Thorsten Alteholz pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
9ac0e52a by Thorsten Alteholz at 2020-04-30T17:18:57+02:00
CVE-2018-6196 and CVE-2018-6197 will be fixed with upload to Jessie
- - - - -
2348d36c by Thorsten Alteholz at 2020-04-30T17:19:24+02:00
Reserve DLA-2195-1 for w3m
- - - - -
2 changed files:
- data/CVE/list
- data/DLA/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -124573,14 +124573,12 @@ CVE-2018-6198 (w3m through 0.5.3 does not properly
handle temporary files when t
CVE-2018-6197 (w3m through 0.5.3 is prone to a NULL pointer dereference flaw
in formU ...)
- w3m 0.5.3-36 (low)
[stretch] - w3m 0.5.3-34+deb9u1
- [jessie] - w3m <no-dsa> (Minor issue)
[wheezy] - w3m <no-dsa> (Minor issue)
NOTE: https://github.com/tats/w3m/issues/89
NOTE:
https://github.com/tats/w3m/commit/7fdc83b0364005a0b5ed869230dd81752ba022e8
CVE-2018-6196 (w3m through 0.5.3 is prone to an infinite recursion flaw in
HTMLlinepr ...)
- w3m 0.5.3-36 (low)
[stretch] - w3m 0.5.3-34+deb9u1
- [jessie] - w3m <no-dsa> (Minor issue)
[wheezy] - w3m <no-dsa> (Minor issue)
NOTE: https://github.com/tats/w3m/issues/88
NOTE:
https://github.com/tats/w3m/commit/8354763b90490d4105695df52674d0fcef823e92
=====================================
data/DLA/list
=====================================
@@ -1,3 +1,6 @@
+[30 Apr 2020] DLA-2195-1 w3m - security update
+ {CVE-2018-6196 CVE-2018-6197}
+ [jessie] - w3m 0.5.3-19+deb8u3
[30 Apr 2020] DLA-2194-1 yodl - security update
{CVE-2016-10375}
[jessie] - yodl 3.04.00-1+deb8u1
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/0fcfd55544a7553567b6a9de34be4fb3b95b55f3...2348d36c7184664855a3f1879a11b4dc1f56d276
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/0fcfd55544a7553567b6a9de34be4fb3b95b55f3...2348d36c7184664855a3f1879a11b4dc1f56d276
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
