UbuntuUpdates.org

Package "w3m"

Name: w3m

Description:

This package is just an umbrella for a group of other packages, it has no description.
Description samples from packages in group:

  • inline image extension support utilities for w3m
Latest version: 0.5.3-37ubuntu0.2
Release: focal (20.04)
Level: security
Repository: universe

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Other versions of "w3m" in Focal

Repository Area Version
base universe 0.5.3-37
base main 0.5.3-37
security main 0.5.3-37ubuntu0.2
updates universe 0.5.3-37ubuntu0.2
updates main 0.5.3-37ubuntu0.2

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 0.5.3-37ubuntu0.2 2024-01-15 15:06:53 UTC

  w3m (0.5.3-37ubuntu0.2) focal-security; urgency=medium

  * SECURITY UPDATE: Out-of-bounds write
    - debian/patches/CVE-2023-4255.patch: Fix OOB access due to multiple backspaces
      in etc.c.
    - CVE-2023-4255

 -- Leonidas Da Silva Barbosa <email address hidden> Mon, 08 Jan 2024 11:51:54 -0300
Source diff to previous version
CVE-2023-4255 An out-of-bounds write issue has been discovered in the backspace handling of the checkType() function in etc.c within the W3M application. This vuln

Version: 0.5.3-37ubuntu0.1 2023-01-09 15:07:36 UTC

  w3m (0.5.3-37ubuntu0.1) focal-security; urgency=medium

  * SECURITY UPDATE: out-of-bounds write in checkType
    - debian/patches/CVE-2022-38223-pre1.patch: fix warning for unused
      variable without USE_M17N in display.c, etc.c, file.c, linein.c,
      table.c.
    - debian/patches/CVE-2022-38223.patch: fix m17n backspace handling
      causes out-of-bounds write in checkType in etc.c.
    - CVE-2022-38223

 -- Marc Deslauriers <email address hidden> Fri, 06 Jan 2023 09:22:51 -0500
CVE-2022-38223 There is an out-of-bounds write in checkType located in etc.c in w3m 0.5.3. It can be triggered by sending a crafted HTML file to the w3m binary. It


About   -   Send Feedback to @ubuntu_updates