Red Hat Security Advisory

RHSA-2010:0565

w3m security update

Released 2010-07-27 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux (v. 5 server) w3m-0.5.1-17.el5_5, w3m-0.5.1-17.el5_5.i386, w3m-0.5.1-17.el5_5.ia64 +5
Red Hat Enterprise Linux Desktop (v. 5 client) w3m-0.5.1-17.el5_5, w3m-0.5.1-17.el5_5.i386, w3m-img-0.5.1-17.el5_5 +1

Fixes 1 record

TI-2010-01988 CVE-2010-2074 · GHSA-xwjm-4v2q-p47f

istream.c in w3m 0.5.2 and possibly other versions, when ssl_verify_server is enabled…

LOW 33

istream.c in w3m 0.5.2 and possibly other versions, when ssl_verify_server is enabled, does not properly handle a '\0' character in a domain name in the (1) subject's Common Name or (2) Subject Alternative Name field of…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01491 Published 2010-06-16 Fixed CWE-20