From 582c442a0c7a754eeaf62ab77fadabb963e9c1a2 Mon Sep 17 00:00:00 2001 From: Brian May Date: Mon, 15 Apr 2019 16:57:10 +1000 Subject: DLA-719-1 advisory --- english/lts/security/2016/dla-719.data | 10 ++++++++++ english/lts/security/2016/dla-719.wml | 20 ++++++++++++++++++++ 2 files changed, 30 insertions(+) create mode 100644 english/lts/security/2016/dla-719.data create mode 100644 english/lts/security/2016/dla-719.wml diff --git a/english/lts/security/2016/dla-719.data b/english/lts/security/2016/dla-719.data new file mode 100644 index 00000000000..69b99edac6a --- /dev/null +++ b/english/lts/security/2016/dla-719.data @@ -0,0 +1,10 @@ +DLA-719-1 lynx-cur +2016-11-24 +CVE-2016-9179 +lynx-cur +yes +yes +no + +#use wml::debian::security + diff --git a/english/lts/security/2016/dla-719.wml b/english/lts/security/2016/dla-719.wml new file mode 100644 index 00000000000..c705ddc6d8f --- /dev/null +++ b/english/lts/security/2016/dla-719.wml @@ -0,0 +1,20 @@ +LTS security update + + +

Current versions of lynx have incorrect parsing of the URL. In certian +circumstances the hostname will be incorrectly derived after the '?' character. +This could lead to lynx incorrectly going to the wrong website.

+ +

For Debian 7 Wheezy, these problems have been fixed in version +2.8.8dev.12-2+deb7u1.

+ +

We recommend that you upgrade your lynx-cur packages.

+ +

Further information about Debian LTS security advisories, how to apply +these updates to your system and frequently asked questions can be +found at: https://wiki.debian.org/LTS

+
+ +# do not modify the following line +#include "$(ENGLISHDIR)/lts/security/2016/dla-719.data" +# $Id: $ -- cgit v1.2.3