From 01d41d49b273a8cc75b27c6ab42291b46004fc0c Mon Sep 17 00:00:00 2001 From: Tatsuya Kinoshita Date: Thu, 25 Jan 2018 18:23:40 +0900 Subject: Add CVE IDs cf. https://security-tracker.debian.org/tracker/source-package/w3m --- NEWS | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) (limited to 'NEWS') diff --git a/NEWS b/NEWS index b05301b..4ed621a 100644 --- a/NEWS +++ b/NEWS @@ -1,9 +1,9 @@ -Debian's w3m 0.5.3+git20180121 +Debian's w3m 0.5.3+git20180125 * bug fixes - - fix stack overflow with malformed text - - fix null deref with malformed text - - make temporary directory safely when ~/.w3m is unwritable + - fix stack overflow with malformed text [CVE-2018-6196] + - fix null deref with malformed text [CVE-2018-6197] + - fix /tmp file races only when ~/.w3m is unwritable [CVE-2018-6198] - do not remove w3mdict.cgi when "make distclean" - do not turn a form's GET into POST - correct parsing -- cgit v1.2.3