advisories/19714.adv

type: security
subject: Updated lynx packages fix security vulnerability
CVE:
 - CVE-2016-9179
src:
  5:
   core:
     - lynx-2.8.8-1.rel2.3.1.mga5
description: |
  Lynx doesn't parse the authority component of the URL correctly when the
  host name part ends with '?', and could instead be tricked into connecting
  to a different host. (CVE-2016-9179)
references:
 - https://bugs.mageia.org/show_bug.cgi?id=19714
 - http://openwall.com/lists/oss-security/2016/11/04/1
ID: MGASA-2017-0052
1	type: security
2	subject: Updated lynx packages fix security vulnerability
3	CVE:
4	- CVE-2016-9179
5	src:
6	5:
7	core:
8	- lynx-2.8.8-1.rel2.3.1.mga5
9	description: \|
10	Lynx doesn't parse the authority component of the URL correctly when the
11	host name part ends with '?', and could instead be tricked into connecting
12	to a different host. (CVE-2016-9179)
13	references:
14	- https://bugs.mageia.org/show_bug.cgi?id=19714
15	- http://openwall.com/lists/oss-security/2016/11/04/1
16	ID: MGASA-2017-0052