Multiple vulnerabilities was discovered and corrected in silc-toolkit: Multiple format string vulnerabilities in lib/silcclient/client_entry.c in Secure Internet Live Conferencing Toolkit before 1.1.10, and SILC Client before 1.1.8, allow remote attackers to execute arbitrary code via format string specifiers in a nickname field, related to the silc_client_add_client, silc_client_update_client, and silc_client_nickname_format functions . Multiple format string vulnerabilities in lib/silcclient/command.c in Secure Internet Live Conferencing Toolkit before 1.1.10, and SILC Client 1.1.8 and earlier, allow remote attackers to execute arbitrary code via format string specifiers in a channel name, related to silc_client_command_topic, silc_client_command_kick, silc_client_command_leave, and silc_client_command_users . This update provides a solution to these vulnerabilities.