Download
| Alert*
DSA-3947-1 newsbeuter -- newsbeuter
Jeriko One discovered that newsbeuter, a text-mode RSS feed reader, did not properly escape the title and description of a news article when bookmarking it. This allowed a remote attacker to run an arbitrary shell command on the client machine.
|