Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2019:1142-1

Опубликовано: 04 апр. 2019
Источник: suse-cvrf

Описание

Security update for w3m

This update for w3m fixes the following issues:

Security issues fixed:

  • CVE-2018-6196: Prevent infinite recursion in HTMLlineproc0 caused by the feed_table_block_tag function which did not prevent a negative indent value (bsc#1077559)
  • CVE-2018-6197: Prevent NULL pointer dereference in formUpdateBuffer (bsc#1077568)
  • CVE-2018-6198: w3m did not properly handle temporary files when the ~/.w3m directory is unwritable, which allowed a local attacker to craft a symlink attack to overwrite arbitrary files (bsc#1077572)

This update was imported from the SUSE:SLE-12:Update update project.

Список пакетов

openSUSE Leap 42.3
w3m-0.5.3.git20161120-164.3.1
w3m-inline-image-0.5.3.git20161120-164.3.1

Ссылки

Описание

w3m through 0.5.3 is prone to an infinite recursion flaw in HTMLlineproc0 because the feed_table_block_tag function in table.c does not prevent a negative indent value.

Затронутые продукты
openSUSE Leap 42.3:w3m-0.5.3.git20161120-164.3.1
openSUSE Leap 42.3:w3m-inline-image-0.5.3.git20161120-164.3.1
Ссылки

Описание

w3m through 0.5.3 is prone to a NULL pointer dereference flaw in formUpdateBuffer in form.c.

Затронутые продукты
openSUSE Leap 42.3:w3m-0.5.3.git20161120-164.3.1
openSUSE Leap 42.3:w3m-inline-image-0.5.3.git20161120-164.3.1
Ссылки

Описание

w3m through 0.5.3 does not properly handle temporary files when the ~/.w3m directory is unwritable, which allows a local attacker to craft a symlink attack to overwrite arbitrary files.

Затронутые продукты
openSUSE Leap 42.3:w3m-0.5.3.git20161120-164.3.1
openSUSE Leap 42.3:w3m-inline-image-0.5.3.git20161120-164.3.1
Ссылки