Описание
Security update for lynx
This update for lynx fixes the following issues:
- CVE-2016-9179: It was found that Lynx doesn't parse the authority component of the URL correctly when the host name part ends with '?', and could instead be tricked into connecting to a different host. (bsc#1008642)
Список пакетов
SUSE Linux Enterprise Software Development Kit 11 SP4
lynx-2.8.6-145.1
Ссылки
- Link for SUSE-SU-2017:0599-1
- E-Mail link for SUSE-SU-2017:0599-1
- SUSE Security Ratings
- SUSE Bug 1008642
- SUSE CVE CVE-2016-9179 page
Описание
lynx: It was found that Lynx doesn't parse the authority component of the URL correctly when the host name part ends with '?', and could instead be tricked into connecting to a different host.
Затронутые продукты
SUSE Linux Enterprise Software Development Kit 11 SP4:lynx-2.8.6-145.1
Ссылки
- CVE-2016-9179
- SUSE Bug 1008642