Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 524
Alerts This Week
Warning Icon 1 524

Stay Secure with the Latest Linux Advisories

Opensuse Large Esm H800
openSUSE

openSUSE go1.25-openssl Important Security Issues 2026-3151-1

Calendar White Jul 21, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE aws-nitro-enclaves-cli Important Issues Advisory 2026-3152-1

Calendar White Jul 21, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE nghttp2 Moderate HTTP Request Smuggling Issue 2026-3153-1

Calendar White Jul 21, 2026
moderate
Opensuse Large Esm H800
openSUSE

openSUSE python-tornado6 Moderate Credential Leak Vulnerability 2026-3155-1

Calendar White Jul 21, 2026
moderate
Opensuse Large Esm H900
openSUSE

openSUSE Kernel Important Security Update Vulnerability Fix 2026-3156-1

Calendar White Jul 21, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE php7 Moderate Buffer Vulnerability Resolution SUSE-SU-2026-3165-1

Calendar White Jul 21, 2026
moderate
Opensuse Large Esm H800
openSUSE

openSUSE libkrun Important Patch 2026-0255-1 for 8 Issues

Calendar White Jul 21, 2026
Important
Rockylinux Esm H900
Rocky

Rocky Linux httpd Important Denial of Service Fix RLSA-2026-42828

Calendar White Jul 21, 2026
Important
Ubuntu Large Esm H900
Ubuntu

Ubuntu 20.04 AccountsService Critical Exec Command Threat USN-8580-2

Calendar White Jul 21, 2026
Critical
Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found 30 articles for you...
203
Ls Advisories Mageia Esm H240
Price Tag%201security advisorydenial of servicesecurity fix

Mageia 9: 2024-0105 Moderate: w3m Denial Of Service Overview

An out-of-bounds read flaw was found in w3m, in the Strnew_size function in Str.c. This issue may allow an attacker to cause a denial of service through a crafted HTML file. (CVE-2023-38252) An out-of-bounds read flaw was found in w3m, in the growbuf_to_Str function in indep.c. This issue may allow an attacker to cause a denial . MGASA-2024-0105 - Updated w3m packages fix security vulnerabilities Publication date: 01 Apr 2024 URL: https://advisories.mageia.org/MGASA-2024-0105.html Type: security Affected Mageia releases: 9 CVE: CVE-2023-38252, CVE-2023-38253, CVE-2023-4255 An out-of-bounds read flaw was found in w3m, in the Strnew_size function in Str.c. This issue may allow an attacker to cause a denial of service through a crafted HTML file. (CVE-2023-38252) An out-of-bounds read flaw was found in w3m, in the growbuf_to_Str function in indep.c. This issue may allow an attacker to cause a denial of service through a crafted HTML file. (CVE-2023-38253) An out-of-bounds write issue has been discovered in the backspace handling of the checkType() function in etc.c within the W3M application. This vulnerability is triggered by supplying a specially crafted HTML file to the w3m binary. Exploitation of this flaw could lead to application crashes, resulting in a denial of service condition. (CVE-2023-4255) References: - https://bugs.mageia.org/show_bug.cgi?id=33027 - https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./message/MKFZQUK7FPWWJQYICDZZ4YWIPUPQ2D3R/ - https://www.cve.org/CVERecord?id=CVE-2023-38252 - https://www.cve.org/CVERecord?id=CVE-2023-38253 - https://www.cve.org/CVERecord?id=CVE-2023-4255 SRPMS: - 9/core/w3m-0.5.3-13.git20230121.1.mga9 . Mageia has released a security patch addressing multiple vulnerabilities in w3m that might lead to service interruptions. Essential updates now available.. w3m Security Update,Mageia Vulnerability Fix,Denial of Service Patch. . LinuxSecurity.com Team

Calendar%202 Apr 01, 2024 Mageia
89
Ls Advisories Fedora Esm H240
Price Tag%201security advisoryfedorasoftware update

