January 2017 - i18n-bugs - Fedora Mailing-Lists

[Fedora-i18n-bugs] [Bug 1399702] New: CVE-2016-9440 w3m: Null pointer dereference in formUpdateBuffer

by Red Hat Bugzilla

https://bugzilla.redhat.com/show_bug.cgi?id=1399702 Bug ID: 1399702 Summary: CVE-2016-9440 w3m: Null pointer dereference in formUpdateBuffer Product: Security Response Component: vulnerability Keywords: Security Severity: medium Priority: medium Assignee: security-response-team(a)redhat.com Reporter: anemec(a)redhat.com CC: eng-i18n-bugs(a)redhat.com, i18n-bugs(a)lists.fedoraproject.org, pnemade(a)redhat.com A null pointer dereference will occur in w3m while parsing maliciously crafted input. Upstream bug: https://github.com/tats/w3m/issues/22 Upstream fix: https://github.com/tats/w3m/commit/4a8d16fc8d08206dd7142435054ee38ff41805b7 References: http://seclists.org/oss-sec/2016/q4/321 -- You are receiving this mail because: You are on the CC list for the bug.

7 years, 1 month

2
6
0 / 0

[Fedora-i18n-bugs] [Bug 1399701] New: CVE-2016-9439 w3m: Infinite recursion with nested table and textarea

by Red Hat Bugzilla

https://bugzilla.redhat.com/show_bug.cgi?id=1399701 Bug ID: 1399701 Summary: CVE-2016-9439 w3m: Infinite recursion with nested table and textarea Product: Security Response Component: vulnerability Keywords: Security Severity: medium Priority: medium Assignee: security-response-team(a)redhat.com Reporter: anemec(a)redhat.com CC: eng-i18n-bugs(a)redhat.com, i18n-bugs(a)lists.fedoraproject.org, pnemade(a)redhat.com An infinite recursion leading to segmentation fault will occur in w3m while parsing maliciously crafter input. Upstream bug: https://github.com/tats/w3m/issues/20 Upstream fixes: https://github.com/tats/w3m/commit/f393faf55975a94217df479e1bd06ee4403c6958 https://github.com/tats/w3m/commit/2a4a2fb9f116b50e7c80d573db06c0fdc6c69272 https://github.com/tats/w3m/commit/ec99f186380d26ebf791569fdbc56dae60632365 References: http://seclists.org/oss-sec/2016/q4/321 -- You are receiving this mail because: You are on the CC list for the bug.

7 years, 1 month

2
5
0 / 0

[Fedora-i18n-bugs] [Bug 1399699] New: CVE-2016-9438 w3m: Null pointer dereference with input_alt tag

by Red Hat Bugzilla

https://bugzilla.redhat.com/show_bug.cgi?id=1399699 Bug ID: 1399699 Summary: CVE-2016-9438 w3m: Null pointer dereference with input_alt tag Product: Security Response Component: vulnerability Keywords: Security Severity: medium Priority: medium Assignee: security-response-team(a)redhat.com Reporter: anemec(a)redhat.com CC: eng-i18n-bugs(a)redhat.com, i18n-bugs(a)lists.fedoraproject.org, pnemade(a)redhat.com A null pointer dereference will occur in w3m while parsing maliciously crafted input. Upstream bug: https://github.com/tats/w3m/issues/18 Upstream fix: https://github.com/tats/w3m/commit/010b68580dc50ce183df11cc79721936ab5c4f25 References: http://seclists.org/oss-sec/2016/q4/321 -- You are receiving this mail because: You are on the CC list for the bug.

7 years, 1 month

2
7
0 / 0

[Fedora-i18n-bugs] [Bug 1399697] New: CVE-2016-9437 w3m: Write access violation with '< button type=radio>'

by Red Hat Bugzilla

https://bugzilla.redhat.com/show_bug.cgi?id=1399697 Bug ID: 1399697 Summary: CVE-2016-9437 w3m: Write access violation with '<button type=radio>' Product: Security Response Component: vulnerability Keywords: Security Severity: medium Priority: medium Assignee: security-response-team(a)redhat.com Reporter: anemec(a)redhat.com CC: eng-i18n-bugs(a)redhat.com, i18n-bugs(a)lists.fedoraproject.org, pnemade(a)redhat.com A write access violation leading to segmentation fault will occur in w3m while parsing maliciously crafted input. Upstream bug: https://github.com/tats/w3m/issues/17 Upstream fix: https://github.com/tats/w3m/commit/67be73b03a5ad581e331ec97cb275cd8a52719ed References: http://seclists.org/oss-sec/2016/q4/321 -- You are receiving this mail because: You are on the CC list for the bug.

7 years, 1 month

2
6
0 / 0

[Fedora-i18n-bugs] [Bug 1399695] New: CVE-2016-9436 w3m: Unitialised value in parsetagx.c

by Red Hat Bugzilla

https://bugzilla.redhat.com/show_bug.cgi?id=1399695 Bug ID: 1399695 Summary: CVE-2016-9436 w3m: Unitialised value in parsetagx.c Product: Security Response Component: vulnerability Keywords: Security Severity: medium Priority: medium Assignee: security-response-team(a)redhat.com Reporter: anemec(a)redhat.com CC: eng-i18n-bugs(a)redhat.com, i18n-bugs(a)lists.fedoraproject.org, pnemade(a)redhat.com An unitialized value is used in w3m. Upstream bug: https://github.com/tats/w3m/issues/16 Upstream fix: https://github.com/tats/w3m/commit/33509cc81ec5f2ba44eb6fd98bd5c1b5873e46bd References: http://seclists.org/oss-sec/2016/q4/321 -- You are receiving this mail because: You are on the CC list for the bug.

