[Fedora-i18n-bugs] [Bug 1399699] New: CVE-2016-9438 w3m: Null pointer dereference with input_alt tag

[Red Hat Bugzilla]

https://bugzilla.redhat.com/show_bug.cgi?id=1399699

Bug ID: 1399699
           Summary: CVE-2016-9438 w3m: Null pointer dereference with
                    input_alt tag
           Product: Security Response
         Component: vulnerability
          Keywords: Security
          Severity: medium
          Priority: medium
          Assignee: [e-mail]
          Reporter: [e-mail]
                CC: [e-mail],
                    [e-mail], [e-mail]

A null pointer dereference will occur in w3m while parsing maliciously crafted
input.

Upstream bug:

https://github.com/tats/w3m/issues/18

Upstream fix:

https://github.com/tats/w3m/commit/010b68580dc50ce183df11cc79721936ab5c4f25

References:

http://seclists.org/oss-sec/2016/q4/321