From bugzilla at redhat.com Tue Nov 29 15:54:33 2016 Content-Type: multipart/mixed; boundary="===============4505597908203324964==" MIME-Version: 1.0 From: Red Hat Bugzilla To: i18n-bugs at lists.fedoraproject.org Subject: [Fedora-i18n-bugs] [Bug 1399740] New: CVE-2016-9633 w3m: Memory exhaustion due to repeatedly appending '' Date: Tue, 29 Nov 2016 15:53:56 +0000 Message-ID: --===============4505597908203324964== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable https://bugzilla.redhat.com/show_bug.cgi?id=3D1399740 Bug ID: 1399740 Summary: CVE-2016-9633 w3m: Memory exhaustion due to repeatedly appending '
' Product: Security Response Component: vulnerability Keywords: Security Severity: medium Priority: medium Assignee: security-response-team(a)redhat.com Reporter: anemec(a)redhat.com CC: eng-i18n-bugs(a)redhat.com, i18n-bugs(a)lists.fedoraproject.org, pnemade(a)redhat.c= om A memory exhaustion will occur in w3m while parsing maliciously crafted inp= ut. Upstream bug: https://github.com/tats/w3m/issues/23 Upstream fix: https://github.com/tats/w3m/commit/216722ed7282cec4338b177ea9ffdd39ad1b8c8c References: http://seclists.org/oss-sec/2016/q4/488 -- = You are receiving this mail because: You are on the CC list for the bug. --===============4505597908203324964==-- From bugzilla at redhat.com Tue Nov 29 16:04:57 2016 Content-Type: multipart/mixed; boundary="===============5932336198869639159==" MIME-Version: 1.0 From: Red Hat Bugzilla To: i18n-bugs at lists.fedoraproject.org Subject: [Fedora-i18n-bugs] [Bug 1399740] CVE-2016-9633 w3m: Memory exhaustion due to repeatedly appending '
' Date: Tue, 29 Nov 2016 16:04:45 +0000 Message-ID: In-Reply-To: bug-1399740-269801@bugzilla.redhat.com --===============5932336198869639159== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable https://bugzilla.redhat.com/show_bug.cgi?id=3D1399740 Andrej Nemec changed: What |Removed |Added ---------------------------------------------------------------------------- Blocks| |1399744 -- = You are receiving this mail because: You are on the CC list for the bug. --===============5932336198869639159==-- From bugzilla at redhat.com Mon Dec 5 09:11:17 2016 Content-Type: multipart/mixed; boundary="===============8423745604116663188==" MIME-Version: 1.0 From: Red Hat Bugzilla To: i18n-bugs at lists.fedoraproject.org Subject: [Fedora-i18n-bugs] [Bug 1399740] CVE-2016-9633 w3m: Memory exhaustion due to repeatedly appending '
' Date: Mon, 05 Dec 2016 08:54:36 +0000 Message-ID: In-Reply-To: bug-1399740-269801@bugzilla.redhat.com --===============8423745604116663188== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable https://bugzilla.redhat.com/show_bug.cgi?id=3D1399740 Huzaifa S. Sidhpurwala changed: What |Removed |Added ---------------------------------------------------------------------------- Depends On| |1401423 Depends On| |1401424 --- Comment #1 from Huzaifa S. Sidhpurwala --- Created w3m tracking bugs for this issue: Affects: fedora-all [bug 1401423] Affects: epel-7 [bug 1401424] Referenced Bugs: https://bugzilla.redhat.com/show_bug.cgi?id=3D1401423 [Bug 1401423] w3m: various flaws [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=3D1401424 [Bug 1401424] w3m: various flaws [epel-7] -- = You are receiving this mail because: You are on the CC list for the bug. --===============8423745604116663188==-- From bugzilla at redhat.com Tue Mar 14 00:16:36 2017 Content-Type: multipart/mixed; boundary="===============0758620507599747814==" MIME-Version: 1.0 From: bugzilla at redhat.com To: i18n-bugs at lists.fedoraproject.org Subject: [Fedora-i18n-bugs] [Bug 1399740] CVE-2016-9633 w3m: Memory exhaustion due to repeatedly appending '