Fedora 38: 2024-38c2261ca0 Critical: W3M Out-Of-Bounds Access Issue

Added upstream patch to fix out-of-bounds access due to multiple backspaces to address incomplete fix for CVE-2022-38223 (#2222775, #2222780, #2255207). -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2024-38c2261ca0 2024-03-27 01:36:32.511401 -------------------------------------------------------------------------------- Name : w3m Product : Fedora 38 Version : 0.5.3 Release : 63.git20230121.fc38 URL : Summary : Pager with Web browsing abilities Description : The w3m program is a pager (or text file viewer) that can also be used as a text-mode Web browser. W3m features include the following: when reading an HTML document, you can follow links and view images using an external image viewer; its internet message mode determines the type of document from the header; if the Content-Type field of the document is text/html, the document is displayed as an HTML document; you can change a URL description like ' in plain text into a link to that URL. If you want to display the inline images on w3m, you need to install w3m-img package as well. -------------------------------------------------------------------------------- Update Information: Added upstream patch to fix out-of-bounds access due to multiple backspaces to address incomplete fix for CVE-2022-38223 (#2222775, #2222780, #2255207) -------------------------------------------------------------------------------- ChangeLog: * Mon Mar 18 2024 Robert Scheck - 0.5.3-63.git20230121 - Added upstream patch to fix out-of-bounds access due to multiple backspaces to address incomplete fix for CVE-2022-38223 (#2222775, #2222780, #2255207) * Sat Jan 27 2024 Fedora Release Engineering - 0.5.3-62.git20230121 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Sat Jul 22 2023 Fedora Release Engineering - 0.5.3-61.git20230121 - Rebuilt forhttps://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2222775 - CVE-2023-38252 w3m: Out of bounds read in Strnew_size() at w3m/Str.c https://bugzilla.redhat.com/show_bug.cgi?id=2222775 [ 2 ] Bug #2222779 - CVE-2023-38253 w3m: Out of bounds read in growbuf_to_Str() at w3m/indep.c https://bugzilla.redhat.com/show_bug.cgi?id=2222779 [ 3 ] Bug #2255207 - CVE-2023-4255 w3m: out-of-bounds write in function checkType() in etc.c (incomplete fix for CVE-2022-38223) https://bugzilla.redhat.com/show_bug.cgi?id=2255207 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-38c2261ca0' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ Do not reply to spam, report it: . This latest Firefox update for Linux resolves several critical vulnerabilities, enhancing both security measures and user experience.. Fedora w3m update, out-of-bounds access fix, software security patch. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Mar 27, 2024 •Critical Fedora
Banner 2 1028x280 1708121730 1 1771599631
89
Ls Advisories Fedora Esm H240
Price Tag%201security advisorymoderateupdate

Fedora 39 Update: 2024-3fc66f8bf3 Moderate: W3m Out-Of-Bounds Access

Added upstream patch to fix out-of-bounds access due to multiple backspaces to address incomplete fix for CVE-2022-38223 (#2222775, #2222780, #2255207). -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2024-3fc66f8bf3 2024-03-27 01:25:46.424178 -------------------------------------------------------------------------------- Name : w3m Product : Fedora 39 Version : 0.5.3 Release : 63.git20230121.fc39 URL : Summary : Pager with Web browsing abilities Description : The w3m program is a pager (or text file viewer) that can also be used as a text-mode Web browser. W3m features include the following: when reading an HTML document, you can follow links and view images using an external image viewer; its internet message mode determines the type of document from the header; if the Content-Type field of the document is text/html, the document is displayed as an HTML document; you can change a URL description like ' in plain text into a link to that URL. If you want to display the inline images on w3m, you need to install w3m-img package as well. -------------------------------------------------------------------------------- Update Information: Added upstream patch to fix out-of-bounds access due to multiple backspaces to address incomplete fix for CVE-2022-38223 (#2222775, #2222780, #2255207) -------------------------------------------------------------------------------- ChangeLog: * Mon Mar 18 2024 Robert Scheck - 0.5.3-63.git20230121 - Added upstream patch to fix out-of-bounds access due to multiple backspaces to address incomplete fix for CVE-2022-38223 (#2222775, #2222780, #2255207) * Sat Jan 27 2024 Fedora Release Engineering - 0.5.3-62.git20230121 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2222775 - CVE-2023-38252 w3m: Out of boundsread in Strnew_size() at w3m/Str.c https://bugzilla.redhat.com/show_bug.cgi?id=2222775 [ 2 ] Bug #2222779 - CVE-2023-38253 w3m: Out of bounds read in growbuf_to_Str() at w3m/indep.c https://bugzilla.redhat.com/show_bug.cgi?id=2222779 [ 3 ] Bug #2255207 - CVE-2023-4255 w3m: out-of-bounds write in function checkType() in etc.c (incomplete fix for CVE-2022-38223) https://bugzilla.redhat.com/show_bug.cgi?id=2255207 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-3fc66f8bf3' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ Do not reply to spam, report it: . Fedora 39 release includes enhancements that tackle out-of-bounds vulnerabilities in w3m, incorporating updates from upstream sources to bolster both security measures and overall performance.. Out-Of-Bounds Access,W3m Patch,Fedora Update,Security Fix,Linux Enhancements. . LinuxSecurity.com Team

