UbuntuUpdates.org

Package "w3m"

Name: w3m

Description:

WWW browsable pager with excellent tables/frames support
Latest version: 0.5.3-37ubuntu0.2
Release: focal (20.04)
Level: updates
Repository: main
Homepage: http://sourceforge.net/projects/w3m/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "w3m"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "w3m" in Focal

Repository Area Version
base universe 0.5.3-37
base main 0.5.3-37
security main 0.5.3-37ubuntu0.2
security universe 0.5.3-37ubuntu0.2
updates universe 0.5.3-37ubuntu0.2

Changelog

Version: 0.5.3-37ubuntu0.2 2024-01-16 02:06:58 UTC

  w3m (0.5.3-37ubuntu0.2) focal-security; urgency=medium

  * SECURITY UPDATE: Out-of-bounds write
    - debian/patches/CVE-2023-4255.patch: Fix OOB access due to multiple backspaces
      in etc.c.
    - CVE-2023-4255

 -- Leonidas Da Silva Barbosa <email address hidden> Mon, 08 Jan 2024 11:51:54 -0300
Source diff to previous version
CVE-2023-4255 An out-of-bounds write issue has been discovered in the backspace handling of the checkType() function in etc.c within the W3M application. This vuln

Version: 0.5.3-37ubuntu0.1 2023-01-09 16:06:43 UTC

  w3m (0.5.3-37ubuntu0.1) focal-security; urgency=medium

  * SECURITY UPDATE: out-of-bounds write in checkType
    - debian/patches/CVE-2022-38223-pre1.patch: fix warning for unused
      variable without USE_M17N in display.c, etc.c, file.c, linein.c,
      table.c.
    - debian/patches/CVE-2022-38223.patch: fix m17n backspace handling
      causes out-of-bounds write in checkType in etc.c.
    - CVE-2022-38223

 -- Marc Deslauriers <email address hidden> Fri, 06 Jan 2023 09:22:51 -0500
CVE-2022-38223 There is an out-of-bounds write in checkType located in etc.c in w3m 0.5.3. It can be triggered by sending a crafted HTML file to the w3m binary. It


About   -   Send Feedback to @ubuntu_updates