[Fedora-i18n-bugs] [Bug 1399718] New: CVE-2016-9624 w3m: Null pointer dereference in formUpdateBuffer
9:36 a.m.
https://bugzilla.redhat.com/show_bug.cgi?id=1399718
Bug ID: 1399718
Summary: CVE-2016-9624 w3m: Null pointer dereference in
formUpdateBuffer
Product: Security Response
Component: vulnerability
Keywords: Security
Severity: medium
Priority: medium
Assignee: security-response-team(a)redhat.com
Reporter: anemec(a)redhat.com
CC: eng-i18n-bugs(a)redhat.com,
i18n-bugs(a)lists.fedoraproject.org, pnemade(a)redhat.com
A null pointer dereference will occur in w3m while parsing maliciously crafted
input.
Upstream bug:
https://github.com/tats/w3m/issues/35
Upstream fix:
https://github.com/tats/w3m/commit/e2c7ecec6f9b730ad3c9bf8c8df9212970f183d7
References:
http://seclists.org/oss-sec/2016/q4/488
--
You are receiving this mail because:
You are on the CC list for the bug.
9:44 a.m.
New subject: [Fedora-i18n-bugs] [Bug 1399718] CVE-2016-9624 w3m: Null pointer dereference in formUpdateBuffer
https://bugzilla.redhat.com/show_bug.cgi?id=1399718
Andrej Nemec <anemec(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Whiteboard|impact=moderate,public=2016 |impact=moderate,public=2016
|1107,reported=20161103,sour |1107,reported=20161122,sour
|ce=oss-security,cvss2=4.3/A |ce=oss-security,cvss2=4.3/A
|V:N/AC:M/Au:N/C:N/I:N/A:P,c |V:N/AC:M/Au:N/C:N/I:N/A:P,c
|vss3=4.3/CVSS:3.0/AV:N/AC:L |vss3=4.3/CVSS:3.0/AV:N/AC:L
|/PR:N/UI:R/S:U/C:N/I:N/A:L, |/PR:N/UI:R/S:U/C:N/I:N/A:L,
|cwe=CWE-476,fedora-all/w3m= |cwe=CWE-476,fedora-all/w3m=
|affected,epel-7/w3m=affecte |affected,epel-7/w3m=affecte
|d,rhel-5/w3m=new,rhel-6/w3m |d,rhel-5/w3m=new,rhel-6/w3m
|=new |=new
--
You are receiving this mail because:
You are on the CC list for the bug.
10:03 a.m.
New subject: [Fedora-i18n-bugs] [Bug 1399718] CVE-2016-9624 w3m: Null pointer dereference in formUpdateBuffer
https://bugzilla.redhat.com/show_bug.cgi?id=1399718
Andrej Nemec <anemec(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Blocks| |1399744
--
You are receiving this mail because:
You are on the CC list for the bug.
2:53 a.m.
New subject: [Fedora-i18n-bugs] [Bug 1399718] CVE-2016-9624 w3m: Null pointer dereference in formUpdateBuffer
https://bugzilla.redhat.com/show_bug.cgi?id=1399718
Huzaifa S. Sidhpurwala <huzaifas(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Depends On| |1401423
Depends On| |1401424
--- Comment #1 from Huzaifa S. Sidhpurwala <huzaifas(a)redhat.com> ---
Created w3m tracking bugs for this issue:
Affects: fedora-all [bug 1401423]
Affects: epel-7 [bug 1401424]
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=1401423
[Bug 1401423] w3m: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1401424
[Bug 1401424] w3m: various flaws [epel-7]
--
You are receiving this mail because:
You are on the CC list for the bug.
6:57 p.m.
New subject: [Fedora-i18n-bugs] [Bug 1399718] CVE-2016-9624 w3m: Null pointer dereference in formUpdateBuffer
https://bugzilla.redhat.com/show_bug.cgi?id=1399718
Bug 1399718 depends on bug 1401423, which changed state.
Bug 1401423 Summary: w3m: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1401423
What |Removed |Added
----------------------------------------------------------------------------
Status|ON_QA |CLOSED
Resolution|--- |ERRATA
--
You are receiving this mail because:
You are on the CC list for the bug.
2:16 a.m.
New subject: [Fedora-i18n-bugs] [Bug 1399718] CVE-2016-9624 w3m: Null pointer dereference in formUpdateBuffer
https://bugzilla.redhat.com/show_bug.cgi?id=1399718
Dhiru Kholia <dkholia(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Priority|medium |low
Whiteboard|impact=moderate,public=2016 |impact=low,public=20161107,
|1107,reported=20161122,sour |reported=20161122,source=os
|ce=oss-security,cvss2=4.3/A |s-security,cvss2=4.3/AV:N/A
|V:N/AC:M/Au:N/C:N/I:N/A:P,c |C:M/Au:N/C:N/I:N/A:P,cvss3=
|vss3=4.3/CVSS:3.0/AV:N/AC:L |4.3/CVSS:3.0/AV:N/AC:L/PR:N
|/PR:N/UI:R/S:U/C:N/I:N/A:L, |/UI:R/S:U/C:N/I:N/A:L,cwe=C
|cwe=CWE-476,fedora-all/w3m= |WE-476,fedora-all/w3m=affec
|affected,epel-7/w3m=affecte |ted,epel-7/w3m=affected,rhe
|d,rhel-5/w3m=new,rhel-6/w3m |l-5/w3m=wontfix,rhel-6/w3m=
|=new |wontfix
Severity|medium |low
--
You are receiving this mail because:
You are on the CC list for the bug.
4:51 a.m.
New subject: [Fedora-i18n-bugs] [Bug 1399718] CVE-2016-9624 w3m: Null pointer dereference in formUpdateBuffer
https://bugzilla.redhat.com/show_bug.cgi?id=1399718
Dhiru Kholia <dkholia(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|NEW |CLOSED
Resolution|--- |WONTFIX
Last Closed| |2017-03-16 05:51:22
--
You are receiving this mail because:
You are on the CC list for the bug.
4:51 p.m.
New subject: [Fedora-i18n-bugs] [Bug 1399718] CVE-2016-9624 w3m: Null pointer dereference in formUpdateBuffer
https://bugzilla.redhat.com/show_bug.cgi?id=1399718
Bug 1399718 depends on bug 1401424, which changed state.
Bug 1401424 Summary: w3m: various flaws [epel-7]
https://bugzilla.redhat.com/show_bug.cgi?id=1401424
What |Removed |Added
----------------------------------------------------------------------------
Status|ON_QA |CLOSED
Resolution|--- |ERRATA
--
You are receiving this mail because:
You are on the CC list for the bug.
2587
days inactive
2703
days old
i18n-bugs@lists.fedoraproject.org
7 comments
2 participants
participants (2)
-
bugzilla＠redhat.com -
Red Hat Bugzilla