tocsin

Debian/x11-xserver-utils: unknown

xrdb.c in xrdb before 1.0.9 in X.Org X11R7.6 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in a hostname obtained from a (1) DHCP or (2) XDMCP message.

Action: Upgrade x11-xserver-utils to 7.6+2 or later.

Affected

introducedfixedlast affected
07.6+2-

Fixed versions

7.6+2

Sources

published · modified · JSON