Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found 6 articles for you...
98
security advisorysecurity issueRed HatRed Hat: RHSA-2013-0250-01 Moderate: ELinks Client Credentials Issue
An updated elinks package that fixes one security issue is now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System (CVSS) base score,. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ==================================================================== Red Hat Security Advisory Synopsis: Moderate: elinks security update Advisory ID: RHSA-2013:0250-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2013:0250.html Issue date: 2013-02-11 CVE Names: CVE-2012-4545 ==================================================================== 1. Summary: An updated elinks package that fixes one security issue is now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux (v. 5 server) - i386, ia64, ppc, s390x, x86_64 Red Hat Enterprise Linux Desktop (v. 5 client) - i386, x86_64 Red Hat Enterprise Linux Desktop (v. 6) - i386, x86_64 Red Hat Enterprise Linux HPC Node (v. 6) - x86_64 Red Hat Enterprise Linux Server (v. 6) - i386, ppc64, s390x, x86_64 Red Hat Enterprise Linux Workstation (v. 6) - i386, x86_64 3. Description: ELinks is a text-based web browser. ELinks does not display any images, but it does support frames, tables, and most other HTML tags. It was found that ELinks performed client credentials delegation during the client-to-server GSS security mechanisms negotiation. A rogue server could use this flaw to obtain the client's credentials and impersonate that client to other servers that are using GSSAPI. (CVE-2012-4545) This issue was discovered by Marko Myllynen of Red Hat. All ELinksusers are advised to upgrade to this updated package, which contains a backported patch to resolve the issue. 4. Solution: Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258 5. Bugs fixed (http://bugzilla.redhat.com/): 864566 - CVE-2012-4545 elinks: Improper delegation of client credentials during GSS negotiation 6. Package List: Red Hat Enterprise Linux Desktop (v. 5 client): Source: i386: elinks-0.11.1-8.el5_9.i386.rpm elinks-debuginfo-0.11.1-8.el5_9.i386.rpm x86_64: elinks-0.11.1-8.el5_9.x86_64.rpm elinks-debuginfo-0.11.1-8.el5_9.x86_64.rpm Red Hat Enterprise Linux (v. 5 server): Source: i386: elinks-0.11.1-8.el5_9.i386.rpm elinks-debuginfo-0.11.1-8.el5_9.i386.rpm ia64: elinks-0.11.1-8.el5_9.ia64.rpm elinks-debuginfo-0.11.1-8.el5_9.ia64.rpm ppc: elinks-0.11.1-8.el5_9.ppc.rpm elinks-debuginfo-0.11.1-8.el5_9.ppc.rpm s390x: elinks-0.11.1-8.el5_9.s390x.rpm elinks-debuginfo-0.11.1-8.el5_9.s390x.rpm x86_64: elinks-0.11.1-8.el5_9.x86_64.rpm elinks-debuginfo-0.11.1-8.el5_9.x86_64.rpm Red Hat Enterprise Linux Desktop (v. 6): Source: i386: elinks-0.12-0.21.pre5.el6_3.i686.rpm elinks-debuginfo-0.12-0.21.pre5.el6_3.i686.rpm x86_64: elinks-0.12-0.21.pre5.el6_3.x86_64.rpm elinks-debuginfo-0.12-0.21.pre5.el6_3.x86_64.rpm Red Hat Enterprise Linux HPC Node (v. 6): Source: x86_64: elinks-0.12-0.21.pre5.el6_3.x86_64.rpm elinks-debuginfo-0.12-0.21.pre5.el6_3.x86_64.rpm Red Hat Enterprise Linux Server (v.6): Source: i386: elinks-0.12-0.21.pre5.el6_3.i686.rpm elinks-debuginfo-0.12-0.21.pre5.el6_3.i686.rpm ppc64: elinks-0.12-0.21.pre5.el6_3.ppc64.rpm elinks-debuginfo-0.12-0.21.pre5.el6_3.ppc64.rpm s390x: elinks-0.12-0.21.pre5.el6_3.s390x.rpm elinks-debuginfo-0.12-0.21.pre5.el6_3.s390x.rpm x86_64: elinks-0.12-0.21.pre5.el6_3.x86_64.rpm elinks-debuginfo-0.12-0.21.pre5.el6_3.x86_64.rpm Red Hat Enterprise Linux Workstation (v. 6): Source: i386: elinks-0.12-0.21.pre5.el6_3.i686.rpm elinks-debuginfo-0.12-0.21.pre5.el6_3.i686.rpm x86_64: elinks-0.12-0.21.pre5.el6_3.x86_64.rpm elinks-debuginfo-0.12-0.21.pre5.el6_3.