Mandriva Linux Security Advisory : elinks (MDVSA-2014:019)

high Nessus Plugin ID 72131

Synopsis

The remote Mandriva Linux host is missing a security update.

Description

Updated elinks package fixes security vulnerability :

When verifying SSL certificates, elinks fails to warn the user if the hostname of the certificate does not match the hostname of the website.

The elinks package has been updated to version 0.12-pre6 and patched to fix this issue.

Solution

Update the affected elinks package.

See Also

http://advisories.mageia.org/MGASA-2014-0014.html

Plugin Details

Severity: High

ID: 72131

File Name: mandriva_MDVSA-2014-019.nasl

Version: 1.4

Type: local

Published: 1/26/2014

Updated: 1/6/2021

Supported Sensors: Nessus

Vulnerability Information

CPE: p-cpe:/a:mandriva:linux:elinks, cpe:/o:mandriva:business_server:1

Required KB Items: Host/local_checks_enabled, Host/cpu, Host/Mandrake/release, Host/Mandrake/rpm-list

Patch Publication Date: 1/22/2014

Reference Information

MDVSA: 2014:019