December 2016 - i18n-bugs - Fedora Mailing-Lists

[Fedora-i18n-bugs] [Bug 1399707] New: CVE-2016-9442 w3m: Potential heap-buffer corruption due to Strgrow

by Red Hat Bugzilla

https://bugzilla.redhat.com/show_bug.cgi?id=1399707 Bug ID: 1399707 Summary: CVE-2016-9442 w3m: Potential heap-buffer corruption due to Strgrow Product: Security Response Component: vulnerability Keywords: Security Severity: medium Priority: medium Assignee: security-response-team(a)redhat.com Reporter: anemec(a)redhat.com CC: eng-i18n-bugs(a)redhat.com, i18n-bugs(a)lists.fedoraproject.org, pnemade(a)redhat.com A potential heap-buffer corruption will occur in w3m while parsing maliciously crafted data. Upstream pull request: https://github.com/tats/w3m/pull/27 Upstream fix: https://github.com/tats/w3m/commit/d43527cfa0dbb3ccefec4a6f7b32c1434739aa29 References: http://seclists.org/oss-sec/2016/q4/321 -- You are receiving this mail because: You are on the CC list for the bug.

7 years, 1 month

2
5
0 / 0

[Fedora-i18n-bugs] [Bug 1399705] New: CVE-2016-9441 w3m: Null pointer dereference in do_refill

by Red Hat Bugzilla

https://bugzilla.redhat.com/show_bug.cgi?id=1399705 Bug ID: 1399705 Summary: CVE-2016-9441 w3m: Null pointer dereference in do_refill Product: Security Response Component: vulnerability Keywords: Security Severity: medium Priority: medium Assignee: security-response-team(a)redhat.com Reporter: anemec(a)redhat.com CC: eng-i18n-bugs(a)redhat.com, i18n-bugs(a)lists.fedoraproject.org, pnemade(a)redhat.com A null pointer dereference will occur in w3m while parsing maliciously crafted input. Upstream bug: https://github.com/tats/w3m/issues/24 Upstream fix: https://github.com/tats/w3m/commit/a6257663824c63abb3c62c4dd62455fe6f63d958 References: http://seclists.org/oss-sec/2016/q4/321 -- You are receiving this mail because: You are on the CC list for the bug.

7 years, 1 month

2
5
0 / 0

[Fedora-i18n-bugs] [Bug 1399702] New: CVE-2016-9440 w3m: Null pointer dereference in formUpdateBuffer

by Red Hat Bugzilla

https://bugzilla.redhat.com/show_bug.cgi?id=1399702 Bug ID: 1399702 Summary: CVE-2016-9440 w3m: Null pointer dereference in formUpdateBuffer Product: Security Response Component: vulnerability Keywords: Security Severity: medium Priority: medium Assignee: security-response-team(a)redhat.com Reporter: anemec(a)redhat.com CC: eng-i18n-bugs(a)redhat.com, i18n-bugs(a)lists.fedoraproject.org, pnemade(a)redhat.com A null pointer dereference will occur in w3m while parsing maliciously crafted input. Upstream bug: https://github.com/tats/w3m/issues/22 Upstream fix: https://github.com/tats/w3m/commit/4a8d16fc8d08206dd7142435054ee38ff41805b7 References: http://seclists.org/oss-sec/2016/q4/321 -- You are receiving this mail because: You are on the CC list for the bug.

7 years, 1 month

2
6
0 / 0

[Fedora-i18n-bugs] [Bug 1399701] New: CVE-2016-9439 w3m: Infinite recursion with nested table and textarea

by Red Hat Bugzilla

https://bugzilla.redhat.com/show_bug.cgi?id=1399701 Bug ID: 1399701 Summary: CVE-2016-9439 w3m: Infinite recursion with nested table and textarea Product: Security Response Component: vulnerability Keywords: Security Severity: medium Priority: medium Assignee: security-response-team(a)redhat.com Reporter: anemec(a)redhat.com CC: eng-i18n-bugs(a)redhat.com, i18n-bugs(a)lists.fedoraproject.org, pnemade(a)redhat.com An infinite recursion leading to segmentation fault will occur in w3m while parsing maliciously crafter input. Upstream bug: https://github.com/tats/w3m/issues/20 Upstream fixes: https://github.com/tats/w3m/commit/f393faf55975a94217df479e1bd06ee4403c6958 https://github.com/tats/w3m/commit/2a4a2fb9f116b50e7c80d573db06c0fdc6c69272 https://github.com/tats/w3m/commit/ec99f186380d26ebf791569fdbc56dae60632365 References: http://seclists.org/oss-sec/2016/q4/321 -- You are receiving this mail because: You are on the CC list for the bug.

7 years, 1 month

2
5
0 / 0

[Fedora-i18n-bugs] [Bug 1399699] New: CVE-2016-9438 w3m: Null pointer dereference with input_alt tag

by Red Hat Bugzilla

https://bugzilla.redhat.com/show_bug.cgi?id=1399699 Bug ID: 1399699 Summary: CVE-2016-9438 w3m: Null pointer dereference with input_alt tag Product: Security Response Component: vulnerability Keywords: Security Severity: medium Priority: medium Assignee: security-response-team(a)redhat.com Reporter: anemec(a)redhat.com CC: eng-i18n-bugs(a)redhat.com, i18n-bugs(a)lists.fedoraproject.org, pnemade(a)redhat.com A null pointer dereference will occur in w3m while parsing maliciously crafted input. Upstream bug: https://github.com/tats/w3m/issues/18 Upstream fix: https://github.com/tats/w3m/commit/010b68580dc50ce183df11cc79721936ab5c4f25 References: http://seclists.org/oss-sec/2016/q4/321 -- You are receiving this mail because: You are on the CC list for the bug.

