openSUSE Security Update: Security update for w3m ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:3121-1 Rating: moderate References: #1011283 #1011284 #1011285 #1011286 #1011287 #1011288 #1011289 #1011290 #1011291 #1011292 #1011293 #1012021 #1012022 #1012023 #1012024 #1012025 #1012026 #1012027 #1012028 #1012029 #1012030 #1012031 #1012032 Cross-References: CVE-2016-9434 CVE-2016-9435 CVE-2016-9436 CVE-2016-9437 CVE-2016-9438 CVE-2016-9439 CVE-2016-9440 CVE-2016-9441 CVE-2016-9442 CVE-2016-9443 CVE-2016-9621 CVE-2016-9622 CVE-2016-9623 CVE-2016-9624 CVE-2016-9625 CVE-2016-9626 CVE-2016-9627 CVE-2016-9628 CVE-2016-9629 CVE-2016-9630 CVE-2016-9631 CVE-2016-9632 CVE-2016-9633 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes 23 vulnerabilities is now available. Description: This update for w3m fixes the following security issues (bsc#1011293): - CVE-2016-9622: w3m: null deref (bsc#1012021) - CVE-2016-9623: w3m: null deref (bsc#1012022) - CVE-2016-9624: w3m: near-null deref (bsc#1012023) - CVE-2016-9625: w3m: stack overflow (bsc#1012024) - CVE-2016-9626: w3m: stack overflow (bsc#1012025) - CVE-2016-9627: w3m: heap overflow read + deref (bsc#1012026) - CVE-2016-9628: w3m: null deref (bsc#1012027) - CVE-2016-9629: w3m: null deref (bsc#1012028) - CVE-2016-9630: w3m: global-buffer-overflow read (bsc#1012029) - CVE-2016-9631: w3m: null deref (bsc#1012030) - CVE-2016-9632: w3m: global-buffer-overflow read (bsc#1012031) - CVE-2016-9633: w3m: OOM (bsc#1012032) - CVE-2016-9434: w3m: null deref (bsc#1011283) - CVE-2016-9435: w3m: use uninit value (bsc#1011284) - CVE-2016-9436: w3m: use uninit value (bsc#1011285) - CVE-2016-9437: w3m: write to rodata (bsc#1011286) - CVE-2016-9438: w3m: null deref (bsc#1011287) - CVE-2016-9439: w3m: stack overflow (bsc#1011288) - CVE-2016-9440: w3m: near-null deref (bsc#1011289) - CVE-2016-9441: w3m: near-null deref (bsc#1011290) - CVE-2016-9442: w3m: potential heap buffer corruption (bsc#1011291) - CVE-2016-9443: w3m: null deref (bsc#1011292) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2016-1457=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1457=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): w3m-0.5.3.git20161120-160.1 w3m-debuginfo-0.5.3.git20161120-160.1 w3m-debugsource-0.5.3.git20161120-160.1 w3m-inline-image-0.5.3.git20161120-160.1 w3m-inline-image-debuginfo-0.5.3.git20161120-160.1 - openSUSE Leap 42.1 (i586 x86_64): w3m-0.5.3.git20161120-161.1 w3m-debuginfo-0.5.3.git20161120-161.1 w3m-debugsource-0.5.3.git20161120-161.1 w3m-inline-image-0.5.3.git20161120-161.1 w3m-inline-image-debuginfo-0.5.3.git20161120-161.1 References: https://www.suse.com/security/cve/CVE-2016-9434.html https://www.suse.com/security/cve/CVE-2016-9435.html https://www.suse.com/security/cve/CVE-2016-9436.html https://www.suse.com/security/cve/CVE-2016-9437.html https://www.suse.com/security/cve/CVE-2016-9438.html https://www.suse.com/security/cve/CVE-2016-9439.html https://www.suse.com/security/cve/CVE-2016-9440.html https://www.suse.com/security/cve/CVE-2016-9441.html https://www.suse.com/security/cve/CVE-2016-9442.html https://www.suse.com/security/cve/CVE-2016-9443.html https://www.suse.com/security/cve/CVE-2016-9621.html https://www.suse.com/security/cve/CVE-2016-9622.html https://www.suse.com/security/cve/CVE-2016-9623.html https://www.suse.com/security/cve/CVE-2016-9624.html https://www.suse.com/security/cve/CVE-2016-9625.html https://www.suse.com/security/cve/CVE-2016-9626.html https://www.suse.com/security/cve/CVE-2016-9627.html https://www.suse.com/security/cve/CVE-2016-9628.html https://www.suse.com/security/cve/CVE-2016-9629.html https://www.suse.com/security/cve/CVE-2016-9630.html https://www.suse.com/security/cve/CVE-2016-9631.html https://www.suse.com/security/cve/CVE-2016-9632.html https://www.suse.com/security/cve/CVE-2016-9633.html https://bugzilla.suse.com/1011283 https://bugzilla.suse.com/1011284 https://bugzilla.suse.com/1011285 https://bugzilla.suse.com/1011286 https://bugzilla.suse.com/1011287 https://bugzilla.suse.com/1011288 https://bugzilla.suse.com/1011289 https://bugzilla.suse.com/1011290 https://bugzilla.suse.com/1011291 https://bugzilla.suse.com/1011292 https://bugzilla.suse.com/1011293 https://bugzilla.suse.com/1012021 https://bugzilla.suse.com/1012022 https://bugzilla.suse.com/1012023 https://bugzilla.suse.com/1012024 https://bugzilla.suse.com/1012025 https://bugzilla.suse.com/1012026 https://bugzilla.suse.com/1012027 https://bugzilla.suse.com/1012028 https://bugzilla.suse.com/1012029 https://bugzilla.suse.com/1012030 https://bugzilla.suse.com/1012031 https://bugzilla.suse.com/1012032