-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

[slackware-security]  bitchx EOLed in Slackware  (SSA:2009-116-02)

This is a notice that bitchx, an IRC client based on ircii-EPIC4, has been
removed from Slackware -current and will not be part of future Slackware
releases.  Security issues and bugs have been reported, but upstream
work seems to have stalled leaving bitchx in a state where there are
known problems without official (or in some cases any) fixes.

The most secure course of action is to remove bitchx from the system and
switch to using a supported IRC client.

We have not compiled a complete list of open issues in BitchX, but here are
a few that we know about:

  http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3360
  http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4584
  http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5839


Package removal instructions:
+---------------------------+

Remove the package as root:
# removepkg bitchx

Some admins may also want to add a symlink to another console IRC client
such as irssi to help users migrate:

cd /usr/bin
ln -sf irssi BitchX


+-----+

Slackware Linux Security Team
http://slackware.com/gpg-key
security@slackware.com

+------------------------------------------------------------------------+
| To leave the slackware-security mailing list:                          |
+------------------------------------------------------------------------+
| Send an email to majordomo@slackware.com with this text in the body of |
| the email message:                                                     |
|                                                                        |
|   unsubscribe slackware-security                                       |
|                                                                        |
| You will get a confirmation message back containing instructions to    |
| complete the process.  Please do not reply to this email address.      |
+------------------------------------------------------------------------+
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)

iEYEARECAAYFAkn049sACgkQakRjwEAQIjNmVQCggCZwxg4XbkQSMyEgZsqpBY88
kJQAn0WqqksEHMHJzPjeVc7B5sSnUe96
=EZ3f
-----END PGP SIGNATURE-----