Debian Linux Security Advisory 4463-1 - Two vulnerabilities were discovered in the ZNC IRC bouncer which could result in remote code execution (CVE-2019-12816) or denial of service via invalid encoding (CVE-2019-9917).
23dede2ae1981e5c5a5f41d34d05367a9d031dbc77b7f01c8842623769831714
Ubuntu Security Notice 3950-1 - It was discovered that ZNC incorrectly handled certain invalid encodings. An authenticated remote user could use this issue to cause ZNC to crash, resulting in a denial of service, or possibly execute arbitrary code.
5fb5e38bcebcd5886bfe640b23b9a72b51a271df222d4ca60853a577cc65e6f7