Ubuntu 22.10: 5796-1 Critical: w3m Crash Risk From Malicious Websites

ubuntu

January 9, 2023

w3m could be made to crash or run programs as your login if it opened a malicious website.

Summary

w3m could be made to crash or run programs as your login if it opened a

malicious website.

Software Description:

- w3m: WWW browsable pager with excellent tables/frames support

Details:

It was discovered that w3m incorrectly handled certain HTML files. A remote

attacker could use this issue to cause w3m to crash, resulting in a denial

of service, or possibly execute arbitrary code.

Topics Covered

security advisory denial of service critical remote code execution ubuntu w3m

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 22.10:
   w3m                             0.5.3+git20220429-1ubuntu0.1

Ubuntu 22.04 LTS:
   w3m                             0.5.3+git20210102-6ubuntu0.1

Ubuntu 20.04 LTS:
   w3m                             0.5.3-37ubuntu0.1

Ubuntu 18.04 LTS:
   w3m                             0.5.3-36ubuntu0.1

In general, a standard system update will make all the necessary changes.