Advisories ยป MGASA-2017-0052

Updated lynx packages fix security vulnerability

Publication date: 20 Feb 2017
Modification date: 20 Feb 2017
Type: security
Affected Mageia releases : 5
CVE: CVE-2016-9179

Description

Lynx doesn't parse the authority component of the URL correctly when the
host name part ends with '?', and could instead be tricked into connecting
to a different host. (CVE-2016-9179)
                

References

SRPMS

5/core