Commit message (Collapse) | Author | Files | Lines | ||
---|---|---|---|---|---|
2020-05-01 | Update to 0.5.3-19+deb8u3 for jessie-securitydebian/0.5.3-19+deb8u3debian-jessie | Thorsten Alteholz | 3 | -0/+45 | |
2017-01-06 | Fix multiple vulnerabilities (closes: #850432) | Tatsuya Kinoshita | 22 | -0/+710 | |
- New patch 934_menu.patch to fix buffer overflow (tats/w3m#49) - New patch 935_shiftanchor.patch to fix buffer overflow (tats/w3m#62) - New patch 936_metarefresh.patch to fix buffer overflow (tats/w3m#63) - New patch 937_lineproc0.patch to fix buffer overflow (tats/w3m#67) - New patch 938_lineproc2body.patch to fix buffer overflow (tats/w3m#61) - New patch 939_textarea.patch to fix buffer overflow (tats/w3m#58) - New patch 940_tabattr.patch to fix buffer overflow (tats/w3m#60) - New patch 941_integeredwidth.patch to fix buffer overflow (tats/w3m#70) - New patch 942_tridvalue.patch to fix buffer overflow (tats/w3m#71) - New patch 943_pushlink.patch to fix buffer overflow (tats/w3m#64, #66) - New patch 944_lineproc0.patch to fix use after free (tats/w3m#65) - New patch 945_wtfstrwidth.patch to fix buffer overflow (tats/w3m#57) - New patch 946_strnewsize.patch to fix buffer overflow (tats/w3m#72) - New patch 947_realcolumn.patch to fix buffer overflow (tats/w3m#69) - New patch 948_getmclen.patch to fix buffer overflow (tats/w3m#59, #73, #74, #75, #76, #78, #79, #80, #83, #84) - New patch 949_wtftowcs.patch to fix buffer overflow (tats/w3m#77) - New patch 950_textarea.patch to fix infinite loop (tats/w3m#85) - New patch 951_lineproc0.patch to fix use after free (tats/w3m#81) - New patch 952_formupdatebuffer.patch to fix buffer overflow (tats/w3m#82) - New patch 953_formupdateline.patch to fix buffer overflow (tats/w3m#68#issuecomment-266214643) - New patch 954_wtfparse1.patch to fix buffer overflow (tats/w3m#68) | |||||
2016-11-24 | New patch 933_table-level.patch to fix out of memory [CVE-2016-9633] | Tatsuya Kinoshita | 2 | -0/+23 | |
2016-11-24 | Add CVE IDs | Tatsuya Kinoshita | 12 | -12/+12 | |
cf. http://www.openwall.com/lists/oss-security/2016/11/24/1 | |||||
2016-11-21 | New patch 932_ucsmap.patch to fix global-buffer-overflow | Tatsuya Kinoshita | 2 | -0/+73 | |
2016-11-21 | New patch 931_parse-url.patch to fix global-buffer-overflow | Tatsuya Kinoshita | 2 | -0/+22 | |
2016-11-21 | New patch 930_tbl-mode.patch to fix null deref | Tatsuya Kinoshita | 2 | -0/+34 | |
2016-11-21 | New patch 929_anchor.patch to fix null deref | Tatsuya Kinoshita | 2 | -0/+19 | |
2016-11-21 | New patch 928_form-id.patch to fix null deref | Tatsuya Kinoshita | 2 | -0/+29 | |
2016-11-21 | New patch 927_symbol.patch to fix array index | Tatsuya Kinoshita | 2 | -0/+75 | |
2016-11-21 | New patch 926_indent-level.patch to fix stack overflow | Tatsuya Kinoshita | 2 | -0/+19 | |
2016-11-21 | New patch 925_lineproc.patch to fix stack overflow | Tatsuya Kinoshita | 2 | -0/+46 | |
2016-11-21 | New patch 924_curline.patch to fix near-null deref | Tatsuya Kinoshita | 2 | -0/+20 | |
2016-11-21 | New patch 923_tagproc.patch to fix negative size allocation | Tatsuya Kinoshita | 2 | -0/+23 | |
2016-11-21 | New patch 922_lineproc.patch to fix null deref | Tatsuya Kinoshita | 2 | -0/+29 | |
2016-11-21 | New patch 921_cotable.patch to fix null deref | Tatsuya Kinoshita | 2 | -0/+19 | |
2016-11-21 | New patch 920_table.patch to fix stack overflow [CVE-2016-9439] | Tatsuya Kinoshita | 2 | -0/+61 | |
(closes: #844726) | |||||
2016-11-21 | New patch 919_form-update.patch to fix buffer overflow [CVE-2016-9429] | Tatsuya Kinoshita | 2 | -0/+28 | |
