The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Improper Neutralization of Special Elements used in an OS Command in bookmarking function of Newsbeuter versions 0.7 through 2.9 allows remote attackers to perform user-assisted code execution by crafting an RSS item that includes shell code in its title and/or URL.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade newsbeuter | Sep 20, 2017 | Aug 23, 2017 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Aug 23, 2017 |
| Debian | — | Upgrade newsbeuter | Aug 19, 2017 | Aug 18, 2017 |
| Gentoo Linux | — | Upgrade net-news/newsbeuter. | Jan 18, 2018 | Aug 23, 2017 |
| Suse | — | Upgrade newsbeuter-debugsourceUpgrade newsbeuter-langUpgrade newsbeuter-debuginfoUpgrade newsbeuter | Jan 24, 2018 | Aug 18, 2017 |
| Ubuntu | — | Upgrade newsbeuter | Oct 16, 2020 | Aug 18, 2017 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub