Register | Log in

w3m

WWW browsable pager with excellent tables/frames support

Choose email to subscribe with

general

source: w3m (source, web)
version: 0.5.3-34
maintainer: Tatsuya Kinoshita [DMD]
uploaders: HIGUCHI Daisuke (VDR dai) [DMD]
arch: any
std-ver: 3.9.8
VCS: Git (Browse)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 0.5.3-8
oldstable: 0.5.3-19+deb8u2
stable: 0.5.3-34
testing: 0.5.3-34
unstable: 0.5.3-34

versioned links

0.5.3-8: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
0.5.3-19+deb8u2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
0.5.3-34: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

w3m
w3m-img

action needed

3 bugs tagged help in the BTS

normal

The BTS contains 3 bugs tagged help, please consider helping the maintainer in dealing with them.

Created: 2016-05-08 Last update: 2017-08-18 01:12

34 ignored security issues in wheezy

low

There are 34 open security issues in wheezy.

34 issues skipped by the security teams:

CVE-2016-9426: An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. Integer overflow vulnerability in the renderTable function in w3m allows remote attackers to cause a denial of service (OOM) and possibly execute arbitrary code due to bdwgc's bug (CVE-2016-9427) via a crafted HTML page.
CVE-2016-9425: An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. Heap-based buffer overflow in the addMultirowsForm function in w3m allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted HTML page.
CVE-2016-9424: An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m doesn't properly validate the value of tag attribute, which allows remote attackers to cause a denial of service (heap buffer overflow crash) and possibly execute arbitrary code via a crafted HTML page.
CVE-2016-9423: An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. Heap-based buffer overflow in w3m allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted HTML page.
CVE-2016-9422: An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. The feed_table_tag function in w3m doesn't properly validate the value of table span, which allows remote attackers to cause a denial of service (stack and/or heap buffer overflow) and possibly execute arbitrary code via a crafted HTML page.
TEMP-0850432-8BD66F:
CVE-2016-9429: An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. Buffer overflow in the formUpdateBuffer function in w3m allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted HTML page.
CVE-2016-9428: An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. Heap-based buffer overflow in the addMultirowsForm function in w3m allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted HTML page.
CVE-2016-9441: An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted HTML page.
CVE-2016-9440: An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted HTML page.
CVE-2016-9443: An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted HTML page.
CVE-2016-9442: An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause memory corruption in certain conditions via a crafted HTML page.
CVE-2016-9632: An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denial of service (global buffer overflow and crash) via a crafted HTML page.
CVE-2016-9633: An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denial of service (infinite loop and resource consumption) via a crafted HTML page.
CVE-2016-9630: An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denial of service (global buffer overflow and crash) via a crafted HTML page.
CVE-2016-9631: An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted HTML page.
CVE-2016-9430: An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted HTML page.
CVE-2016-9431: An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. Infinite recursion vulnerability in w3m allows remote attackers to cause a denial of service via a crafted HTML page.
CVE-2016-9432: An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause a denial of service (memory corruption, segmentation fault, and crash) via a crafted HTML page.
CVE-2016-9433: An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause a denial of service (out-of-bounds array access) via a crafted HTML page.
CVE-2016-9434: An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted HTML page.
CVE-2016-9435: The HTMLtagproc1 function in file.c in w3m before 0.5.3+git20161009 does not properly initialize values, which allows remote attackers to crash the application via a crafted html file, related to <dd> tags.
CVE-2016-9436: parsetagx.c in w3m before 0.5.3+git20161009 does not properly initialize values, which allows remote attackers to crash the application via a crafted html file, related to a <i> tag.
CVE-2016-9437: An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause a denial of service (segmentation fault and crash) and possibly memory corruption via a crafted HTML page.
CVE-2016-9438: An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted HTML page.
CVE-2016-9439: An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. Infinite recursion vulnerability in w3m allows remote attackers to cause a denial of service via a crafted HTML page.
CVE-2016-9629: An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted HTML page.
CVE-2016-9628: An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted HTML page.
CVE-2016-9625: An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. Infinite recursion vulnerability in w3m allows remote attackers to cause a denial of service via a crafted HTML page.
CVE-2016-9624: An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted HTML page.
CVE-2016-9627: An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denial of service (heap buffer overflow and crash) via a crafted HTML page.
CVE-2016-9626: An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. Infinite recursion vulnerability in w3m allows remote attackers to cause a denial of service via a crafted HTML page.
CVE-2016-9623: An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted HTML page.
CVE-2016-9622: An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted HTML page.

