elinks-0.11.1-6AXS3.1

エラータID: AXSA:2009-406:01

Release date: 
Friday, October 9, 2009 - 14:42
Subject: 
elinks-0.11.1-6AXS3.1
Affected Channels: 
Asianux Server 3 for x86_64
Asianux Server 3 for x86
Severity: 
High
Description: 

Links is a text-based Web browser. Links does not display any images, but it does support frames, tables and most other HTML tags. Links' advantage over graphical browsers is its speed--Links starts and exits quickly and swiftly displays Web pages.
Security bugs fixed with this release:
CVE-2007-2027
Untrusted search path vulnerability in the add_filename_to_string function in intl/gettext/loadmsgcat.c for Elinks 0.11.1 allows local users to cause Elinks to use an untrusted gettext message catalog (.po file) in a ../po directory, which can be leveraged to conduct format string attacks.
CVE-2008-7224
Buffer overflow in entity_cache in ELinks before 0.11.4rc0 allows remote attackers to cause a denial of service (crash) via a crafted link.

Solution: 

Update packages.

Additional Info: 

N/A

Download: 

SRPMS
  1. elinks-0.11.1-6AXS3.1.src.rpm
    MD5: e6911ac6998f4b8f8af045a3b9335cc1
    SHA-256: 506652ff7d9784bd007253f3f10c3fd7e8e302605c9e9a7781c9d09bac831916
    Size: 2.51 MB

Asianux Server 3 for x86
  1. elinks-0.11.1-6AXS3.1.i386.rpm
    MD5: c73a3272c87c05f05664f1657e7dc59c
    SHA-256: 78616c51de3806e27a8b472698c256661d2dd03a11f7460537f4e4e446256848
    Size: 0.99 MB

Asianux Server 3 for x86_64
  1. elinks-0.11.1-6AXS3.1.x86_64.rpm
    MD5: 83ae92cc4b27e3f5b8ac6b9abe7aa9b0
    SHA-256: a40af77e08cd75caaacfa81ca619ad4e92b8ab0fdb94b8a3cd0cbd3e48ea7eb8
    Size: 1.02 MB