FEDORA-EPEL-2017-19578898e6 — security update for w3m

stable

w3m-0.5.3-30.git20170102.el7

FEDORA-EPEL-2017-19578898e6 created by pnemade 7 years ago for Fedora EPEL 7

Security fix for CVE-2016-9422, CVE-2016-9423, CVE-2016-9424, CVE-2016-9425, CVE-2016-9428, CVE-2016-9426, CVE-2016-9429, CVE-2016-9430, CVE-2016-9431, CVE-2016-9432, CVE-2016-9433, CVE-2016-9434, CVE-2016-9435, CVE-2016-9436, CVE-2016-9437, CVE-2016-9438, CVE-2016-9439, CVE-2016-9440, CVE-2016-9441, CVE-2016-9442, CVE-2016-9443, CVE-2016-9622, CVE-2016-9623, CVE-2016-9624, CVE-2016-9625, CVE-2016-9626, CVE-2016-9627, CVE-2016-9628, CVE-2016-9629, CVE-2016-9631, CVE-2016-9630, CVE-2016-9632, CVE-2016-9633

And new upstream 20170102 as well

This update has been submitted for testing by pnemade.

7 years ago

pnemade edited this update.

7 years ago

pnemade edited this update.

7 years ago

This update has been pushed to testing.

7 years ago

This update has reached 14 days in testing and can be pushed to stable now if the maintainer wishes

7 years ago

This update has been submitted for stable by pnemade.

7 years ago

This update has been pushed to stable.

7 years ago

Please login to add feedback.

Metadata

Type

security

Karma

Signed

Content Type

RPM

Test Gating

None

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

disabled

Dates

submitted

7 years ago

in testing

7 years ago

in stable

7 years ago

modified

7 years ago

Builds

w3m-0.5.3-30.git20170102.el7

BZ#1399662 CVE-2016-9422 w3m: Stack smashed with large image inside table

BZ#1399664 CVE-2016-9423 w3m: Malformed html tag heap-buffer overflow

BZ#1399665 CVE-2016-9424 w3m: Out-of-bounds heap write due to negative array index

BZ#1399666 CVE-2016-9425 w3m: Segmentation fault due to write to lineBuf[-1] in addMultirowsForm

BZ#1399667 CVE-2016-9428 w3m: Out-of-bounds write in addMultirowsForm()

BZ#1399668 CVE-2016-9426 w3m: Heap corruption due to integer overflow in renderTable()

BZ#1399682 CVE-2016-9429 w3m: Global-buffer-overflow write in formUpdateBuffer

BZ#1399685 CVE-2016-9430 w3m: Segmentation fault with malformed input tag

BZ#1399687 CVE-2016-9431 w3m: Stack overflow in deleteFrameSet()

BZ#1399689 CVE-2016-9432 w3m: Segmentation fault due to bcopy with negative size

BZ#1399690 CVE-2016-9433 w3m: Segmentation fault when parsing iso2022 characters

BZ#1399691 CVE-2016-9434 w3m: Null pointer dereference due to incorrect form_int fid

BZ#1399694 CVE-2016-9435 w3m: Unitialised value in file.c

BZ#1399695 CVE-2016-9436 w3m: Unitialised value in parsetagx.c

BZ#1399697 CVE-2016-9437 w3m: Write access violation with '<button type=radio>'

BZ#1399699 CVE-2016-9438 w3m: Null pointer dereference with input_alt tag

BZ#1399701 CVE-2016-9439 w3m: Infinite recursion with nested table and textarea

BZ#1399702 CVE-2016-9440 w3m: Null pointer dereference in formUpdateBuffer

BZ#1399705 CVE-2016-9441 w3m: Null pointer dereference in do_refill

BZ#1399707 CVE-2016-9442 w3m: Potential heap-buffer corruption due to Strgrow

BZ#1399710 CVE-2016-9443 w3m: Null pointer dereference in formUpdateBuffer

BZ#1399713 CVE-2016-9622 w3m: Null pointer dereference in HTMLlineproc2body

BZ#1399715 CVE-2016-9623 w3m: Integer overflow resulting in segmentation fault

BZ#1399718 CVE-2016-9624 w3m: Null pointer dereference in formUpdateBuffer

BZ#1399720 CVE-2016-9625 w3m: HTMLlineproc0 infinite recursion

BZ#1399723 CVE-2016-9626 w3m: Infinite recursion in HTMLlineproc0

BZ#1399728 CVE-2016-9627 w3m: Array index out of bounds in display.c

BZ#1399730 CVE-2016-9628 w3m: Null pointer dereference due to bad form id in HTMLlineproc2body()

BZ#1399732 CVE-2016-9629 w3m: Null pointer dereference in shiftAnchorPosition()

BZ#1399734 CVE-2016-9631 w3m: Null pointer dereference in HTMLlineproc0()

BZ#1399737 CVE-2016-9630 w3m: Buffer-overflow in parseURL()

BZ#1399739 CVE-2016-9632 w3m: Buffer-overflow in wc_any_to_ucs()

BZ#1399740 CVE-2016-9633 w3m: Memory exhaustion due to repeatedly appending '<table>'

BZ#1401424 w3m: various flaws [epel-7]

w3m-0.5.3-30.git20170102.el7

Automated Test Results

None