Important: less security update

Moderate: less security update

Moderate: less security update

close_altfile in filename.c in less before 606 omits shell_quote calls for LESSCLOSE.

less through 653 allows OS command execution via a newline character in the name of a file, because quoting is mishandled in filename.c. Exploitation typically requires use with attacker-controlled file names, such as the files extracted from an untrusted archive. Exploitation also requires the LESSOPEN environment variable, but this is set by default in many common cases.

ELSA-2024-3669: less security update (IMPORTANT)

ELSA-2024-3513: less security update (IMPORTANT)

ELSA-2024-1692: less security update (MODERATE)

ELSA-2024-1610: less security update (MODERATE)

Уязвимость функции close_altfile() (filename.c) для текстовых терминалов UNIX-подобных систем Less, позволяющая нарушителю произвольные команды

Уязвимость утилиты для текстовых терминалов UNIX-подобных систем Less, связанная с непринятием мер по нейтрализации специальных элементов, позволяющая нарушителю произвольные команды

Уязвимость less