From 89a803880f0e56b57c558aea631a16443d4abd9c Mon Sep 17 00:00:00 2001 From: Thorsten Alteholz Date: Fri, 29 May 2020 11:02:36 +0200 Subject: DLA 2219 --- english/lts/security/2020/dla-2219.data | 10 ++++++++++ english/lts/security/2020/dla-2219.wml | 21 +++++++++++++++++++++ 2 files changed, 31 insertions(+) create mode 100644 english/lts/security/2020/dla-2219.data create mode 100644 english/lts/security/2020/dla-2219.wml diff --git a/english/lts/security/2020/dla-2219.data b/english/lts/security/2020/dla-2219.data new file mode 100644 index 00000000000..bcbaef343de --- /dev/null +++ b/english/lts/security/2020/dla-2219.data @@ -0,0 +1,10 @@ +DLA-2219-1 feh +2020-5-24 +CVE-2017-7875 +feh +yes +yes +no + +#use wml::debian::security + diff --git a/english/lts/security/2020/dla-2219.wml b/english/lts/security/2020/dla-2219.wml new file mode 100644 index 00000000000..f90f9b8fc1d --- /dev/null +++ b/english/lts/security/2020/dla-2219.wml @@ -0,0 +1,21 @@ +LTS security update + + +

Tobias Stoeckmann discovered that it was possible to trigger an +out-of-boundary heap write with the image viewer feh while receiving +an IPC message.

+ + +

For Debian 8 Jessie, this problem has been fixed in version +2.12-1+deb8u1.

+ +

We recommend that you upgrade your feh packages.

+ +

Further information about Debian LTS security advisories, how to apply +these updates to your system and frequently asked questions can be +found at: https://wiki.debian.org/LTS

+
+ +# do not modify the following line +#include "$(ENGLISHDIR)/lts/security/2020/dla-2219.data" +# $Id: $ -- cgit v1.2.3