Описание
Security update for newsbeuter
This update for newsbeuter fixes one issues.
This security issue was fixed:
- CVE-2017-14500: Improper Neutralization of special elements allowed remote attackers to perform user-assisted code execution by crafting an RSS item with a media enclosure that includes shell metacharacters in its filename (bsc#1059057).
Список пакетов
openSUSE Leap 42.2
newsbeuter-2.9-8.1
newsbeuter-lang-2.9-8.1
openSUSE Leap 42.3
newsbeuter-2.9-8.1
newsbeuter-lang-2.9-8.1
Ссылки
- E-Mail link for openSUSE-SU-2018:0229-1
- SUSE Security Ratings
Описание
Improper Neutralization of Special Elements used in an OS Command in the podcast playback function of Podbeuter in Newsbeuter 0.3 through 2.9 allows remote attackers to perform user-assisted code execution by crafting an RSS item with a media enclosure (i.e., a podcast file) that includes shell metacharacters in its filename, related to pb_controller.cpp and queueloader.cpp, a different vulnerability than CVE-2017-12904.
Затронутые продукты
openSUSE Leap 42.2:newsbeuter-2.9-8.1
openSUSE Leap 42.2:newsbeuter-lang-2.9-8.1
openSUSE Leap 42.3:newsbeuter-2.9-8.1
openSUSE Leap 42.3:newsbeuter-lang-2.9-8.1
Ссылки
- CVE-2017-14500
- SUSE Bug 1059057