SUSE CVE-2016-1253

The most package in Debian wheezy before 5.0.0a-2.2, in Debian jessie before 5.0.0a-2.3+deb8u1, and in Debian unstable before 5.0.0a-3 allows remote attackers to execute arbitrary commands via shell metacharacters in the name of an LZMA-compressed file...

CVE-2016-1253

CVE-2016-1253 affects the Debian most package. The vulnerability allows remote attackers to execute arbitrary commands by using shell metacharacters in the name of an LZMA-compressed file. Debian wheezy is vulnerable before 5.0.0a-2.2, jessie before 5.0.0a-2.3+deb8u1, and unstable before 5.0.0a-3...

[SECURITY] [DLA 745-1] most security update

Package : most Version : 5.0.0a-2.2 CVE ID : CVE-2016-1253 Debian Bug : 848132 The most pager can automatically open files compressed with gzip, bzip2 and in Debian LZMA. Alberto Garcia discovered that Debians version of most was susceptible for a shell injection attack that could be exploited to...