Irssi before 1.0.8, 1.1.x before 1.1.3, and 1.2.x before 1.2.1, when SASL is enabled,
has a use after free when sending SASL login to the server.

Fixed In Version:

Irssi 1.0.8, 1.1.3, 1.2.1

References:

https://irssi.org/security/irssi\_sa\_2019\_06.txt
https://www.openwall.com/lists/oss-security/2019/06/29/1

(from redmine: issue id 10658, created on 2019-07-04, closed on 2019-07-04)

• Relations:
  • parent #10653 (closed)
• Changesets:
  • Revision 23cf1dbb by Natanael Copa on 2019-07-04T10:40:41Z:

main/irssi: security upgrade to 1.0.8 (CVE-2019-13045)

fixes #10658