntu 6.10
This advisory also applies to the corresponding versions of
Kubuntu, Edubuntu, and Xubuntu.
The problem can be corrected by upgrading your system to the
following package versions:
Ubuntu 5.10:
ksirc 4:3.4.3-0ubuntu1.1
Ubuntu 6.06 LTS:
ksirc 4:3.5.2-0ubuntu6.3
Ubuntu 6.10:
ksirc 4:3.5.5-0ubuntu1.1
In general, a standard system upgrade is sufficient to effect the
necessary changes.
Details follow:
Federico L. Bossi Bonin discovered a Denial of Service vulnerability
in ksirc. By sending a special response packet, a malicious IRC server
could crash ksirc.



