Mageia alert MGASA-2014-0014 (elinks)

From:
    	     
 
Mageia Updates <buildsystem-daemon@mageia.org> 
To:
    	     
 
updates-announce@ml.mageia.org 
Subject:
    	     
 
[updates-announce] MGASA-2014-0014: Updated elinks package fixes a security vulnerability 
Date:
    	     
 
Tue, 21 Jan 2014 17:04:42 +0100
Message-ID:
    	     
 
<20140121160442.D4F5140886@valstar.mageia.org>
MGASA-2014-0014 - Updated elinks package fixes a security vulnerability

Publication date: 21 Jan 2014
URL: http://advisories.mageia.org/MGASA-2014-0014.html
Type: security
Affected Mageia releases: 3

Description:
Updated elinks package fixes security vulnerability:

When verifying SSL certificates, elinks fails to warn the user if the hostname
of the certificate does not match the hostname of the website.

The elinks package has been updated to version 0.12-pre6 and patched to fix
this issue.

References:
- https://lists.fedoraproject.org/pipermail/package-announc...
- https://bugs.mageia.org/show_bug.cgi?id=11460

SRPMS:
- 3/core/elinks-0.12-3.1.mga3