Vulnerability Bulletins

DSA-4093 openocd - security update

   
Affected software Debian
 
Josef Gajdusek discovered that OpenOCD, a JTAG debugger for ARM and MIPS,was vulnerable to Cross Protocol Scripting attacks. An attacker couldcraft a HTML page that, when visited by a victim running OpenOCD, couldexecute arbitrary commands on the victims host.

More info:

https://www.debian.org/security/2018/dsa-4093