Please fix them.

Created: 2016-11-18 Last update: 2017-08-11 01:20

news

[2017-05-27] Accepted w3m 0.5.3-19+deb8u2 (source amd64) into proposed-updates->stable-new, proposed-updates (Tatsuya Kinoshita)
[2017-01-16] w3m 0.5.3-34 MIGRATED to testing (Debian testing watch)
[2017-01-05] Accepted w3m 0.5.3-34 (source amd64) into unstable (Tatsuya Kinoshita)
[2016-12-24] Accepted w3m 0.5.3-19+deb8u1 (source amd64) into proposed-updates->stable-new, proposed-updates (Tatsuya Kinoshita)
[2016-11-28] w3m 0.5.3-33 MIGRATED to testing (Debian testing watch)
[2016-11-21] Accepted w3m 0.5.3-33 (source amd64) into unstable (Tatsuya Kinoshita)
[2016-11-06] w3m 0.5.3-32 MIGRATED to testing (Debian testing watch)
[2016-10-31] Accepted w3m 0.5.3-32 (source amd64) into unstable (Tatsuya Kinoshita)
[2016-10-21] w3m 0.5.3-31 MIGRATED to testing (Debian testing watch)
[2016-10-15] Accepted w3m 0.5.3-31 (source amd64) into unstable (Tatsuya Kinoshita)
[2016-10-15] Accepted w3m 0.5.3-30 (source amd64) into unstable (Tatsuya Kinoshita)
[2016-07-24] w3m 0.5.3-29 MIGRATED to testing (Debian testing watch)
[2016-07-18] Accepted w3m 0.5.3-29 (source amd64) into unstable (Tatsuya Kinoshita)
[2016-05-29] w3m 0.5.3-28 MIGRATED to testing (Debian testing watch)
[2016-05-23] Accepted w3m 0.5.3-28 (source amd64) into unstable (Tatsuya Kinoshita)
[2016-03-10] w3m 0.5.3-27 MIGRATED to testing (Debian testing watch)
[2016-03-04] Accepted w3m 0.5.3-27 (source amd64) into unstable (Tatsuya Kinoshita)
[2015-12-07] w3m 0.5.3-26 MIGRATED to testing (Debian testing watch)
[2015-12-01] Accepted w3m 0.5.3-26 (source amd64) into unstable (Tatsuya Kinoshita)
[2015-10-16] w3m 0.5.3-25 MIGRATED to testing (Britney)
[2015-10-10] Accepted w3m 0.5.3-25 (source amd64) into unstable (Tatsuya Kinoshita)
[2015-08-17] w3m 0.5.3-24 MIGRATED to testing (Britney)
[2015-08-11] Accepted w3m 0.5.3-24 (source amd64) into unstable (Tatsuya Kinoshita)
[2015-07-26] w3m 0.5.3-23 MIGRATED to testing (Britney)
[2015-07-20] Accepted w3m 0.5.3-23 (source amd64) into unstable (Tatsuya Kinoshita)
[2015-06-28] w3m 0.5.3-22 MIGRATED to testing (Britney)
[2015-06-22] Accepted w3m 0.5.3-22 (source amd64) into unstable (Tatsuya Kinoshita)
[2015-05-14] w3m 0.5.3-21 MIGRATED to testing (Britney)
[2015-05-08] Accepted w3m 0.5.3-21 (source amd64) into unstable (Tatsuya Kinoshita)
[2015-05-02] w3m 0.5.3-20 MIGRATED to testing (Britney)

1
2

bugs [bug history graph]

all: 104 115
RC: 0
I&N: 35 37
M&W: 69 78
F&P: 0

links

homepage
lintian
buildd: logs, clang, reproducibility
popcon
browse source code
edit tags
security tracker
screenshots

ubuntu

[Information about Ubuntu for Debian Developers]

version: 0.5.3-34
6 bugs

Debian Package Tracker — Copyright 2013-2016 The Distro Tracker Developers

Report problems to the tracker.debian.org pseudo-package in the Debian BTS.

Documentation — Git Repository — How to contribute