Category Archives: Advisories

w3m-0.5.3-63.git20230121.el7

Read Time:12 Second

FEDORA-EPEL-2024-5253d48b14

Packages in this update:

w3m-0.5.3-63.git20230121.el7

Update description:

Added upstream patch to fix out-of-bounds access due to multiple backspaces to address incomplete fix for CVE-2022-38223 (#2222775, #2222780, #2255207)

Read More

w3m-0.5.3-63.git20230121.el8

Read Time:12 Second

FEDORA-EPEL-2024-bf31852fe0

Packages in this update:

w3m-0.5.3-63.git20230121.el8

Update description:

Added upstream patch to fix out-of-bounds access due to multiple backspaces to address incomplete fix for CVE-2022-38223 (#2222775, #2222780, #2255207)

Read More

w3m-0.5.3-63.git20230121.el9

Read Time:12 Second

FEDORA-EPEL-2024-0398ebbbfa

Packages in this update:

w3m-0.5.3-63.git20230121.el9

Update description:

Added upstream patch to fix out-of-bounds access due to multiple backspaces to address incomplete fix for CVE-2022-38223 (#2222775, #2222780, #2255207)

Read More

w3m-0.5.3-63.git20230121.fc38

Read Time:12 Second

FEDORA-2024-38c2261ca0

Packages in this update:

w3m-0.5.3-63.git20230121.fc38

Update description:

Added upstream patch to fix out-of-bounds access due to multiple backspaces to address incomplete fix for CVE-2022-38223 (#2222775, #2222780, #2255207)

Read More

w3m-0.5.3-63.git20230121.fc40

Read Time:12 Second

FEDORA-2024-aeb75f8b5b

Packages in this update:

w3m-0.5.3-63.git20230121.fc40

Update description:

Added upstream patch to fix out-of-bounds access due to multiple backspaces to address incomplete fix for CVE-2022-38223 (#2222775, #2222780, #2255207)

Read More

w3m-0.5.3-63.git20230121.fc39

Read Time:12 Second

FEDORA-2024-3fc66f8bf3

Packages in this update:

w3m-0.5.3-63.git20230121.fc39

Update description:

Added upstream patch to fix out-of-bounds access due to multiple backspaces to address incomplete fix for CVE-2022-38223 (#2222775, #2222780, #2255207)

Read More

USN-6699-1: Linux kernel vulnerabilities

Read Time:45 Second

Reima Ishii discovered that the nested KVM implementation for Intel x86
processors in the Linux kernel did not properly validate control registers
in certain situations. An attacker in a guest VM could use this to cause a
denial of service (guest crash). (CVE-2023-30456)

It was discovered that the Quick Fair Queueing scheduler implementation in
the Linux kernel did not properly handle network packets in certain
conditions, leading to a use after free vulnerability. A local attacker
could use this to cause a denial of service (system crash) or possibly
execute arbitrary code. (CVE-2023-4921)

It was discovered that a race condition existed in the SCSI Emulex
LightPulse Fibre Channel driver in the Linux kernel when unregistering FCF
and re-scanning an HBA FCF table, leading to a null pointer dereference
vulnerability. A local attacker could use this to cause a denial of service
(system crash). (CVE-2024-24855)

Read More