7 years, 1 month

2
5
0 / 0

[Fedora-i18n-bugs] [Bug 1399694] New: CVE-2016-9435 w3m: Unitialised value in file.c

by Red Hat Bugzilla

https://bugzilla.redhat.com/show_bug.cgi?id=1399694 Bug ID: 1399694 Summary: CVE-2016-9435 w3m: Unitialised value in file.c Product: Security Response Component: vulnerability Keywords: Security Severity: medium Priority: medium Assignee: security-response-team(a)redhat.com Reporter: anemec(a)redhat.com CC: eng-i18n-bugs(a)redhat.com, i18n-bugs(a)lists.fedoraproject.org, pnemade(a)redhat.com An unitialized value is used in w3m. Upstream bug: https://github.com/tats/w3m/issues/16 Upstream fix: https://github.com/tats/w3m/commit/33509cc81ec5f2ba44eb6fd98bd5c1b5873e46bd References: http://seclists.org/oss-sec/2016/q4/321 -- You are receiving this mail because: You are on the CC list for the bug.

7 years, 1 month

2
5
0 / 0

[Fedora-i18n-bugs] [Bug 1399691] New: CVE-2016-9434 w3m: Null pointer dereference due to incorrect form_int fid

by Red Hat Bugzilla

https://bugzilla.redhat.com/show_bug.cgi?id=1399691 Bug ID: 1399691 Summary: CVE-2016-9434 w3m: Null pointer dereference due to incorrect form_int fid Product: Security Response Component: vulnerability Keywords: Security Severity: medium Priority: medium Assignee: security-response-team(a)redhat.com Reporter: anemec(a)redhat.com CC: eng-i18n-bugs(a)redhat.com, i18n-bugs(a)lists.fedoraproject.org, pnemade(a)redhat.com A null pointer dereference will occur in w3m while parsing maliciously crafted input. Upstream bug: https://github.com/tats/w3m/issues/15 Upstream fix: https://github.com/tats/w3m/commit/3d4eeda9ec0cb91e23bab7dc260d4c515119eb4b References: http://seclists.org/oss-sec/2016/q4/321 -- You are receiving this mail because: You are on the CC list for the bug.

7 years, 1 month

2
7
0 / 0

[Fedora-i18n-bugs] [Bug 1399690] New: CVE-2016-9433 w3m: Segmentation fault when parsing iso2022 characters

by Red Hat Bugzilla

https://bugzilla.redhat.com/show_bug.cgi?id=1399690 Bug ID: 1399690 Summary: CVE-2016-9433 w3m: Segmentation fault when parsing iso2022 characters Product: Security Response Component: vulnerability Keywords: Security Severity: medium Priority: medium Assignee: security-response-team(a)redhat.com Reporter: anemec(a)redhat.com CC: eng-i18n-bugs(a)redhat.com, i18n-bugs(a)lists.fedoraproject.org, pnemade(a)redhat.com A segmentation fault will occur in w3m while parsing maliciously crafted input. Upstream bug: https://github.com/tats/w3m/issues/14 Upstream fix: https://github.com/tats/w3m/commit/9cf6926c5d947371dc9e44f32bc7a2fbfca5d469 References: http://seclists.org/oss-sec/2016/q4/321 -- You are receiving this mail because: You are on the CC list for the bug.

7 years, 1 month

2
5
0 / 0

[Fedora-i18n-bugs] [Bug 1399689] New: CVE-2016-9432 w3m: Segmentation fault due to bcopy with negative size

by Red Hat Bugzilla

https://bugzilla.redhat.com/show_bug.cgi?id=1399689 Bug ID: 1399689 Summary: CVE-2016-9432 w3m: Segmentation fault due to bcopy with negative size Product: Security Response Component: vulnerability Keywords: Security Severity: medium Priority: medium Assignee: security-response-team(a)redhat.com Reporter: anemec(a)redhat.com CC: eng-i18n-bugs(a)redhat.com, i18n-bugs(a)lists.fedoraproject.org, pnemade(a)redhat.com A segmentation fault will occur in w3m while parsing maliciously crafted input. Upstream bug: https://github.com/tats/w3m/issues/13 Upstream fixes: https://github.com/tats/w3m/commit/807e8b7fbffca6dcaf5db40e35f05d05c5cf02d3 https://github.com/tats/w3m/commit/7b88478227978a8d673b4dd0e05eee410cc33330 References: http://seclists.org/oss-sec/2016/q4/321 -- You are receiving this mail because: You are on the CC list for the bug.

7 years, 1 month

2
5
0 / 0

[Fedora-i18n-bugs] [Bug 1399687] New: CVE-2016-9431 w3m: Stack buffer overflow in deleteFrameSet()

by Red Hat Bugzilla

https://bugzilla.redhat.com/show_bug.cgi?id=1399687 Bug ID: 1399687 Summary: CVE-2016-9431 w3m: Stack buffer overflow in deleteFrameSet() Product: Security Response Component: vulnerability Keywords: Security Severity: medium Priority: medium Assignee: security-response-team(a)redhat.com Reporter: anemec(a)redhat.com CC: eng-i18n-bugs(a)redhat.com, i18n-bugs(a)lists.fedoraproject.org, pnemade(a)redhat.com A stack-based buffer overflow will occur in w3m while parsing maliciously crafted input. Upstream bug: https://github.com/tats/w3m/issues/10 Upstream fix: https://github.com/tats/w3m/commit/9f0bdcfdf061db3520bd1f112bdc5e83acdec4be References: http://seclists.org/oss-sec/2016/q4/321 -- You are receiving this mail because: You are on the CC list for the bug.

7 years, 1 month

2
6
0 / 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

i18n-bugs January 2017