Debian Suckless-Tools vulnerabilities

CVE-2016-6866 [HIGH] CVE-2016-6866: suckless-tools - slock allows attackers to bypass the screen lock via vectors involving an invali... slock allows attackers to bypass the screen lock via vectors involving an invalid password hash, which triggers a NULL pointer dereference and crash. Scope: local bookworm: resolved (fixed in 41-1) bullseye: resolved (fixed in 41-1) forky: resolved (fixed in 41-1) sid: resolved (fixed in 41-1) trixie: resolved (fixed in 41-1)

CVE-2012-1620 [LOW] CVE-2012-1620: suckless-tools - slock 0.9 does not properly handle the XRaiseWindow event when the screen is loc... slock 0.9 does not properly handle the XRaiseWindow event when the screen is locked, which might allow physically proximate attackers to obtain sensitive information by pressing a button, which reveals the desktop and active windows. Scope: local bookworm: resolved (fixed in 39-1) bullseye: resolved (fixed in 39-1) forky: resolved (fixed in 39-1) sid: resolved (