ASA-201711-19 log generated external raw

[ASA-201711-19] konversation: denial of service
Arch Linux Security Advisory ASA-201711-19 ========================================== Severity: Medium Date : 2017-11-12 CVE-ID : CVE-2017-15923 Package : konversation Type : denial of service Remote : Yes Link : Summary ======= The package konversation before version 1.7.3-1 is vulnerable to denial of service. Resolution ========== Upgrade to 1.7.3-1. # pacman -Syu "konversation>=1.7.3-1" The problem has been fixed upstream in version 1.7.3. Workaround ========== Go to Interface -> Colors in the Configure Konversation dialog and uncheck Allow Colored Text in IRC Messages (near the bottom) Description =========== A denial of service vulnerability has been discovered in Konversation before 1.7.3 when handling colors in IRC messages. Any malicious user connected to the same IRC network could send a carefully crafted message that would crash the Konversation user client. Impact ====== A remote attacker is able to craft messages that can result in the client crashing. References ==========