Lucene search

K
oraclelinuxOracleELSA-2008-0965
HistoryOct 27, 2008 - 12:00 a.m.

lynx security update

2008-10-2700:00:00
Oracle
linux.oracle.com
15

EPSS

0.015

Percentile

87.2%

[2.8.5-28.1.1]

  • add patch for CVE-2008-4690 (rhbz#468184)
    • prompt user before executing commands from the lynxcgi: handler,
      even in the advanced user mode
    • mark all lynxcgi: URIs as untrusted in the default lynx.cfg
  • add patch to prevent lynx from opening configuration files in the
    current working directory (CVE to be assigned) (rhbz#214205)