shield Security update for w3m

SUSE-SLE-SERVER-12-SP4-2019-776

This update for w3m fixes several issues. These security issues were fixed: - CVE-2018-6196: Prevent infinite recursion in HTMLlineproc0 caused by the feed_table_block_tag function which did not prevent a negative indent value (bsc#1077559) - CVE-2018-6197: Prevent NULL pointer dereference in formUpdateBuffer (bsc#1077568) - CVE-2018-6198: w3m did not properly handle temporary files when the ~/.w3m directory is unwritable, which allowed a local attacker to craft a symlink attack to overwrite arbitrary files (bsc#1077572)

• Release Date
  Mar 27 2019
• References
  Bugzilla: 1077568, 1077572, 1077559
  CVEs: CVE-2018-6198, CVE-2018-6197, CVE-2018-6196
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Server 12.4 s390x

• Packages
  w3m
  A text-based WWW browser

  0.5.3.git20161120-161.3.4

  lock rpm

  lock src

SUSE Linux Enterprise Server 12.4 aarch64

• Packages
  w3m
  A text-based WWW browser

  0.5.3.git20161120-161.3.4

  lock rpm

  lock src

SUSE Linux Enterprise Server 12.4 x86_64

• Packages
  w3m
  A text-based WWW browser

  0.5.3.git20161120-161.3.4

  lock rpm

  lock src

SUSE Linux Enterprise Server for SAP Applications 12.4 ppc64le

• Packages
  w3m
  A text-based WWW browser

  0.5.3.git20161120-161.3.4

  lock rpm

  lock src