Calendar%202 Mar 27, 2024 Fedora
89
Ls Advisories Fedora Esm H240
Price Tag%201security advisoryfedorabuffer overflow

Fedora 40 w3m Update: FEDORA-2024-aeb75f8b5b Critical Buffer Overflow

Added upstream patch to fix out-of-bounds access due to multiple backspaces to address incomplete fix for CVE-2022-38223 (#2222775, #2222780, #2255207). -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2024-aeb75f8b5b 2024-03-23 00:20:56.402873 -------------------------------------------------------------------------------- Name : w3m Product : Fedora 40 Version : 0.5.3 Release : 63.git20230121.fc40 URL : https://w3m.sourceforge.net/ Summary : Pager with Web browsing abilities Description : The w3m program is a pager (or text file viewer) that can also be used as a text-mode Web browser. W3m features include the following: when reading an HTML document, you can follow links and view images using an external image viewer; its internet message mode determines the type of document from the header; if the Content-Type field of the document is text/html, the document is displayed as an HTML document; you can change a URL description like ' in plain text into a link to that URL. If you want to display the inline images on w3m, you need to install w3m-img package as well. -------------------------------------------------------------------------------- Update Information: Added upstream patch to fix out-of-bounds access due to multiple backspaces to address incomplete fix for CVE-2022-38223 (#2222775, #2222780, #2255207) -------------------------------------------------------------------------------- ChangeLog: * Mon Mar 18 2024 Robert Scheck - 0.5.3-63.git20230121 - Added upstream patch to fix out-of-bounds access due to multiple backspaces to address incomplete fix for CVE-2022-38223 (#2222775, #2222780, #2255207) -------------------------------------------------------------------------------- References: [ 1 ] Bug #2222775 - CVE-2023-38252 w3m: Out of bounds read in Strnew_size() at w3m/Str.c https://bugzilla.redhat.com/show_bug.cgi?id=2222775 [ 2 ] Bug#2222779 - CVE-2023-38253 w3m: Out of bounds read in growbuf_to_Str() at w3m/indep.c https://bugzilla.redhat.com/show_bug.cgi?id=2222779 [ 3 ] Bug #2255207 - CVE-2023-4255 w3m: out-of-bounds write in function checkType() in etc.c (incomplete fix for CVE-2022-38223) https://bugzilla.redhat.com/show_bug.cgi?id=2255207 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-aeb75f8b5b' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ Do not reply to spam, report it: . The recent upstream patch for Fedora's w3m addresses the critical issue of out-of-bounds access, significantly improving security measures.. w3m Security Patch, Fedora Update, Out of Bounds Access. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Mar 23, 2024 •Critical Fedora
Banner 2 1028x280 1708121730 1 1771599631
172
Ls Advisories Ubuntu Esm H240
Price Tag%201security advisorycriticalDoS

