From 4f2d7949f03e1c198bc888f2d05f421d35c57e21 Mon Sep 17 00:00:00 2001 From: V3n3RiX Date: Mon, 9 Oct 2017 18:53:29 +0100 Subject: reinit the tree, so we can have metadata --- metadata/glsa/glsa-201708-07.xml | 49 ++++++++++++++++++++++++++++++++++++++++ 1 file changed, 49 insertions(+) create mode 100644 metadata/glsa/glsa-201708-07.xml (limited to 'metadata/glsa/glsa-201708-07.xml') diff --git a/metadata/glsa/glsa-201708-07.xml b/metadata/glsa/glsa-201708-07.xml new file mode 100644 index 000000000000..82a0c3974db5 --- /dev/null +++ b/metadata/glsa/glsa-201708-07.xml @@ -0,0 +1,49 @@ + + + + evilvte: User-assisted execution of arbitrary code + Improper hypertext validation might allow remote attackers to + execute arbitrary code. + + evilvte + 2017-08-21 + 2017-08-26: 2 + 611290 + remote + + + 0.5.1 + + + +

VTE based, highly customizable terminal emulator

+
+ +

Steve Kemp of Debian identified a flaw in evilvte which does not + properly validate hypertext links. Please review the Debian bug report + referenced below. +

+
+ +

Remote attackers could execute arbitrary code by enticing a user to + click a hyperlink in their terminal. +

+
+ +

There is no known workaround at this time.

+
+ +

Gentoo Security recommends that users unmerge evilvte:

+ + + # emerge --unmerge "x11-terms/evilvte" + +
+ + Debian + Bug #854585 + + + b-man + b-man +
-- cgit v1.2.3