File _patchinfo of Package patchinfo.4203
<patchinfo incident="4203">
<issue id="1034310" tracker="bnc">Hexchat has pci.ids set to the wrong location for Opensuse</issue>
<issue id="1020739" tracker="bnc">VUL-1: CVE-2016-2087: hexchat: Directory traversal vulnerability</issue>
<issue id="2016-2087" tracker="cve" />
<category>security</category>
<rating>moderate</rating>
<packager>JonathanKang</packager>
<description>
This update for hexchat fixes the following issues:
- CVE-2016-2087: A directory traversal was possible if a user could be convinced to connect to a server with a hostname with ".." in its name. (bsc#1020739).
This non-security issue was fixed:
- Add dependency on iso-codes and hwdata as hexchat tries to use them (bsc#1034310)
</description>
<summary>Security update for hexchat</summary>
</patchinfo>