Debian-LTS alert DLA-687-1 (tre)

From:
    	     
 
Antoine Beaupré <anarcat@debian.org> 
To:
    	     
 
debian-lts-announce@lists.debian.org 
Subject:
    	     
 
[SECURITY] [DLA 687-1] tre security update 
Date:
    	     
 
Thu, 27 Oct 2016 16:09:34 -0400
Message-ID:
    	     
 
<20161027200934.GA12511@angela.anarc.at>
Package        : tre
Version        : 0.8.0-3+deb7u1
CVE ID         : CVE-2016-8859
Debian Bug     : 842169

A vulnerability has been found in the tre package that could allow an
attacker to perform controlled heap corruption.

For Debian 7 "Wheezy", these problems have been fixed in version
0.8.0-3+deb7u1.

We recommend that you upgrade your tre packages.

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS