Mailinglist Archive: opensuse-updates (164 mails)

< Previous Next >
openSUSE-SU-2016:3121-1: moderate: Security update for w3m
openSUSE Security Update: Security update for w3m
______________________________________________________________________________

Announcement ID: openSUSE-SU-2016:3121-1
Rating: moderate
References: #1011283 #1011284 #1011285 #1011286 #1011287
#1011288 #1011289 #1011290 #1011291 #1011292
#1011293 #1012021 #1012022 #1012023 #1012024
#1012025 #1012026 #1012027 #1012028 #1012029
#1012030 #1012031 #1012032
Cross-References: CVE-2016-9434 CVE-2016-9435 CVE-2016-9436
CVE-2016-9437 CVE-2016-9438 CVE-2016-9439
CVE-2016-9440 CVE-2016-9441 CVE-2016-9442
CVE-2016-9443 CVE-2016-9621 CVE-2016-9622
CVE-2016-9623 CVE-2016-9624 CVE-2016-9625
CVE-2016-9626 CVE-2016-9627 CVE-2016-9628
CVE-2016-9629 CVE-2016-9630 CVE-2016-9631
CVE-2016-9632 CVE-2016-9633
Affected Products:
openSUSE Leap 42.2
openSUSE Leap 42.1
______________________________________________________________________________

An update that fixes 23 vulnerabilities is now available.

Description:

This update for w3m fixes the following security issues (bsc#1011293):

- CVE-2016-9622: w3m: null deref (bsc#1012021)
- CVE-2016-9623: w3m: null deref (bsc#1012022)
- CVE-2016-9624: w3m: near-null deref (bsc#1012023)
- CVE-2016-9625: w3m: stack overflow (bsc#1012024)
- CVE-2016-9626: w3m: stack overflow (bsc#1012025)
- CVE-2016-9627: w3m: heap overflow read + deref (bsc#1012026)
- CVE-2016-9628: w3m: null deref (bsc#1012027)
- CVE-2016-9629: w3m: null deref (bsc#1012028)
- CVE-2016-9630: w3m: global-buffer-overflow read (bsc#1012029)
- CVE-2016-9631: w3m: null deref (bsc#1012030)
- CVE-2016-9632: w3m: global-buffer-overflow read (bsc#1012031)
- CVE-2016-9633: w3m: OOM (bsc#1012032)
- CVE-2016-9434: w3m: null deref (bsc#1011283)
- CVE-2016-9435: w3m: use uninit value (bsc#1011284)
- CVE-2016-9436: w3m: use uninit value (bsc#1011285)
- CVE-2016-9437: w3m: write to rodata (bsc#1011286)
- CVE-2016-9438: w3m: null deref (bsc#1011287)
- CVE-2016-9439: w3m: stack overflow (bsc#1011288)
- CVE-2016-9440: w3m: near-null deref (bsc#1011289)
- CVE-2016-9441: w3m: near-null deref (bsc#1011290)
- CVE-2016-9442: w3m: potential heap buffer corruption (bsc#1011291)
- CVE-2016-9443: w3m: null deref (bsc#1011292)

This update was imported from the SUSE:SLE-12:Update update project.


Patch Instructions:

To install this openSUSE Security Update use YaST online_update.
Alternatively you can run the command listed for your product:

- openSUSE Leap 42.2:

zypper in -t patch openSUSE-2016-1457=1

- openSUSE Leap 42.1:

zypper in -t patch openSUSE-2016-1457=1

To bring your system up-to-date, use "zypper patch".


Package List:

- openSUSE Leap 42.2 (i586 x86_64):

w3m-0.5.3.git20161120-160.1
w3m-debuginfo-0.5.3.git20161120-160.1
w3m-debugsource-0.5.3.git20161120-160.1
w3m-inline-image-0.5.3.git20161120-160.1
w3m-inline-image-debuginfo-0.5.3.git20161120-160.1

- openSUSE Leap 42.1 (i586 x86_64):

w3m-0.5.3.git20161120-161.1
w3m-debuginfo-0.5.3.git20161120-161.1
w3m-debugsource-0.5.3.git20161120-161.1
w3m-inline-image-0.5.3.git20161120-161.1
w3m-inline-image-debuginfo-0.5.3.git20161120-161.1


References:

https://www.suse.com/security/cve/CVE-2016-9434.html
https://www.suse.com/security/cve/CVE-2016-9435.html
https://www.suse.com/security/cve/CVE-2016-9436.html
https://www.suse.com/security/cve/CVE-2016-9437.html
https://www.suse.com/security/cve/CVE-2016-9438.html
https://www.suse.com/security/cve/CVE-2016-9439.html
https://www.suse.com/security/cve/CVE-2016-9440.html
https://www.suse.com/security/cve/CVE-2016-9441.html
https://www.suse.com/security/cve/CVE-2016-9442.html
https://www.suse.com/security/cve/CVE-2016-9443.html
https://www.suse.com/security/cve/CVE-2016-9621.html
https://www.suse.com/security/cve/CVE-2016-9622.html
https://www.suse.com/security/cve/CVE-2016-9623.html
https://www.suse.com/security/cve/CVE-2016-9624.html
https://www.suse.com/security/cve/CVE-2016-9625.html
https://www.suse.com/security/cve/CVE-2016-9626.html
https://www.suse.com/security/cve/CVE-2016-9627.html
https://www.suse.com/security/cve/CVE-2016-9628.html
https://www.suse.com/security/cve/CVE-2016-9629.html
https://www.suse.com/security/cve/CVE-2016-9630.html
https://www.suse.com/security/cve/CVE-2016-9631.html
https://www.suse.com/security/cve/CVE-2016-9632.html
https://www.suse.com/security/cve/CVE-2016-9633.html
https://bugzilla.suse.com/1011283
https://bugzilla.suse.com/1011284
https://bugzilla.suse.com/1011285
https://bugzilla.suse.com/1011286
https://bugzilla.suse.com/1011287
https://bugzilla.suse.com/1011288
https://bugzilla.suse.com/1011289
https://bugzilla.suse.com/1011290
https://bugzilla.suse.com/1011291
https://bugzilla.suse.com/1011292
https://bugzilla.suse.com/1011293
https://bugzilla.suse.com/1012021
https://bugzilla.suse.com/1012022
https://bugzilla.suse.com/1012023
https://bugzilla.suse.com/1012024
https://bugzilla.suse.com/1012025
https://bugzilla.suse.com/1012026
https://bugzilla.suse.com/1012027
https://bugzilla.suse.com/1012028
https://bugzilla.suse.com/1012029
https://bugzilla.suse.com/1012030
https://bugzilla.suse.com/1012031
https://bugzilla.suse.com/1012032


< Previous Next >
This Thread
  • No further messages