security advisorysecurity issuedebian
Updated package.. - --------------------------------------------------------------------------Debian Security Advisory DSA 1226-1 This email address is being protected from spambots. You need JavaScript enabled to view it. http://www.debian.org/security/ Moritz Muehlenhoff December 3rd, 2006 http://www.debian.org/security/faq - --------------------------------------------------------------------------Package : links Vulnerability : insufficient escaping Problem-Type : remote Debian-specific: no CVE ID : CVE-2006-5925 Debian Bug : 399187 Teemu Salmela discovered that the links character mode web browser performs insufficient sanitising of smb:// URIs, which might lead to the execution of arbitrary shell commands. For the stable distribution (sarge) this problem has been fixed in version 0.99+1.00pre12-1sarge1. For the upcoming stable distribution (etch) this problem has been fixed in version 0.99+1.00pre12-1.1. For the unstable distribution (sid) this problem has been fixed in version 0.99+1.00pre12-1.1. We recommend that you upgrade your links package. Upgrade Instructions - --------------------wget url will fetch the file for you dpkg -i file.deb will install the referenced file. If you are using the apt-get package manager, use the line for sources.list as given below: apt-get update will update the internal database apt-get upgrade will install corrected packages You may use an automated update by adding the resources from the footer to the proper configuration. Debian GNU/Linux 3.1 alias sarge - -------------------------------- Source archives: Size/MD5 checksum: 628 a1ac1c1549a102a35398b6453df8cf03 Size/MD5 checksum: 8329 5898f75988aba793e9559295996289ef Size/MD5 checksum: 597848 c262b08c822a582bbc992e3730f43336 Architecture independent components: Size/MD5 checksum: 5460 d983ff06f50743eefc590e13b881c649 Alpha architecture: Size/MD5 checksum: 441038 6d3f4dbcdb63455d1a7c6c573c0a2cb0 AMD64 architecture: Size/MD5 checksum: 396200 13443385aff64d07c142561684d3698d ARM architecture: Size/MD5 checksum: 376692 90dc38882cee571a605ea4c1b312101f HP Precision architecture: Size/MD5 checksum: 416286 1a0e7cd0c9885a5a47f89feecdeea13a Intel IA-32 architecture: Size/MD5 checksum: 385186 a99be183941d62c33bd7d0f49c1856cb Intel IA-64 architecture: Size/MD5 checksum: 524446 e68877303d408b3b730e703c6d78f709 Motorola 680x0 architecture: Size/MD5 checksum: 343786 51765dbe4d8788b4f4219c6f71461579 Big endian MIPS architecture: Size/MD5 checksum: 412208 f3272fc9e06d0ad0bed4c2d2816502fe Little endian MIPS architecture: Size/MD5 checksum: 408254 70f5c450fd225ea6a82befeb3d6aeeab PowerPC architecture: Size/MD5 checksum: 396926 b0cbccacc3632be2d3eb97cea74ea6d8 IBM S/390 architecture: Size/MD5 checksum: 390546 2def4e695f30d34bb03a0592f5deee5b Sun Sparc architecture: Size/MD5 checksum: 379836 be1bae25603d4a50cf854a6b6b075960 These files will probably be moved into the stable distribution on its next update. - ---------------------------------------------------------------------------------For apt-get: deb https://www.debian.org/security/ stable/updates main For dpkg-ftp: dists/stable/updates/main Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . Discover security advisory DSA 1457-2 addressing Remote Code Execution risk in Apache on Ubuntu.. Debian Security, Links Package, Remote Command Execution, Shell Command. . LinuxSecurity.com Team
Dec 03, 2006
Debian
Refine advisories
