SUSE-SU-2020:2872-1: moderate: Security update for hexchat

sle-security-updates at sle-security-updates at
Tue Oct 6 13:17:50 MDT 2020

   SUSE Security Update: Security update for hexchat

Announcement ID:    SUSE-SU-2020:2872-1
Rating:             moderate
References:         #1020739 #1034310 
Cross-References:   CVE-2016-2087
Affected Products:
                    SUSE Linux Enterprise Workstation Extension 12-SP5

   An update that solves one vulnerability and has one errata
   is now available.


   This update for hexchat fixes the following issues:

   - CVE-2016-2087: A directory traversal was possible if a user could be
     convinced to connect to a server with a hostname with ".." in its name.

   This non-security issue was fixed:

   - Add dependency on iso-codes and hwdata as hexchat tries to use them

Patch Instructions:

   To install this SUSE Security Update use the SUSE recommended installation methods
   like YaST online_update or "zypper patch".

   Alternatively you can run the command listed for your product:

   - SUSE Linux Enterprise Workstation Extension 12-SP5:

      zypper in -t patch SUSE-SLE-WE-12-SP5-2020-2872=1

Package List:

   - SUSE Linux Enterprise Workstation Extension 12-SP5 (x86_64):


   - SUSE Linux Enterprise Workstation Extension 12-SP5 (noarch):



More information about the sle-security-updates mailing list