File _patchinfo of Package patchinfo.6581

Overview Repositories Revisions Requests Users Attributes Meta

File _patchinfo of Package patchinfo.6581

<patchinfo incident="6581">
  <issue id="1077568" tracker="bnc">VUL-1: CVE-2018-6197: w3m: NULL pointer dereference flaw in formUpdateBuffer in form.c</issue>
  <issue id="1077572" tracker="bnc">VUL-1: CVE-2018-6198: w3m: does not properly handle temporary files when the ~/.w3m directory is unwritable, which allows a local attacker to craft a symlink attack to overwrite arbitrary files</issue>
  <issue id="1077559" tracker="bnc">VUL-1: CVE-2018-6196: w3m: an infinite recursion flaw in HTMLlineproc0 because the feed_table_block_tag function in table.c does not prevent a negative indent value allows for DoS</issue>
  <issue id="2018-6198" tracker="cve" />
  <issue id="2018-6197" tracker="cve" />
  <issue id="2018-6196" tracker="cve" />
  <category>security</category>
  <rating>moderate</rating>
  <packager>kbabioch</packager>
  <description>This update for w3m fixes several issues.

These security issues were fixed:

- CVE-2018-6196: Prevent infinite recursion in HTMLlineproc0 caused by the feed_table_block_tag function which did not prevent a negative indent value (bsc#1077559)
- CVE-2018-6197: Prevent NULL pointer dereference in formUpdateBuffer (bsc#1077568)
- CVE-2018-6198: w3m did not properly handle temporary files when the ~/.w3m directory is unwritable, which allowed a local attacker to craft a symlink attack to overwrite arbitrary files (bsc#1077572)
</description>
  <summary>Security update for w3m</summary>
</patchinfo>

Places

File _patchinfo of Package patchinfo.6581

Places