DSA-5233-1 e17 -- security update

Debian Security Advisory

DSA-5233-1 e17 -- security update

Date Reported:

21 Sep 2022

Affected Packages:

e17

Vulnerable:

Yes

Security database references:

In Mitre's CVE dictionary: CVE-2022-37706.

More information:

Maher Azzouzi discovered that missing input sanitising in the Enlightenment window manager may result in local privilege escalation to root.

For the stable distribution (bullseye), this problem has been fixed in version 0.24.2-8+deb11u1.

We recommend that you upgrade your e17 packages.

For the detailed security status of e17 please refer to its security tracker page at: https://security-tracker.debian.org/tracker/e17