Debian alert DLA-2683-1 (rxvt)

From:
             
 
Utkarsh Gupta <utkarsh@debian.org>
To:
             
 
debian-lts-announce@lists.debian.org
Subject:
             
 
[SECURITY] [DLA 2683-1] rxvt security update
Date:
             
 
Wed, 09 Jun 2021 17:21:38 +0530
Message-ID:
             
 
 <CAPP0f96XGBwW72LXfSLfXd36vHsA3HTKABEoV4yK4Fsr_BSRdA@mail.gmail.com>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

- -----------------------------------------------------------------------
Debian LTS Advisory DLA-2683-1              debian-lts@lists.debian.org
https://www.debian.org/lts/security/                      Utkarsh Gupta
June 09, 2021                               https://wiki.debian.org/LTS
- -----------------------------------------------------------------------

Package        : rxvt
Version        : 1:2.7.10-7+deb9u2
CVE ID         : CVE-2017-7483 CVE-2021-33477
Debian Bug     : 861694

rxvt, VT102 terminal emulator for the X Window System, allowed
(potentially remote) code execution because of improper handling
of certain escape sequences (ESC G Q).

For Debian 9 stretch, this problem has been fixed in version
1:2.7.10-7+deb9u2.

We recommend that you upgrade your rxvt packages.

For the detailed security status of rxvt please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/rxvt

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS
-----BEGIN PGP SIGNATURE-----
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=BWfm
-----END PGP SIGNATURE-----