Alerts This Week
Warning Icon 1 631
Alerts This Week
Warning Icon 1 631

Fedora 23: FEDORA-2016-637618fcd4 Critical: DLL Hijacking Fix

fedora
Calendar Grey December 7, 2016
Dist Fedora Esm H88
Critical DLL hijacking vulnerability patched in mingw-nsis version 2.50 for Fedora 23. Comprehensive security update information enclosed.
New upstream version 2.50

Summary

NSIS, the Nullsoft Scriptable Install System, is a script-driven

Windows installation system.

This package includes native Fedora binaries of makensis (etc.) and

all plugins.

Update Information:

New upstream version 2.50. - Fixes serious DLL hijacking attack:

Change Log

References


[ 1 ] Bug #1309882 - Security: NSIS < 2.50 allows DLL hijacking https://bugzilla.redhat.com/show_bug.cgi?id=1309882

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade mingw-nsis' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html

Severity
critical
Lowest
Low
Medium
High
Critical

Name: mingw-nsis
Product: Fedora 23
Version: 2.50
Release: 1.fc23
Summary: Nullsoft Scriptable Install System

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here