Red Hat Security AdvisoryRHSA-2009:1471
elinks security update
Released 2009-10-01 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) elinks-0.11.1-6.el5_4.1, elinks-0.11.1-6.el5_4.1.i386, elinks-0.11.1-6.el5_4.1.ia64 +1
- Red Hat Enterprise Linux AS version 4 elinks-0.9.2-4.el4_8.1, elinks-0.9.2-4.el4_8.1.i386, elinks-0.9.2-4.el4_8.1.ia64 +1
- Red Hat Enterprise Linux Desktop (v. 5 client) elinks-0.11.1-6.el5_4.1, elinks-0.11.1-6.el5_4.1.i386
- Red Hat Enterprise Linux Desktop version 4 elinks-0.9.2-4.el4_8.1, elinks-0.9.2-4.el4_8.1.i386
- Red Hat Enterprise Linux ES version 4 elinks-0.9.2-4.el4_8.1, elinks-0.9.2-4.el4_8.1.i386, elinks-0.9.2-4.el4_8.1.ia64
- Red Hat Enterprise Linux WS version 4 elinks-0.9.2-4.el4_8.1, elinks-0.9.2-4.el4_8.1.i386, elinks-0.9.2-4.el4_8.1.ia64
Fixes 2 records
Priority LOW 39
Buffer overflow in entity_cache in ELinks before 0.11.4rc0 allows remote attackers to cause a denial of service (crash) via a crafted link.
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.02835 · Published 2009-09-14 · Fixed CWE-119
Priority LOW 22
Untrusted search path vulnerability in the add_filename_to_string function in intl/gettext/loadmsgcat.c for Elinks 0.11.1 allows local users to cause Elinks to use an untrusted gettext message catalog (.po file) in a "..…
CVSS 2.0MEDIUM 4.4· Local · No auth · Interaction — · EPSS 0.00841 · Published 2007-04-13 · Fixed CWE-134
