Ausführen beliebiger Kommandos in Lynx
ID: | FEDORA-2017-bf172b2035 |
Distribution: | Fedora |
Plattformen: | Fedora 26 |
Datum: | Mi, 27. Dezember 2017, 10:15 |
Referenzen: | http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000211 |
Applikationen: | Lynx |
Originalnachricht |
|
-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2017-bf172b2035 2017-12-26 15:02:57.897176 -------------------------------------------------------------------------------- Name : lynx Product : Fedora 26 Version : 2.8.9 Release : 0.20.dev16.fc26 URL : http://lynx.browser.org/ Summary : A text-based Web browser Description : Lynx is a text-based Web browser. Lynx does not display any images, but it does support frames, tables, and most other HTML tags. One advantage Lynx has over graphical browsers is speed; Lynx starts and exits quickly and swiftly displays web pages. -------------------------------------------------------------------------------- Update Information: - update to the latest upstream pre-release (fixes CVE-2017-1000211) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1522617 - CVE-2017-1000211 lynx: Use after free in HTML.c:HTML_put_string() can lead to memory disclosure https://bugzilla.redhat.com/show_bug.cgi?id=1522617 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade lynx' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list -- package-announce@lists.fedoraproject.org To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org |