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/#package 7. References: https://access.redhat.com/security/cve/CVE-2012-4545 https://access.redhat.com/security/updates/classification/#moderate 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2013 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.4 (GNU/Linux) iD8DBQFRGTVvXlSAg2UNWIIRAiwtAKC1ibbfsQBhbX0iOhj7/3Eu5bdUSACdGyIg 9nqD0pXT28YC2LKWLIQswVA=rju5 -----END PGP SIGNATURE----- -- Enterprise-watch-list mailing list
Feb 11, 2013
Red Hat
200
security advisorymoderateinformation disclosureScientific Linux: Moderate Elinks Security Update CVE-2012-4545
Moderate: elinks security update. Date: Mon, 11 Feb 2013 14:03:23 -0600 Reply-To: Pat Riehecky Sender: Security Errata for Scientific Linux From: Pat Riehecky Organization: Fermilab Subject: Security ERRATA Moderate: elinks on SL5.x, SL6.x i386/x86_64 Synopsis: Moderate: elinks security update Issue Date: 2013-02-11 CVE Numbers: CVE-2012-4545 -- It was found that ELinks performed client credentials delegation during the client-to-server GSS security mechanisms negotiation. A rogue server could use this flaw to obtain the client's credentials and impersonate that client to other servers that are using GSSAPI. (CVE-2012-4545) -- SL5 x86_64 elinks-0.11.1-8.el5_9.x86_64.rpm elinks-debuginfo-0.11.1-8.el5_9.x86_64.rpm i386 elinks-0.11.1-8.el5_9.i386.rpm elinks-debuginfo-0.11.1-8.el5_9.i386.rpm SL6 x86_64 elinks-0.12-0.21.pre5.el6_3.x86_64.rpm elinks-debuginfo-0.12-0.21.pre5.el6_3.x86_64.rpm i386 elinks-0.12-0.21.pre5.el6_3.i686.rpm elinks-debuginfo-0.12-0.21.pre5.el6_3.i686.rpm - Scientific Linux Development Team . The recent elinks security update for Scientific Linux is vital for mitigating the risk of credential theft via server impersonation. Users should upgrade now. Elinks Update, Security Advisory, Scientific Linux, Credential Theft, Moderate Severity. . LinuxSecurity.com Team
Feb 11, 2013
Scientific Linux
98
security advisorymoderatesecurity issueRed Hat Enterprise Linux: RHSA-2013:0250-01 Moderate: ELinks Security Issue
An updated elinks package that fixes one security issue is now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having moderate [More...]. ==================================================================== Red Hat Security Advisory Synopsis: Moderate: elinks security update Advisory ID: RHSA-2013:0250-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2013:0250.html Issue date: 2013-02-11 CVE Names: CVE-2012-4545 ==================================================================== 1. Summary: An updated elinks package that fixes one security issue is now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux (v. 5 server) - i386, ia64, ppc, s390x, x86_64 Red Hat Enterprise Linux Desktop (v. 5 client) - i386, x86_64 Red Hat Enterprise Linux Desktop (v. 6) - i386, x86_64 Red Hat Enterprise Linux HPC Node (v. 6) - x86_64 Red Hat Enterprise Linux Server (v. 6) - i386, ppc64, s390x, x86_64 Red Hat Enterprise Linux Workstation (v. 6) - i386, x86_64 3. Description: ELinks is a text-based web browser. ELinks does not display any images, but it does support frames, tables, and most other HTML tags. It was found that ELinks performed client credentials delegation during the client-to-server GSS security mechanisms negotiation. A rogue server could use this flaw to obtain the client's credentials and impersonate that client to other servers that are using GSSAPI. (CVE-2012-4545) This issue was discovered by Marko Myllynen of Red Hat. All ELinks users are advised to upgrade to this updated package, which contains a backported patch to resolve theissue. 