Linux Compatible
  • News
    • Channels
    • Archive
    • Search
    • Submit
  • Articles
    • Categories
  • Knowledgebase
  • Compatibility
    • Search
  • Links
  • Forums
  • Twitter
Advertisement

Latest News
[ Windows | Linux | Apple ]

· Gigabyte Aorus X470 Gaming 7 Wifi Review and more
· Libreoffice and Libsdl2-image Updates for Debian 8/9
· Chromium and Cfitsio Updates for openSUSE
· MySQL-5.5 Security Update for Debian 8
· AMD 2nd Gen Ryzen Reviews and more
· Windows 10 Insider Preview Build 17650 released
· MySQL and Libreoffice Updates for Debian 7 LTS
· Apache and OpenSSL Security Update for Ubuntu Linux
· MySQL 8.0.11 released
· Popular YouTuber Says Apple Won't Fix His iMac Pro Damaged While Disassembled and more

Upcoming News
· Samsung 860 Pro SSD Review @ Vortez
· Raijintek Orcus 240 @ TechPowerUp
· Team Group Cardea Zero 240 GB @ TechPowerUp
· Guru3D Rig of the Month - January 2018
· Cooler Master MK750 Review @ Vortez
· Seagate Skyhawk 10TB SATA III HDD Review
· Vulkan Continues To Show Its Gaming Strength On Low-End Hardware
· Seagate IronWolf ST12000VN0007 12TB Hard Drive Review @ APH Networks
· Sennheiser Game One @ TechPowerUp
· be quiet! Straight Power 11 1000W Power Supply Review

Linux Compatibility
· Brother DCP-L2540DN
· Sound Blaster E5
· WD Elements 500GB external hard drive
· Canon D660U Flatbad scanner
· Umax Astra 4500 USB Scanner
· Logitech QuickCam Pro 4000
· Dell Latitude E6420
· Creative Sound Blaster Z
· Photosmart 5520
· TB-5300 Slimline Design Tablet

New Forum Topics
· Dale
by: Dale Blinco
on: 2018-02-05 00:26
1 replies, 1198 views

· modem driver needed
by: jongiffen777
on: 2017-12-13 11:11
1 replies, 2374 views

· Need a decent browser for XP Pro!
by: percy
on: 2017-12-05 11:02
2 replies, 4258 views

· Comodo Time Machine + Faronics Deep Freeze
by: Jabberwocky
on: 2017-11-15 23:17
1 replies, 2865 views

· Linux compatablity
by: ibme
on: 2017-10-04 18:05
1 replies, 4784 views

News Channels
· Drivers
· Guides
· Reviews
· Security
· Software
· Press Release
· Updates
· Interviews
· Linux
· General
· Debian
· Red Hat
· Slackware
· Gentoo
· Mandriva
· White Box
· SUSE
· GNOME
· KDE
· CentOS
· Ubuntu
· MEPIS
· Android
· Oracle Linux
· Arch Linux

What's New
Login to see an overview of all news stories since your last visit.

Welcome to our website

To take full advantage of all features you need to login or register. Registration is completely free and takes only a few seconds.

Linux Compatible » News » December 2006 » DSA-1240-1: New links2 packages fix arbitrary shell command execution

DSA-1240-1: New links2 packages fix arbitrary shell command execution

Posted by Bob on: 12/21/2006 11:20 AM [ Print | 0 comment(s) ]

The Debian Security Team published a new security update for Debian GNU/Linux. Here the announcement:




-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


- ------------------------------------------------------------------------
Debian Security Advisory DSA-1240-1 security@debian.org
http://www.debian.org/security/ Steve Kemp
December 21, 2006
- ------------------------------------------------------------------------

Package : links2
Vulnerability : insufficient escaping
Problem type : remote
Debian-specific: no
CVE Id(s) : CVE-2006-5925
Debian Bug : 400718

Teemu Salmela discovered that the links2 character mode web browser
performs insufficient sanitising of smb:// URIs, which might lead to the
execution of arbitrary shell commands.

