-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Package        : libxpm
Version        : 1:3.5.10-1+deb7u1
CVE ID         : CVE-2016-10164

Tobias Stoeckmann discovered a vulnerability in the libXpm library
that could cause a malicious attacker to execute arbitrary code
via a specially crafted XPM file.

For Debian 7 "Wheezy", these problems have been fixed in version
1:3.5.10-1+deb7u1.

We recommend that you upgrade your libxpm packages.

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS
-----BEGIN PGP SIGNATURE-----
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=9g5R
-----END PGP SIGNATURE-----

Reply via email to