4. Solution: Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258 5. Bugs fixed (http://bugzilla.redhat.com/): 864566 - CVE-2012-4545 elinks: Improper delegation of client credentials during GSS negotiation 6. Package List: Red Hat Enterprise Linux Desktop (v. 5 client): Source: i386: elinks-0.11.1-8.el5_9.i386.rpm elinks-debuginfo-0.11.1-8.el5_9.i386.rpm x86_64: elinks-0.11.1-8.el5_9.x86_64.rpm elinks-debuginfo-0.11.1-8.el5_9.x86_64.rpm Red Hat Enterprise Linux (v. 5 server): Source: i386: elinks-0.11.1-8.el5_9.i386.rpm elinks-debuginfo-0.11.1-8.el5_9.i386.rpm ia64: elinks-0.11.1-8.el5_9.ia64.rpm elinks-debuginfo-0.11.1-8.el5_9.ia64.rpm ppc: elinks-0.11.1-8.el5_9.ppc.rpm elinks-debuginfo-0.11.1-8.el5_9.ppc.rpm s390x: elinks-0.11.1-8.el5_9.s390x.rpm elinks-debuginfo-0.11.1-8.el5_9.s390x.rpm x86_64: elinks-0.11.1-8.el5_9.x86_64.rpm elinks-debuginfo-0.11.1-8.el5_9.x86_64.rpm Red Hat Enterprise Linux Desktop (v. 6): Source: i386: elinks-0.12-0.21.pre5.el6_3.i686.rpm elinks-debuginfo-0.12-0.21.pre5.el6_3.i686.rpm x86_64: elinks-0.12-0.21.pre5.el6_3.x86_64.rpm elinks-debuginfo-0.12-0.21.pre5.el6_3.x86_64.rpm Red Hat Enterprise Linux HPC Node (v. 6): Source: x86_64: elinks-0.12-0.21.pre5.el6_3.x86_64.rpm elinks-debuginfo-0.12-0.21.pre5.el6_3.x86_64.rpm Red Hat Enterprise Linux Server (v. 6): Source: i386: elinks-0.12-0.21.pre5.el6_3.i686.rpm elinks-debuginfo-0.12-0.21.pre5.el6_3.i686.rpm ppc64: elinks-0.12-0.21.pre5.el6_3.ppc64.rpm elinks-debuginfo-0.12-0.21.pre5.el6_3.ppc64.rpm s390x: elinks-0.12-0.21.pre5.el6_3.s390x.rpm elinks-debuginfo-0.12-0.21.pre5.el6_3.s390x.rpm x86_64: elinks-0.12-0.21.pre5.el6_3.x86_64.rpm elinks-debuginfo-0.12-0.21.pre5.el6_3.x86_64.rpm Red Hat Enterprise Linux Workstation (v.6): Source: i386: elinks-0.12-0.21.pre5.el6_3.i686.rpm elinks-debuginfo-0.12-0.21.pre5.el6_3.i686.rpm x86_64: elinks-0.12-0.21.pre5.el6_3.x86_64.rpm elinks-debuginfo-0.12-0.21.pre5.el6_3.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key#package 7. References: https://access.redhat.com/security/cve/CVE-2012-4545 https://access.redhat.com/security/updates/classification#moderate 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2013 Red Hat, Inc. . Address a critical elinks vulnerability via the newest Red Hat release. Ensure safety by implementing essential upgrade procedures.. Red Hat Enterprise, elinks security, client credential attack, server impersonation. . LinuxSecurity.com Team
Feb 11, 2013
Red Hat
87
security advisorydebianremoteDebian: DSA-2592-1 Critical Elinks Remote Credential Delegation Issue
Marko Myllynen discovered that elinks, a powerful text-mode browser, incorrectly delegates user credentials during GSS-Negotiate. For the stable distribution (squeeze), this problem has been fixed in . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2592-1
Dec 28, 2012
•Critical
Debian
87
security advisorybuffer overflowcriticalDebian: DSA-1902-1 Critical: ELinks Buffer Overflow Risk
Jakub Wilk discovered an off-by-one buffer overflow in the charset handling of elinks, a feature-rich text-mode WWW browser, which might lead to the execution of arbitrary code if the user is tricked into opening a malformed HTML page. . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1902-1
Oct 05, 2009
•Critical
Debian
200
