guix-devel
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

libcaca vulnerable to CVE-2021-3410


From: Léo Le Bouter
Subject: libcaca vulnerable to CVE-2021-3410
Date: Wed, 03 Mar 2021 21:48:41 +0100
User-agent: Evolution 3.34.2

CVE-2021-3410   24.02.21 00:15
A flaw was found in libcaca v0.99.beta19. A buffer overflow issue in
caca_resize function in libcaca/caca/canvas.c may lead to local
execution of arbitrary code in the user context.

libcaca has not made a release yet, so you need to look upstream and
cherry-pick the commits.

See https://github.com/cacalabs/libcaca/issues/52

Attachment: signature.asc
Description: This is a digitally signed message part


reply via email to

[Prev in Thread] Current Thread [Next in Thread]