[Fedora-i18n-bugs] [Bug 1399739] New: CVE-2016-9632 w3m: Buffer-overflow in wc_any_to_ucs()

[Red Hat Bugzilla]

https://bugzilla.redhat.com/show_bug.cgi?id=1399739

            Bug ID: 1399739
           Summary: CVE-2016-9632 w3m: Buffer-overflow in wc_any_to_ucs()
           Product: Security Response
         Component: vulnerability
          Keywords: Security
          Severity: medium
          Priority: medium
          Assignee: security-response-team(a)redhat.com
          Reporter: anemec(a)redhat.com
                CC: eng-i18n-bugs(a)redhat.com,
                    i18n-bugs(a)lists.fedoraproject.org, pnemade(a)redhat.com




A heap-buffer overflow was found in w3m.

Upstream bug:

https://github.com/tats/w3m/issues/43

Upstream fixes:

https://github.com/tats/w3m/commit/716bc126638393c733399d11d3228edb82877faa
https://github.com/tats/w3m/commit/88110c2658ad9badd292430c75ebb0444c3312eb

References:

http://seclists.org/oss-sec/2016/q4/488

-- 
You are receiving this mail because:
You are on the CC list for the bug.