An usbredir security update has been released Debian GNU/Linux 8 Extended LTS to address a use-after-free vulnerability.
ELA-571-1 usbredir security update
Package usbredir
ELA-571-1 usbredir security update
Version 0.7-1+deb8u1
Related CVEs CVE-2021-3700
A use-after-free vulnerability was found in Usbredirparser, a parser for the usbredir protocol, which could result in denial of service or potentially arbitrary code execution.
For Debian 8 jessie, these problems have been fixed in version 0.7-1+deb8u1.
We recommend that you upgrade your usbredir packages.
Further information about Extended LTS security advisories can be found at: https://deb.freexian.com/extended-lts/
