[SECURITY] [DLA 769-1] shutter security update

[Christoph Biedl <debian.axhn@manchmal.in-ulm.de>]

Package        : shutter
Version        : 0.88.3-1+deb7u1
CVE ID         : CVE-2015-0854
Debian Bug     : 798862


The feature-rich screenshot program shutter uses the system() call in
an unsafe way. This allows an attacker to execute arbitrary programs
via crafted directory names.


For Debian 7 "Wheezy", this problem has been fixed in version
0.88.3-1+deb7u1.

For Debian 8 "Jessie", this problem will be fixed in version
0.92-0.1+deb8u1, part of the upcoming point release

For Debian 9 "Stretch" and "Sid", this problem has been fixed in
version 0.93.1-1

We recommend that you upgrade your shutter packages.

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS

Attachment: signature.asc
Description: Digital signature