ESB-2018.0345 - [FreeBSD] w3m: Multiple vulnerabilities 2018-02-05

Printable version
PGP/GPG verifiable version

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

===========================================================================
             AUSCERT External Security Bulletin Redistribution

                               ESB-2018.0345
                      w3m - multiple vulnerabilities
                              5 February 2018

===========================================================================

        AusCERT Security Bulletin Summary
        ---------------------------------

Product:           w3m
Publisher:         FreeBSD
Operating System:  FreeBSD
Impact/Access:     Create Arbitrary Files -- Remote with User Interaction
                   Denial of Service      -- Remote with User Interaction
Resolution:        Patch/Upgrade
CVE Names:         CVE-2018-6198 CVE-2018-6197 CVE-2018-6196

Reference:         ESB-2018.0327

Original Bulletin: 
   https://www.vuxml.org/freebsd/e72d5bf5-07a0-11e8-8248-0021ccb9e74d.html

- --------------------------BEGIN INCLUDED TEXT--------------------

w3m - multiple vulnerabilities

Affected packages
  ja-w3m     < 0.5.3.20180125
  ja-w3m-img < 0.5.3.20180125
  w3m        < 0.5.3.20180125
  w3m-img    < 0.5.3.20180125

Details

VuXML ID  e72d5bf5-07a0-11e8-8248-0021ccb9e74d
Discovery 2018-01-25
Entry     2018-02-01
Modified  2018-02-03

Tatsuya Kinoshita reports:

    CVE-2018-6196 * table.c: Prevent negative indent value in
    feed_table_block_tag().

    CVE-2018-6197 * form.c: Prevent invalid columnPos() call in
    formUpdateBuffer().

    CVE-2018-6198 * config.h.dist, config.h.in, configure, configure.ac,
    main.c, rc.c: Make temporary directory safely when ~/.w3m is unwritable.

References

CVE Name CVE-2018-6196
CVE Name CVE-2018-6197
CVE Name CVE-2018-6198
URL      https://github.com/tats/w3m/commit/e773a0e089276f82c546447c0fd1e6c0f9156628

- --------------------------END INCLUDED TEXT--------------------

You have received this e-mail bulletin as a result of your organisation's
registration with AusCERT. The mailing list you are subscribed to is
maintained within your organisation, so if you do not wish to continue
receiving these bulletins you should contact your local IT manager. If
you do not know who that is, please send an email to auscert@auscert.org.au
and we will forward your request to the appropriate person.

NOTE: Third Party Rights
This security bulletin is provided as a service to AusCERT's members.  As
AusCERT did not write the document quoted above, AusCERT has had no control
over its content. The decision to follow or act on information or advice
contained in this security bulletin is the responsibility of each user or
organisation, and should be considered in accordance with your organisation's
site policies and procedures. AusCERT takes no responsibility for consequences
which may arise from following or acting on information or advice contained in
this security bulletin.

NOTE: This is only the original release of the security bulletin.  It may
not be updated when updates to the original are made.  If downloading at
a later date, it is recommended that the bulletin is retrieved directly
from the author's website to ensure that the information is still current.

Contact information for the authors of the original document is included
in the Security Bulletin above.  If you have any questions or need further
information, please contact them directly.

Previous advisories and external security bulletins can be retrieved from:

        https://www.auscert.org.au/bulletins/

===========================================================================
Australian Computer Emergency Response Team
The University of Queensland
Brisbane
Qld 4072

Internet Email: auscert@auscert.org.au
Facsimile:      (07) 3365 7031
Telephone:      (07) 3365 4417 (International: +61 7 3365 4417)
                AusCERT personnel answer during Queensland business hours
                which are GMT+10:00 (AEST).
                On call after hours for member emergencies only.
===========================================================================
-----BEGIN PGP SIGNATURE-----
Comment: http://www.auscert.org.au/render.html?it=1967
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=kE1u
-----END PGP SIGNATURE-----

« Back to bulletins