Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 544
Alerts This Week
Warning Icon 1 544

Debian: DSA-2355-1 Critical Clearsilver Denial Of Service Risk

debian
Calendar Grey November 30, 2011
Scroller Debian
Flaws in Clearsilver patched in Debian security advisory DSA-2355-1 address issues of denial of service and code execution vulnerabilities.
Leo Iannacone and Colin Watson discovered a format string vulnerability in the Python bindings for the Clearsilver HTML template system, which may lead to denial of service or the ...
Topics%20covered

Topics Covered

security advisory denial of service critical remote clearsilver

Summary

Leo Iannacone and Colin Watson discovered a format string vulnerability
in the Python bindings for the Clearsilver HTML template system, which
may lead to denial of service or the execution of arbitrary code.

For the oldstable distribution (lenny), this problem has been fixed in
version 0.10.4-1.3+lenny1.

For the stable distribution (squeeze), this problem has been fixed in
version 0.10.5-1+squeeze1.

For the unstable distribution (sid), this problem will be fixed soon.

We recommend that you upgrade your clearsilver packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: http://www.debian.org/security/



Severity
critical
Lowest
Low
Medium
High
Critical

Package: clearsilver
CVE ID: CVE-2011-4357

Topics%20covered

Topics Covered

security advisory denial of service critical remote clearsilver

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.