Debian: DSA-1902-1 Critical: ELinks Buffer Overflow Risk

Jakub Wilk discovered an off-by-one buffer overflow in the charset
handling of elinks, a feature-rich text-mode WWW browser, which might
lead to the execution of arbitrary code if the user is tricked into
opening a malformed HTML page.

For the old stable distribution (etch), this problem has been fixed in
version 0.11.1-1.2etch2.

The stable distribution (lenny) and the unstable distribution (sid)
already contain a patch for this problem.

We recommend that you upgrade your elinks package.

Upgrade instructions
- --------------------

wget url
will fetch the file for you
dpkg -i file.deb
will install the referenced file.

If you are using the apt-get package manager, use the line for
sources.list as given below:

apt-get update
will update the internal database
apt-get upgrade
will install corrected packages

You may use an automated update by adding the resources from the
footer to the proper configuration.


Debian GNU/Linux 4.0 alias etch

Oldstable updates are available for alpha...