security advisorybuffer overflowimportant updateScientific Linux SL4.x/SL5.x Important: elinks Security Fixes
Important: elinks security update. Date: Fri, 2 Oct 2009 14:27:07 -0500 Reply-To: Troy Dawson Sender: Security Errata for Scientific Linux From: Troy Dawson Subject: Security ERRATA Important: elinks on SL4.x, SL5.x i386/x86_64 Comments: To: "
Oct 02, 2009
•Important
Scientific Linux
98
security advisorybuffer overflowred hatRed Hat RHSA-2009-1471-01 Critical: ELinks Buffer Overflow Details
An updated elinks package that fixes two security issues is now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having important security impact by the Red Hat Security Response Team.. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ==================================================================== Red Hat Security Advisory Synopsis: Important: elinks security update Advisory ID: RHSA-2009:1471-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2009:1471.html Issue date: 2009-10-01 CVE Names: CVE-2007-2027 CVE-2008-7224 ==================================================================== 1. Summary: An updated elinks package that fixes two security issues is now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. 2. Relevant releases/architectures: Red Hat Enterprise Linux AS version 4 - i386, ia64, ppc, s390, s390x, x86_64 Red Hat Enterprise Linux Desktop version 4 - i386, x86_64 Red Hat Enterprise Linux ES version 4 - i386, ia64, x86_64 Red Hat Enterprise Linux WS version 4 - i386, ia64, x86_64 Red Hat Enterprise Linux Desktop (v. 5 client) - i386, x86_64 Red Hat Enterprise Linux (v. 5 server) - i386, ia64, ppc, s390x, x86_64 3. Description: ELinks is a text-based Web browser. ELinks does not display any images, but it does support frames, tables, and most other HTML tags. An off-by-one buffer overflow flaw was discovered in the way ELinks handled its internal cache of string representations for HTML special entities. A remote attacker could use this flaw to create a specially-crafted HTML file that would cause ELinks to crash or, possibly, execute arbitrary code when rendered. (CVE-2008-7224) It was discovered that ELinks tried to load translation files using relative paths. A local attacker able to trick a victim into running ELinks in a folder containingspecially-crafted translation files could use this flaw to confuse the victim via incorrect translations, or cause ELinks to crash and possibly execute arbitrary code via embedded formatting sequences in translated messages. (CVE-2007-2027) All ELinks users are advised to upgrade to this updated package, which contains backported patches to resolve these issues. 4. Solution: Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at 5. Bugs fixed (http://bugzilla.redhat.com/): 235411 - CVE-2007-2027 elinks tries to load .po files from a non-absolute path 523258 - CVE-2008-7224 elinks: entity_cache static array buffer overflow (off-by-one) 6. Package List: Red Hat Enterprise Linux AS version 4: Source: i386: elinks-0.9.2-4.el4_8.1.i386.rpm elinks-debuginfo-0.9.2-4.el4_8.1.i386.rpm ia64: elinks-0.9.2-4.el4_8.1.ia64.rpm elinks-debuginfo-0.9.2-4.el4_8.1.ia64.rpm ppc: elinks-0.9.2-4.el4_8.1.ppc.rpm elinks-debuginfo-0.9.2-4.el4_8.1.ppc.rpm s390: elinks-0.9.2-4.el4_8.1.s390.rpm elinks-debuginfo-0.9.2-4.el4_8.1.s390.rpm s390x: elinks-0.9.2-4.el4_8.1.s390x.rpm elinks-debuginfo-0.9.2-4.el4_8.1.s390x.rpm x86_64: elinks-0.9.2-4.el4_8.1.x86_64.rpm elinks-debuginfo-0.9.2-4.el4_8.1.x86_64.rpm Red Hat Enterprise Linux Desktop version 4: Source: i386: elinks-0.9.2-4.el4_8.1.i386.rpm