UbuntuUpdates.org

Package "w3m"

Name: w3m

Description:

WWW browsable pager with excellent tables/frames support
Latest version: 0.5.3+git20210102-6ubuntu0.2
Release: jammy (22.04)
Level: security
Repository: main
Homepage: https://tracker.debian.org/pkg/w3m

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "w3m"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "w3m" in Jammy

Repository Area Version
base main 0.5.3+git20210102-6build3
base universe 0.5.3+git20210102-6build3
security universe 0.5.3+git20210102-6ubuntu0.2
updates main 0.5.3+git20210102-6ubuntu0.2
updates universe 0.5.3+git20210102-6ubuntu0.2

Changelog

Version: 0.5.3+git20210102-6ubuntu0.2 2024-01-15 15:06:55 UTC

  w3m (0.5.3+git20210102-6ubuntu0.2) jammy-security; urgency=medium

  * SECURITY UPDATE: Out-of-bounds write
    - debian/patches/CVE-2023-4255.patch: Fix OOB access due to multiple backspaces
      in etc.c.
    - CVE-2023-4255

 -- Leonidas Da Silva Barbosa <email address hidden> Tue, 09 Jan 2024 15:01:33 -0300
Source diff to previous version
CVE-2023-4255 An out-of-bounds write issue has been discovered in the backspace handling of the checkType() function in etc.c within the W3M application. This vuln

Version: 0.5.3+git20210102-6ubuntu0.1 2023-01-09 15:07:38 UTC

  w3m (0.5.3+git20210102-6ubuntu0.1) jammy-security; urgency=medium

  * SECURITY UPDATE: out-of-bounds write in checkType
    - debian/patches/CVE-2022-38223-pre1.patch: fix warning for unused
      variable without USE_M17N in display.c, etc.c, file.c, linein.c,
      table.c.
    - debian/patches/CVE-2022-38223.patch: fix m17n backspace handling
      causes out-of-bounds write in checkType in etc.c.
    - CVE-2022-38223

 -- Marc Deslauriers <email address hidden> Fri, 06 Jan 2023 09:10:13 -0500
CVE-2022-38223 There is an out-of-bounds write in checkType located in etc.c in w3m 0.5.3. It can be triggered by sending a crafted HTML file to the w3m binary. It


About   -   Send Feedback to @ubuntu_updates