Teemu Salmela discovered that the elinks character mode web browser performs insufficient sanitising of smb:// URIs, which might lead to the execution of arbitrary shell commands. For the stable distribution (sarge) this problem has been fixed in version 0.10.4-7.1. For the upcoming stable distribution (etch) this problem has been fixed in version 0.11.1-1.2. For the unstable distribution (sid) this problem has been fixed in version 0.11.1-1.2. We recommend that you upgrade your elinks package.
Teemu Salmela discovered that the elinks character mode web browser performs insufficient sanitising of smb:// URIs, which might lead to the execution of arbitrary shell commands.
For the stable distribution (sarge) this problem has been fixed in version 0.10.4-7.1.
For the upcoming stable distribution (etch) this problem has been fixed in version 0.11.1-1.2.
For the unstable distribution (sid) this problem has been fixed in version 0.11.1-1.2.
We recommend that you upgrade your elinks package.
MD5 checksums of the listed files are available in the original advisory.