Debian alert DLA-3895-1 (puredata)

From:
             
 
Adrian Bunk <bunk@debian.org>
To:
             
 
debian-lts-announce@lists.debian.org
Subject:
             
 
[SECURITY] [DLA 3895-1] puredata security update
Date:
             
 
Wed, 25 Sep 2024 23:58:39 +0300
Message-ID:
             
 
<ZvR5f9HdIlCXiqgZ@localhost>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian LTS Advisory DLA-3895-1                debian-lts@lists.debian.org
https://www.debian.org/lts/security/                          Adrian Bunk
September 25, 2024                            https://wiki.debian.org/LTS
- -------------------------------------------------------------------------

Package        : puredata
Version        : 0.51.4-1+deb11u1
CVE ID         : CVE-2023-47480

The realtime computer music and graphics system puredata does now 
terminate when dropping setuid privileges failed.

For Debian 11 bullseye, this problem has been fixed in version
0.51.4-1+deb11u1.

We recommend that you upgrade your puredata packages.

For the detailed security status of puredata please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/puredata

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS
-----BEGIN PGP SIGNATURE-----
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=Pxvy
-----END PGP SIGNATURE-----