[Buildroot] [PATCH] irssi: security bump to version 1.0.6

[Thomas Petazzoni <thomas.petazzoni@free-electrons.com>]

Hello,

On Sun,  7 Jan 2018 22:03:18 +0100, Peter Korsgaard wrote:
> From the advisory (https://irssi.org/security/irssi_sa_2018_01.txt):
> 
> Multiple vulnerabilities have been located in Irssi.
> 
> (a) When the channel topic is set without specifying a sender, Irssi
>     may dereference NULL pointer. Found by Joseph Bisch. (CWE-476)
> 
>     CVE-2018-5206 was assigned to this issue.
> 
> (b) When using incomplete escape codes, Irssi may access data beyond
>     the end of the string. (CWE-126) Found by Joseph Bisch.
> 
>     CVE-2018-5205 was assigned to this issue.
> 
> (c) A calculation error in the completion code could cause a heap
>     buffer overflow when completing certain strings. (CWE-126) Found
>     by Joseph Bisch.
> 
>     CVE-2018-5208 was assigned to this issue.
> 
> (d) When using an incomplete variable argument, Irssi may access data
>     beyond the end of the string. (CWE-126) Found by Joseph Bisch.
> 
>     CVE-2018-5207 was assigned to this issue.
> 
> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
> ---
>  package/irssi/irssi.hash | 2 +-
>  package/irssi/irssi.mk   | 2 +-
>  2 files changed, 2 insertions(+), 2 deletions(-)

Applied to master, thanks.

Thomas
-- 
Thomas Petazzoni, CTO, Free Electrons
Embedded Linux, Kernel and Android engineering
http://free-electrons.com