[SECURITY] [DLA 935-1] lxterminal security update

2017-05-10T08:21:17
ID DEBIAN:DLA-935-1:F645C
Type debian
Reporter Debian
Modified 2017-05-10T08:21:17

Description

Package : lxterminal Version : 0.1.11-4+deb7u1 CVE ID : CVE-2016-10369 Debian Bug : #862098

It was discovered that there was a local denial of service vulnerability in lxterminal, the terminal emulator for the LXDE desktop environment.

This was caused by an insecure use of temporary files for a socket file.

For Debian 7 "Wheezy", this issue has been fixed in lxterminal version 0.1.11-4+deb7u1.

We recommend that you upgrade your lxterminal packages.

Regards,


  ,''`.
 : :'  :     Chris Lamb
 `. `'`      lamby@debian.org / chris-lamb.co.uk
   `-