[Fedora-i18n-bugs] [Bug 1399737] New: CVE-2016-9630 w3m: Buffer-overflow in parseURL()

[Red Hat Bugzilla]

https://bugzilla.redhat.com/show_bug.cgi?id=1399737

            Bug ID: 1399737
           Summary: CVE-2016-9630 w3m: Buffer-overflow in parseURL()
           Product: Security Response
         Component: vulnerability
          Keywords: Security
          Severity: medium
          Priority: medium
          Assignee: security-response-team(a)redhat.com
          Reporter: anemec(a)redhat.com
                CC: eng-i18n-bugs(a)redhat.com,
                    i18n-bugs(a)lists.fedoraproject.org, pnemade(a)redhat.com




A heap-buffer overflow was found in w3m.

Upstream bug:

https://github.com/tats/w3m/issues/41

Upstream fix:

https://github.com/tats/w3m/commit/ba9d78faeba9024c3e8840579c3b0e959ae2cb0f

References:

http://seclists.org/oss-sec/2016/q4/488

-- 
You are receiving this mail because:
You are on the CC list for the bug.