7 years, 1 month

2
7
0 / 0

[Fedora-i18n-bugs] [Bug 1399697] New: CVE-2016-9437 w3m: Write access violation with '< button type=radio>'

by Red Hat Bugzilla

https://bugzilla.redhat.com/show_bug.cgi?id=1399697 Bug ID: 1399697 Summary: CVE-2016-9437 w3m: Write access violation with '<button type=radio>' Product: Security Response Component: vulnerability Keywords: Security Severity: medium Priority: medium Assignee: security-response-team(a)redhat.com Reporter: anemec(a)redhat.com CC: eng-i18n-bugs(a)redhat.com, i18n-bugs(a)lists.fedoraproject.org, pnemade(a)redhat.com A write access violation leading to segmentation fault will occur in w3m while parsing maliciously crafted input. Upstream bug: https://github.com/tats/w3m/issues/17 Upstream fix: https://github.com/tats/w3m/commit/67be73b03a5ad581e331ec97cb275cd8a52719ed References: http://seclists.org/oss-sec/2016/q4/321 -- You are receiving this mail because: You are on the CC list for the bug.

7 years, 1 month

2
6
0 / 0

[Fedora-i18n-bugs] [Bug 1399695] New: CVE-2016-9436 w3m: Unitialised value in parsetagx.c

by Red Hat Bugzilla

https://bugzilla.redhat.com/show_bug.cgi?id=1399695 Bug ID: 1399695 Summary: CVE-2016-9436 w3m: Unitialised value in parsetagx.c Product: Security Response Component: vulnerability Keywords: Security Severity: medium Priority: medium Assignee: security-response-team(a)redhat.com Reporter: anemec(a)redhat.com CC: eng-i18n-bugs(a)redhat.com, i18n-bugs(a)lists.fedoraproject.org, pnemade(a)redhat.com An unitialized value is used in w3m. Upstream bug: https://github.com/tats/w3m/issues/16 Upstream fix: https://github.com/tats/w3m/commit/33509cc81ec5f2ba44eb6fd98bd5c1b5873e46bd References: http://seclists.org/oss-sec/2016/q4/321 -- You are receiving this mail because: You are on the CC list for the bug.

7 years, 1 month

2
5
0 / 0

[Fedora-i18n-bugs] [Bug 1399694] New: CVE-2016-9435 w3m: Unitialised value in file.c

by Red Hat Bugzilla

https://bugzilla.redhat.com/show_bug.cgi?id=1399694 Bug ID: 1399694 Summary: CVE-2016-9435 w3m: Unitialised value in file.c Product: Security Response Component: vulnerability Keywords: Security Severity: medium Priority: medium Assignee: security-response-team(a)redhat.com Reporter: anemec(a)redhat.com CC: eng-i18n-bugs(a)redhat.com, i18n-bugs(a)lists.fedoraproject.org, pnemade(a)redhat.com An unitialized value is used in w3m. Upstream bug: https://github.com/tats/w3m/issues/16 Upstream fix: https://github.com/tats/w3m/commit/33509cc81ec5f2ba44eb6fd98bd5c1b5873e46bd References: http://seclists.org/oss-sec/2016/q4/321 -- You are receiving this mail because: You are on the CC list for the bug.

7 years, 1 month

2
5
0 / 0

[Fedora-i18n-bugs] [Bug 1399691] New: CVE-2016-9434 w3m: Null pointer dereference due to incorrect form_int fid

by Red Hat Bugzilla

https://bugzilla.redhat.com/show_bug.cgi?id=1399691 Bug ID: 1399691 Summary: CVE-2016-9434 w3m: Null pointer dereference due to incorrect form_int fid Product: Security Response Component: vulnerability Keywords: Security Severity: medium Priority: medium Assignee: security-response-team(a)redhat.com Reporter: anemec(a)redhat.com CC: eng-i18n-bugs(a)redhat.com, i18n-bugs(a)lists.fedoraproject.org, pnemade(a)redhat.com A null pointer dereference will occur in w3m while parsing maliciously crafted input. Upstream bug: https://github.com/tats/w3m/issues/15 Upstream fix: https://github.com/tats/w3m/commit/3d4eeda9ec0cb91e23bab7dc260d4c515119eb4b References: http://seclists.org/oss-sec/2016/q4/321 -- You are receiving this mail because: You are on the CC list for the bug.

7 years, 1 month

2
7
0 / 0

[Fedora-i18n-bugs] [Bug 1399690] New: CVE-2016-9433 w3m: Segmentation fault when parsing iso2022 characters

by Red Hat Bugzilla

https://bugzilla.redhat.com/show_bug.cgi?id=1399690 Bug ID: 1399690 Summary: CVE-2016-9433 w3m: Segmentation fault when parsing iso2022 characters Product: Security Response Component: vulnerability Keywords: Security Severity: medium Priority: medium Assignee: security-response-team(a)redhat.com Reporter: anemec(a)redhat.com CC: eng-i18n-bugs(a)redhat.com, i18n-bugs(a)lists.fedoraproject.org, pnemade(a)redhat.com A segmentation fault will occur in w3m while parsing maliciously crafted input. Upstream bug: https://github.com/tats/w3m/issues/14 Upstream fix: https://github.com/tats/w3m/commit/9cf6926c5d947371dc9e44f32bc7a2fbfca5d469 References: http://seclists.org/oss-sec/2016/q4/321 -- You are receiving this mail because: You are on the CC list for the bug.

7 years, 1 month

2
5
0 / 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

i18n-bugs December 2016