ELA-375-1 libcaca security update

buffer overflow

2021-03-08
Packagelibcaca
Version0.99.beta19-2+deb8u2
Related CVEs CVE-2021-3410


A buffer overflow issue in caca_resize function in libcaca/caca/canvas.c may lead to local execution of arbitrary code in the user context.



For Debian 8 jessie, these problems have been fixed in version 0.99.beta19-2+deb8u2.

We recommend that you upgrade your libcaca packages.

Further information about Extended LTS security advisories can be found in the dedicated section of our website.