--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2020-a16a109471
2020-02-04 00:35:01.559856
--------------------------------------------------------------------------------
Name : links
Product : Fedora EPEL 7
Version : 2.20.2
Release : 1.el7
URL :
http://links.twibright.com/
Summary : Web browser running in both graphics and text mode
Description :
Links is a web browser capable of running in either graphics or text mode.
It provides a pull-down menu system, renders complex pages, has partial HTML
4.0 support (including tables, frames and support for multiple character sets
and UTF-8), supports color and monochrome terminals and allows horizontal
scrolling.
--------------------------------------------------------------------------------
Update Information:
Update to a new version. Security bug fixed: when links was connected to tor,
it would send real dns requests outside the tor network when the displayed page
contains <link rel="dns-prefetch" href="http://host.domain/">.
Fix reading one
byte beyond allocated space in case of corrupted UTF-8 data - CVE-2017-11114
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jan 19 2020 Lubomir Rintel <lkundrak(a)v3.sk> - 1:2.20.2-1
- New release
* Thu Jul 25 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1:2.17-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Fri Feb 1 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1:2.17-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
* Wed Oct 31 2018 Lubomir Rintel <lkundrak(a)v3.sk> - 1:2.17-1
- New release
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1:2.14-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Wed Feb 7 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1:2.14-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Thu Aug 3 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 1:2.14-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
* Wed Jul 26 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 1:2.14-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
* Tue Mar 21 2017 Lubomir Rintel <lkundrak(a)v3.sk> - 1:2.14-1
- New release
* Fri Feb 10 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 1:2.13-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
* Wed Sep 21 2016 Lubomir Rintel <lkundrak(a)v3.sk> - 1:2.13-1
- New release
* Mon Apr 18 2016 Lubomir Rintel <lkundrak(a)v3.sk> - 1:2.12-2
- Drop text mode browser provide
* Thu Feb 4 2016 Fedora Release Engineering <releng(a)fedoraproject.org> - 1:2.12-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
* Tue Oct 27 2015 Lubomir Rintel <lkundrak(a)v3.sk> - 1:2.12-1
- New release
- Drop the SSL verification patch; upstream does it now
* Wed Jul 15 2015 Lubomir Rintel <lkundrak(a)v3.sk> - 1:2.10-3
- Add libevent dependency
* Wed Jul 15 2015 Lubomir Rintel <lkundrak(a)v3.sk> - 1:2.10-2
- Add RSVG dependency for SVG rendering
* Wed Jul 15 2015 Lubomir Rintel <lkundrak(a)v3.sk> - 1:2.10-1
- Rebase to new release
- Drop the google patch -- upstream does a better job now
* Wed Jun 17 2015 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1:2.9-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
* Sun Jun 7 2015 Lubomir Rintel <lkundrak(a)v3.sk> - 1:2.9-2
- Fix X11 and SVGALib backends
* Mon Jan 5 2015 Lubomir Rintel <lkundrak(a)v3.sk> - 1:2.9-1
- New upstream release
* Sun Aug 17 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1:2.8-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
* Sat Jun 7 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1:2.8-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
* Thu Oct 24 2013 Lubomir Rintel <lkundrak(a)v3.sk> - 1:2.8-2
- Bulk sad and useless attempt at consistent SPEC file formatting
* Mon Sep 23 2013 Ondrej Vasik <ovasik(a)redhat.com> - 1:2.8-1
- new upstream release 2.8 (#1010890)
* Fri Sep 13 2013 Ondrej Vasik <ovasik(a)redhat.com> - 1:2.7-1
- new upstream release 2.7 (#835427)
- remove IPv6 Fedora patch, supported upstream
* Sat Aug 3 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1:2.6-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
* Thu Feb 14 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1:2.6-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
* Fri Jan 18 2013 Adam Tkac <atkac redhat com> - 1:2.6-4
- rebuild due to "jpeg8-ABI" feature drop
* Fri Dec 21 2012 Adam Tkac <atkac redhat com> - 1:2.6-3
- rebuild against new libjpeg
* Thu Jul 19 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1:2.6-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
* Fri Jun 8 2012 Ondrej Vasik <ovasik(a)redhat.com> - 1:2.6-1
- rebase to latest upstream (#751354)
- apply IPv6 support patch
- removed nss patch(already included upstream)
- use openssl instead of nss again (nss upstream support has some
header detection troubles)
* Fri Jan 13 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1:2.2-15
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
* Tue Dec 6 2011 Adam Jackson <ajax(a)redhat.com> - 1:2.2-14
- Rebuild for new libpng
* Tue Feb 8 2011 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1:2.2-13
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
* Fri Nov 27 2009 Ondrej Vasik <ovasik(a)redhat.com> - 1:2.2-12
- add Requires(post) and Requires(postun) for coreutils (readlink)
(#540434)
* Sat Oct 17 2009 Lubomir Rintel <lkundrak(a)v3.sk> - 2.2-11
- Do not display textareas hidden by CSS
* Sat Jul 25 2009 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1:2.2-10
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
* Tue Apr 21 2009 Lubomir Rintel <lkundrak(a)v3.sk> - 2.2-9
- Add epoch to beat elinks obsoletes
* Mon Apr 13 2009 Lubomir Rintel <lkundrak(a)v3.sk> - 2.2-8
- Enable SSL certificates verification
* Sun Apr 12 2009 Lubomir Rintel <lkundrak(a)v3.sk> - 2.2-7
- removing unnecessary BuildConflicts
* Fri Apr 10 2009 Lubomir Rintel <lkundrak(a)v3.sk> - 2.2-6
- Cosmetic fixes
- Ship license
* Fri Apr 3 2009 Lubomir Rintel <lkundrak(a)v3.sk> - 2.2-5
- Add SSL/TLS support by the means of NSS
- Add web browser provides
* Thu Apr 2 2009 Lubomir Rintel <lkundrak(a)v3.sk> - 2.2-4
- Do not silence make
- Use bundled icon, place it in pixmaps directory
- Adjust summary, description and style
- Remove useless configure parameters
- Include X11 support
- Adjust menu entry text
- Add alternatives support
* Mon Nov 10 2008 johnhford(a)gmail.com - 2.2-3
- Do not mutilate timestamps on AUTHORS
- Removed vendor from desktop-file-install
- No longer gzipping manpage
* Mon Nov 10 2008 John Ford <johnhford.gmail@com> 2.2-2
- Modified %build to ensure shared libraries are used
- Added missing requirements (desktop-file-utils)
* Sat Nov 8 2008 John Ford <johnhford.gmail@com> 2.2-1
- Initial Submission
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1480633 - CVE-2017-11114 links: Global-based 1 byte buffer over-read in
put_chars function in html_r.c [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1480633
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update links' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------