lynx vulnerability

  1. Lynx CVE-1999-0817 in Azure Linux: Attestations, Scope, and Mitigation

    The Lynx WWW client vulnerability identified as CVE‑1999‑0817 is real and ancient, but it has resurfaced in conversations because Microsoft’s Security Response Center (MSRC) published a product‑scoped attestation saying Azure Linux (the Azure Linux distribution, formerly CBL‑Mariner) includes...
  2. Azure Linux Lynx CVE-2016-9179 Attestation: Not All Microsoft Products Are Covered

    Microsoft’s short statement — that “Azure Linux includes this open‑source library and is therefore potentially affected” — is accurate for the product it names, but it is not a categorical guarantee that no other Microsoft product carries the same vulnerable Lynx code; absence of additional...