2016-11-21 | New patch 918_form-value.patch to fix null deref [CVE-2016-9443] | Tatsuya Kinoshita | 2 | -0/+23 | |
2016-11-21 | New patch 917_strgrow.patch to fix potential heap buffer corruption | Tatsuya Kinoshita | 2 | -0/+21 | |
[CVE-2016-9442] | |||||
2016-11-21 | New patch 916_anchor.patch to fix heap write | Tatsuya Kinoshita | 2 | -0/+20 | |
[CVE-2016-9425] [CVE-2016-9428] | |||||
2016-11-21 | New patch 915_table-alt.patch to fix near-null deref [CVE-2016-9441] | Tatsuya Kinoshita | 2 | -0/+19 | |
2016-11-21 | New patch 914_curline.patch to fix near-null deref [CVE-2016-9440] | Tatsuya Kinoshita | 2 | -0/+19 | |
2016-11-21 | New patch 913_tabwidth.patch to fix heap corruption [CVE-2016-9426] | Tatsuya Kinoshita | 2 | -0/+21 | |
2016-11-21 | New patch 912_i-dd.patch to fix uninit values | Tatsuya Kinoshita | 2 | -0/+35 | |
[CVE-2016-9435] [CVE-2016-9436] | |||||
2016-11-21 | New patch 911_rowcolspan.patch to fix stack smashing [CVE-2016-9422] | Tatsuya Kinoshita | 2 | -0/+27 | |
2016-11-21 | New patch 910_input-alt.patch to fix null deref [CVE-2016-9438] | Tatsuya Kinoshita | 2 | -0/+23 | |
2016-11-21 | New patch 909_button-type.patch to fix rodata write [CVE-2016-9437] | Tatsuya Kinoshita | 2 | -0/+28 | |
2016-11-21 | New patch 908_forms.patch to fix null deref [CVE-2016-9434] | Tatsuya Kinoshita | 2 | -0/+29 | |
2016-11-21 | New patch 907_iso2022.patch to fix array index [CVE-2016-9433] | Tatsuya Kinoshita | 2 | -0/+64 | |
2016-11-21 | New patch 906_form-update.patch to fix bcopy size [CVE-2016-9432] | Tatsuya Kinoshita | 2 | -0/+22 | |
2016-11-21 | New patch 905_textarea.patch to fix heap write [CVE-2016-9424] | Tatsuya Kinoshita | 2 | -0/+76 | |
2016-11-21 | New patch 904_form-update.patch to fix overflow | Tatsuya Kinoshita | 2 | -0/+20 | |
[CVE-2016-9423] [CVE-2016-9431] | |||||
2016-11-21 | New patch 903_input-type.patch to fix null deref [CVE-2016-9430] | Tatsuya Kinoshita | 2 | -0/+36 | |
2016-11-21 | New patch 902_johab1.patch to fix array index (closes: #820373) | Tatsuya Kinoshita | 2 | -0/+23 | |
2016-11-21 | New patch 901_ucsmap.patch to fix array index (closes: #820162) | Tatsuya Kinoshita | 2 | -0/+293 | |
2014-10-21 | Update 900_ChangeLog.patch | Tatsuya Kinoshita | 1 | -2/+13 | |
2014-10-21 | Update 015_debian-version.patch to 0.5.3+debian-19 | Tatsuya Kinoshita | 1 | -1/+1 | |
2014-10-21 | Update 360_lang-de.patch | Tatsuya Kinoshita | 1 | -4/+4 | |
2014-10-21 | New patch 360_lang-de.patch to add German translation (closes: #763964) | Tatsuya Kinoshita | 2 | -0/+922 | |
2014-10-15 | Update 900_ChangeLog.patch | Tatsuya Kinoshita | 1 | -2/+27 | |
2014-10-15 | Update 015_debian-version.patch to 0.5.3+debian-18 | Tatsuya Kinoshita | 1 | -1/+1 | |
2014-10-15 | Update 050_autotools-config.patch with autotools-dev 20140911.1 | Tatsuya Kinoshita | 1 | -42/+51 | |
(Note: Debian package uses dh addon instead of this patch) | |||||
2014-10-15 | New patch 350_ambwidth.patch to correct ucs_ambwidth_map | Tatsuya Kinoshita | 2 | -0/+240 | |
2014-10-15 | New patch 340_ssl-init.patch to disable SSLv3 [CVE-2014-3566] | Tatsuya Kinoshita | 2 | -0/+51 | |
2014-08-22 | Update 900_ChangeLog.patch | Tatsuya Kinoshita | 1 | -2/+28 | |
2014-08-22 | Update 015_debian-version.patch to 0.5.3+debian-17 | Tatsuya Kinoshita | 1 | -1/+1 | |
2014-08-22 | Update 050_autotools-config.patch with autotools-dev 20140510.1 | Tatsuya Kinoshita | 1 | -133/+223 | |
(Note: Debian package uses dh addon instead of this patch) | |||||
2014-08-22 | Update header of 080_gc72.patch | Tatsuya Kinoshita | 1 | -2/+7 | |
2014-08-22 | Update 080_gc72.patch to prevent segfaults (closes: #758831) | Micah Cowan | 1 | -16/+6 | |