Ubuntu Security Notice 3555-2 - USN-3555-2 fixed vulnerabilities in w3m. This update provides the corresponding update for Ubuntu 12.04 ESM. It was discovered that w3m incorrectly handled certain inputs. An attacker could possibly use this to cause a denial of service. It was discovered that w3m incorrectly handled temporary files. An attacker could possibly use this to overwrite arbitrary files. Various other issues were also addressed.
a47b5b2573b989e79bccd0fa4e464331ab5a54b037b27dd2ad1e9d623adf9945
==========================================================================
Ubuntu Security Notice USN-3555-2
February 01, 2018
w3m vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 12.04 ESM
Summary:
Several security issues were fixed in w3m.
Software Description:
- w3m: WWW browsable pager with excellent tables/frames support
Details:
USN-3555-2 fixed vulnerabilities in w3m. This update
provides the corresponding update for Ubuntu 12.04 ESM.
Original advisory details:
It was discovered that w3m incorrectly handled certain inputs.
An attacker could possibly use this to cause a denial of service.
(CVE-2018-6196, CVE-2018-6197)
It was discovered that w3m incorrectly handled temporary files.
An attacker could possibly use this to overwrite arbitrary files.
(CVE-2018-6198)
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 12.04 ESM:
w3m 0.5.3-5ubuntu1.3
In general, a standard system update will make all the necessary
changes.
References:
https://www.ubuntu.com/usn/usn-3555-2
https://www.ubuntu.com/usn/usn-3555-1
CVE-2018-6196, CVE-2018-6197, CVE-2018-6198