========================================================================= Ubuntu Security Notice USN-3950-1 April 18, 2019 znc vulnerability ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 18.10 Summary: ZNC could be made to crash or run programs if it received specially crafted network traffic. Software Description: - znc: advanced modular IRC bouncer Details: It was discovered that ZNC incorrectly handled certain invalid encodings. An authenticated remote user could use this issue to cause ZNC to crash, resulting in a denial of service, or possibly execute arbitrary code. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 18.10: znc 1.7.1-2ubuntu0.1 In general, a standard system update will make all the necessary changes. References: https://usn.ubuntu.com/usn/usn-3950-1 CVE-2019-9917 Package Information: https://launchpad.net/ubuntu/+source/znc/1.7.1-2ubuntu0.1