[Secure-testing-team] Bug#886683: electrum: Security vulnerability in electrum

[Daniel Koszta]

Package: electrum
Version: 3.0.3-1
Severity: grave
Tags: security
Justification: user security hole

Dear Maintainer,

Many Electrum versions are vulnerable, see
https://github.com/spesmilo/electrum/issues/3374.

A new, fixed version is already available in debian unstable, but it
should be included in stable and testing as soon as possible.



-- System Information:
Debian Release: buster/sid
  APT prefers testing
  APT policy: (800, 'testing'), (500, 'stable'), (200, 'unstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.13.0-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=hu_HU.utf8, LC_CTYPE=hu_HU.utf8 (charmap=UTF-8), LANGUAGE=hu_HU.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages electrum depends on:
ii  python3           3.6.4-1
ii  python3-electrum  3.0.3-1

Versions of packages electrum recommends:
ii  python3-pyqt5  5.9.2+dfsg-1

Versions of packages electrum suggests:
pn  python3-btchip  <none>
pn  python3-trezor  <none>
pn  python3-zbar    <none>

-- no debconf information