elinks-debuginfo-0.9.2-4.el4_8.1.i386.rpm x86_64: elinks-0.9.2-4.el4_8.1.x86_64.rpm elinks-debuginfo-0.9.2-4.el4_8.1.x86_64.rpm Red Hat Enterprise Linux ES version 4: Source: i386: elinks-0.9.2-4.el4_8.1.i386.rpm elinks-debuginfo-0.9.2-4.el4_8.1.i386.rpm ia64: elinks-0.9.2-4.el4_8.1.ia64.rpm elinks-debuginfo-0.9.2-4.el4_8.1.ia64.rpm x86_64: elinks-0.9.2-4.el4_8.1.x86_64.rpm elinks-debuginfo-0.9.2-4.el4_8.1.x86_64.rpm Red Hat Enterprise Linux WS version4: Source: i386: elinks-0.9.2-4.el4_8.1.i386.rpm elinks-debuginfo-0.9.2-4.el4_8.1.i386.rpm ia64: elinks-0.9.2-4.el4_8.1.ia64.rpm elinks-debuginfo-0.9.2-4.el4_8.1.ia64.rpm x86_64: elinks-0.9.2-4.el4_8.1.x86_64.rpm elinks-debuginfo-0.9.2-4.el4_8.1.x86_64.rpm Red Hat Enterprise Linux Desktop (v. 5 client): Source: i386: elinks-0.11.1-6.el5_4.1.i386.rpm elinks-debuginfo-0.11.1-6.el5_4.1.i386.rpm x86_64: elinks-0.11.1-6.el5_4.1.x86_64.rpm elinks-debuginfo-0.11.1-6.el5_4.1.x86_64.rpm Red Hat Enterprise Linux (v. 5 server): Source: i386: elinks-0.11.1-6.el5_4.1.i386.rpm elinks-debuginfo-0.11.1-6.el5_4.1.i386.rpm ia64: elinks-0.11.1-6.el5_4.1.ia64.rpm elinks-debuginfo-0.11.1-6.el5_4.1.ia64.rpm ppc: elinks-0.11.1-6.el5_4.1.ppc.rpm elinks-debuginfo-0.11.1-6.el5_4.1.ppc.rpm s390x: elinks-0.11.1-6.el5_4.1.s390x.rpm elinks-debuginfo-0.11.1-6.el5_4.1.s390x.rpm x86_64: elinks-0.11.1-6.el5_4.1.x86_64.rpm elinks-debuginfo-0.11.1-6.el5_4.1.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key#package 7. References: https://www.cve.org/CVERecord?id=CVE-2007-2027 https://www.cve.org/CVERecord?id=CVE-2008-7224 https://access.redhat.com/security/updates/classification#important 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2009 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.4 (GNU/Linux) iD8DBQFKxOkdXlSAg2UNWIIRAtXHAKCVF6l/7CYcxnaLegsmKwe9LcbqVwCfcwiE NPI04ky31xt1Pei00zutNls=220E -----END PGP SIGNATURE----- -- Enterprise-watch-list mailing list
Oct 01, 2009
•Important
Red Hat
98
security advisoryRed Hatbuffer overflowRed Hat RHSA-2009:1471-01 Important: ELinks Buffer Overflow Risk
An updated elinks package that fixes two security issues is now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having important security impact by the Red Hat Security Response Team.. ==================================================================== Red Hat Security Advisory Synopsis: Important: elinks security update Advisory ID: RHSA-2009:1471-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2009:1471.html Issue date: 2009-10-01 CVE Names: CVE-2007-2027 CVE-2008-7224 ==================================================================== 1. Summary: An updated elinks package that fixes two security issues is now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. 2. Relevant releases/architectures: Red Hat Enterprise Linux AS version 4 - i386, ia64, ppc, s390, s390x, x86_64 Red Hat Enterprise Linux Desktop version 4 - i386, x86_64 Red Hat Enterprise Linux ES version 4 - i386, ia64, x86_64 Red Hat Enterprise Linux WS version 4 - i386, ia64, x86_64 Red Hat Enterprise Linux Desktop (v. 5 client) - i386, x86_64 Red Hat Enterprise Linux (v. 5 server) - i386, ia64, ppc, s390x, x86_64 3. Description: ELinks is a text-based Web browser. ELinks does not display any images, but it does support frames, tables, and most other HTML tags. An off-by-one buffer overflow flaw was discovered in the way ELinks handled its internal cache of string representations for HTML special entities. A remote attacker could use this flaw to create a specially-crafted HTML file that would cause ELinks to crash