This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2016-7553 →

DEBIAN-CVE-2016-7553

The buf.pl script before 2.20 in Irssi before 0.8.20 uses weak permissions for the scrollbuffer dump file created between upgrades, which might allow...

Original description

The description as published by the source.

The buf.pl script before 2.20 in Irssi before 0.8.20 uses weak permissions for the scrollbuffer dump file created between upgrades, which might allow local users to obtain sensitive information from private chat conversations by reading the file.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 irssi

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.20-2"}]}]

Debian:13 irssi

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.20-2"}]}]

Debian:14 irssi

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.20-2"}]}]

References

advisory security-tracker.debian.org