For the stable distribution (sarge) this problem has been fixed in
version 2.1pre16-1sarge1.

For the upcoming stable distribution (etch) this problem has been
fixed in version 2.1pre26-1.

For the unstable distribution (sid) this problem has been fixed in
version 2.1pre26-1.

We recommend that you upgrade your links2 package.

Upgrade instructions
- --------------------

wget url
will fetch the file for you
dpkg -i file.deb
will install the referenced file.

If you are using the apt-get package manager, use the line for
sources.list as given below:

apt-get update
will update the internal database
apt-get upgrade
will install corrected packages

You may use an automated update by adding the resources from the
footer to the proper configuration.

Debian 3.1 (stable)
- -------------------

Stable updates are available for alpha, amd64, arm, hppa, i386, ia64, m68k, mips, mipsel, powerpc, s390 and sparc.

Source archives:

http://security.debian.org/pool/updates/main/l/links2/links2_2.1pre16-1sarge1.diff.gz
Size/MD5 checksum: 28658 a83c79990bbfb6f9ec26d737f767ee90
http://security.debian.org/pool/updates/main/l/links2/links2_2.1pre16.orig.tar.gz
Size/MD5 checksum: 4217483 7baf4fc20cc244d80ead21cebff07d89
http://security.debian.org/pool/updates/main/l/links2/links2_2.1pre16-1sarge1.dsc
Size/MD5 checksum: 841 ed4853334b7eebef055271df06cdcd7a

alpha architecture (DEC Alpha)

http://security.debian.org/pool/updates/main/l/links2/links2_2.1pre16-1sarge1_alpha.deb
Size/MD5 checksum: 2110324 b3633fddb199c45339d3837bb0a519a0

amd64 architecture (AMD x86_64 (AMD64))

http://security.debian.org/pool/updates/main/l/links2/links2_2.1pre16-1sarge1_amd64.deb
Size/MD5 checksum: 2040922 5fb402e6a833709741d20238346c7597

arm architecture (ARM)

http://security.debian.org/pool/updates/main/l/links2/links2_2.1pre16-1sarge1_arm.deb
Size/MD5 checksum: 1996004 c7c79ddcb82d5758668ed71d74b9685f

i386 architecture (Intel ia32)

http://security.debian.org/pool/updates/main/l/links2/links2_2.1pre16-1sarge1_i386.deb
Size/MD5 checksum: 1997426 4c1ef611e31c57583f7471653962a84a

m68k architecture (Motorola Mc680x0)

http://security.debian.org/pool/updates/main/l/links2/links2_2.1pre16-1sarge1_m68k.deb
Size/MD5 checksum: 1904084 e5c777a07eaa88f4367b51d88c556a14

mips architecture (MIPS (Big Endian))

http://security.debian.org/pool/updates/main/l/links2/links2_2.1pre16-1sarge1_mips.deb
Size/MD5 checksum: 2034596 22854de6eaf3aa1e392291760e85e5e8


These files will probably be moved into the stable distribution on
its next update.

- ---------------------------------------------------------------------------------
For apt-get: deb http://security.debian.org/ stable/updates main
For dpkg-ftp: ftp://security.debian.org/debian-security dists/stable/updates/main
Mailing list: debian-security-announce@lists.debian.org
Package info: `apt-cache show lt;pkggt;' and http://packages.debian.org/lt;pkggt;
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQFFil26wM/Gs81MDZ0RAvPPAJ9cxthVIvv2w2UmXuzhiiPR21aOjgCgo7J8
vA5Gql5VNhz4zm/QV5K4pig=
=JT/Q
-----END PGP SIGNATURE-----


Bookmark and Share

« Arctic Cooling Freezer 7 Pro Vs. CoolerMaster Hyper TX · iPod Accessories for Holiday Gift Giving »

Linux Compatible » News » December 2006 » DSA-1240-1: New links2 packages fix arbitrary shell command execution
All products mentioned are registered trademarks or trademarks of their respective owners.
© 2002-2018 Esselbach Internet Solutions - All Rights Reserved. Terms and privacy policy
Powered by Contentteller® Business Edition