or, possibly, execute arbitrary code when rendered. (CVE-2008-7224) It was discovered that ELinks tried to load translation files using relative paths. A local attacker able to trick a victim into running ELinks in a folder containing specially-crafted translation files could use this flaw toconfuse the victim via incorrect translations, or cause ELinks to crash and possibly execute arbitrary code via embedded formatting sequences in translated messages. (CVE-2007-2027) All ELinks users are advised to upgrade to this updated package, which contains backported patches to resolve these issues. 4. Solution: Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at 5. Bugs fixed (http://bugzilla.redhat.com/): 235411 - CVE-2007-2027 elinks tries to load .po files from a non-absolute path 523258 - CVE-2008-7224 elinks: entity_cache static array buffer overflow (off-by-one) 6. Package List: Red Hat Enterprise Linux AS version 4: Source: i386: elinks-0.9.2-4.el4_8.1.i386.rpm elinks-debuginfo-0.9.2-4.el4_8.1.i386.rpm ia64: elinks-0.9.2-4.el4_8.1.ia64.rpm elinks-debuginfo-0.9.2-4.el4_8.1.ia64.rpm ppc: elinks-0.9.2-4.el4_8.1.ppc.rpm elinks-debuginfo-0.9.2-4.el4_8.1.ppc.rpm s390: elinks-0.9.2-4.el4_8.1.s390.rpm elinks-debuginfo-0.9.2-4.el4_8.1.s390.rpm s390x: elinks-0.9.2-4.el4_8.1.s390x.rpm elinks-debuginfo-0.9.2-4.el4_8.1.s390x.rpm x86_64: elinks-0.9.2-4.el4_8.1.x86_64.rpm elinks-debuginfo-0.9.2-4.el4_8.1.x86_64.rpm Red Hat Enterprise Linux Desktop version 4: Source: i386: elinks-0.9.2-4.el4_8.1.i386.rpm elinks-debuginfo-0.9.2-4.el4_8.1.i386.rpm x86_64: elinks-0.9.2-4.el4_8.1.x86_64.rpm elinks-debuginfo-0.9.2-4.el4_8.1.x86_64.rpm Red Hat Enterprise Linux ES version 4: Source: i386: elinks-0.9.2-4.el4_8.1.i386.rpm elinks-debuginfo-0.9.2-4.el4_8.1.i386.rpm ia64: elinks-0.9.2-4.el4_8.1.ia64.rpm elinks-debuginfo-0.9.2-4.el4_8.1.ia64.rpm x86_64: elinks-0.9.2-4.el4_8.1.x86_64.rpm elinks-debuginfo-0.9.2-4.el4_8.1.x86_64.rpm Red Hat Enterprise Linux WS version4: Source: i386: elinks-0.9.2-4.el4_8.1.i386.rpm elinks-debuginfo-0.9.2-4.el4_8.1.i386.rpm ia64: elinks-0.9.2-4.el4_8.1.ia64.rpm elinks-debuginfo-0.9.2-4.el4_8.1.ia64.rpm x86_64: elinks-0.9.2-4.el4_8.1.x86_64.rpm elinks-debuginfo-0.9.2-4.el4_8.1.x86_64.rpm Red Hat Enterprise Linux Desktop (v. 5 client): Source: i386: elinks-0.11.1-6.el5_4.1.i386.rpm elinks-debuginfo-0.11.1-6.el5_4.1.i386.rpm x86_64: elinks-0.11.1-6.el5_4.1.x86_64.rpm elinks-debuginfo-0.11.1-6.el5_4.1.x86_64.rpm Red Hat Enterprise Linux (v. 5 server): Source: i386: elinks-0.11.1-6.el5_4.1.i386.rpm elinks-debuginfo-0.11.1-6.el5_4.1.i386.rpm ia64: elinks-0.11.1-6.el5_4.1.ia64.rpm elinks-debuginfo-0.11.1-6.el5_4.1.ia64.rpm ppc: elinks-0.11.1-6.el5_4.1.ppc.rpm elinks-debuginfo-0.11.1-6.el5_4.1.ppc.rpm s390x: elinks-0.11.1-6.el5_4.1.s390x.rpm elinks-debuginfo-0.11.1-6.el5_4.1.s390x.rpm x86_64: elinks-0.11.1-6.el5_4.1.x86_64.rpm elinks-debuginfo-0.11.1-6.el5_4.1.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key#package 7. References: https://www.cve.org/CVERecord?id=CVE-2007-2027 https://www.cve.org/CVERecord?id=CVE-2008-7224 https://access.redhat.com/security/updates/classification#important 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2009 Red Hat, Inc. . Crucial patch released for Debian's lynx software addresses two significant vulnerabilities, reducing the risk of severe memory access issues.. RedHat, elinks, security update, important patch, code execution risk. . Severity: Important. LinuxSecurity.com Team
Oct 01, 2009
•Important
Red Hat
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!