tocsin

Debian/xmonad-contrib: unknown

The XMonad.Hooks.DynamicLog module in xmonad-contrib before 0.11.2 allows remote attackers to execute arbitrary commands via a web page title, which activates the commands when the user clicks on the

Action: Upgrade xmonad-contrib to 0.11.2-1 or later.

Affected

introducedfixedlast affected
00.11.2-1-

Fixed versions

0.11.2-1

Sources

published · modified · JSON