' Date: Mon, 13 Mar 2017 23:58:30 +0000 Message-ID: In-Reply-To: bug-1399740-269801@bugzilla.redhat.com --===============0758620507599747814== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable https://bugzilla.redhat.com/show_bug.cgi?id=3D1399740 Bug 1399740 depends on bug 1401423, which changed state. Bug 1401423 Summary: w3m: various flaws [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=3D1401423 What |Removed |Added ---------------------------------------------------------------------------- Status|ON_QA |CLOSED Resolution|--- |ERRATA -- = You are receiving this mail because: You are on the CC list for the bug. --===============0758620507599747814==-- From bugzilla at redhat.com Fri Mar 17 07:27:49 2017 Content-Type: multipart/mixed; boundary="===============5023533651748086124==" MIME-Version: 1.0 From: bugzilla at redhat.com To: i18n-bugs at lists.fedoraproject.org Subject: [Fedora-i18n-bugs] [Bug 1399740] CVE-2016-9633 w3m: Memory exhaustion due to repeatedly appending '
' Date: Fri, 17 Mar 2017 07:27:45 +0000 Message-ID: In-Reply-To: bug-1399740-269801@bugzilla.redhat.com --===============5023533651748086124== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable https://bugzilla.redhat.com/show_bug.cgi?id=3D1399740 Dhiru Kholia changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|medium |low Status|NEW |CLOSED Resolution|--- |WONTFIX Whiteboard|impact=3Dmoderate,public=3D2016 |impact=3Dlow,public=3D= 20160819, |0819,reported=3D20161122,sour |reported=3D20161122,sour= ce=3Dos |ce=3Doss-security,cvss2=3D4.3/A |s-security,cvss2=3D4.3= /AV:N/A |V:N/AC:M/Au:N/C:N/I:N/A:P,c |C:M/Au:N/C:N/I:N/A:P,cvss3= =3D |vss3=3D4.3/CVSS:3.0/AV:N/AC:L |4.3/CVSS:3.0/AV:N/AC:L/P= R:N |/PR:N/UI:R/S:U/C:N/I:N/A:L, |/UI:R/S:U/C:N/I:N/A:L,cwe= =3DC |cwe=3DCWE-400,fedora-all/w3m=3D |WE-400,fedora-all/w3m= =3Daffec |affected,epel-7/w3m=3Daffecte |ted,epel-7/w3m=3Daffecte= d,rhe |d,rhel-5/w3m=3Dnew,rhel-6/w3m |l-5/w3m=3Dwontfix,rhel-6= /w3m=3D |=3Dnew |notaffected Severity|medium |low Last Closed| |2017-03-17 03:27:45 -- = You are receiving this mail because: You are on the CC list for the bug. --===============5023533651748086124==-- From bugzilla at redhat.com Sat Mar 25 21:52:15 2017 Content-Type: multipart/mixed; boundary="===============7503037747446288414==" MIME-Version: 1.0 From: bugzilla at redhat.com To: i18n-bugs at lists.fedoraproject.org Subject: [Fedora-i18n-bugs] [Bug 1399740] CVE-2016-9633 w3m: Memory exhaustion due to repeatedly appending '
' Date: Sat, 25 Mar 2017 21:52:12 +0000 Message-ID: In-Reply-To: bug-1399740-269801@bugzilla.redhat.com --===============7503037747446288414== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable https://bugzilla.redhat.com/show_bug.cgi?id=3D1399740 Bug 1399740 depends on bug 1401424, which changed state. Bug 1401424 Summary: w3m: various flaws [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=3D1401424 What |Removed |Added ---------------------------------------------------------------------------- Status|ON_QA |CLOSED Resolution|--- |ERRATA -- = You are receiving this mail because: You are on the CC list for the bug. --===============7503037747446288414==--