Ubuntu 23.10 USN-6580-1 Critical: w3m Arbitrary Code Execution

w3m could be made to crash or run programs as your login if it opened a malicious website.. ========================================================================== Ubuntu Security Notice USN-6580-1 January 15, 2024 w3m vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 23.10 - Ubuntu 23.04 - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS (Available with Ubuntu Pro) - Ubuntu 14.04 LTS (Available with Ubuntu Pro) Summary: w3m could be made to crash or run programs as your login if it opened a malicious website. Software Description: - w3m: WWW browsable pager with excellent tables/frames support Details: It was discovered that w3m incorrectly handled certain HTML files. An attacker could possibly use this issue to cause a crash or execute arbitrary code. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 23.10: w3m 0.5.3+git20230121-2ubuntu0.23.10.1 Ubuntu 23.04: w3m 0.5.3+git20230121-2ubuntu0.23.04.1 Ubuntu 22.04 LTS: w3m 0.5.3+git20210102-6ubuntu0.2 Ubuntu 20.04 LTS: w3m 0.5.3-37ubuntu0.2 Ubuntu 18.04 LTS (Available with Ubuntu Pro): w3m 0.5.3-36ubuntu0.1+esm1 Ubuntu 14.04 LTS (Available with Ubuntu Pro): w3m 0.5.3-15ubuntu0.2+esm2 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-6580-1 CVE-2023-4255 Package Information: https://launchpad.net/ubuntu/+source/w3m/0.5.3+git20230121-2ubuntu0.23.10.1 . Ubuntu 23.10 USN-6580-1 addresses critical w3m security issue with arbitrary code execution potential.. w3m Security Issue, Ubuntu Update, Code Execution Threat. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Jan 15, 2024 •Critical Ubuntu
100
Ls Advisories Suse Esm H240
Price Tag%201security advisorymoderatethreat

SUSE 12 SP5: 2024:0014-1 moderate: w3m out-of-bounds write

* bsc#1218226 Cross-References: * CVE-2023-4255 . # Security update for w3m Announcement ID: SUSE-SU-2024:0014-1 Rating: moderate References: * bsc#1218226 Cross-References: * CVE-2023-4255 CVSS scores: * CVE-2023-4255 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for w3m fixes the following issues: * CVE-2023-4255: Fixed out-of-bounds write in function checkType() in etc.c (bsc#1218226). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise High Performance Computing 12 SP5 zypper in -t patch SUSE-SLE-SERVER-12-SP5-2024-14=1 * SUSE Linux Enterprise Server 12 SP5 zypper in -t patch SUSE-SLE-SERVER-12-SP5-2024-14=1 * SUSE Linux Enterprise Server for SAP Applications 12 SP5 zypper in -t patch SUSE-SLE-SERVER-12-SP5-2024-14=1 ## Package List: * SUSE Linux Enterprise High Performance Computing 12 SP5 (aarch64 x86_64) * w3m-debuginfo-0.5.3.git20161120-161.9.1 * w3m-0.5.3.git20161120-161.9.1 * w3m-debugsource-0.5.3.git20161120-161.9.1 * SUSE Linux Enterprise Server 12 SP5 (aarch64 ppc64le s390x x86_64) * w3m-debuginfo-0.5.3.git20161120-161.9.1 * w3m-0.5.3.git20161120-161.9.1 * w3m-debugsource-0.5.3.git20161120-161.9.1 * SUSE Linux Enterprise Server for SAP Applications 12 SP5 (ppc64le x86_64) * w3m-debuginfo-0.5.3.git20161120-161.9.1 * w3m-0.5.3.git20161120-161.9.1 * w3m-debugsource-0.5.3.git20161120-161.9.1 ## References: * https://www.suse.com/security/cve/CVE-2023-4255.html * https://bugzilla.suse.com/show_bug.cgi?id=1218226 . An updatefor w3m addresses a critical out-of-bounds write flaw impacting numerous SUSE offerings, classified with a medium-level threat.. SUSE Security Update, w3m Patch, Linux Vulnerability Management, SUSE Enterprise Server. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Jan 02, 2024 •Important SuSE
Banner 2 1028x280 1708121730 1 1771599631
202
Ls Advisories Opensuse Esm H240
Price Tag%201security advisorymoderatedenial of service

openSUSE 2023:4439-1 Moderate: w3m Denial of Service Patch

This update for w3m fixes the following issues: Update to version 0.5.3+git20230121 CVE-2023-38252: Fixed an out-of-bounds write in function Strnew_size that. # Security update for w3m Announcement ID: SUSE-SU-2023:4439-1 Rating: moderate References: * bsc#1213323 * bsc#1213324 Cross-References: * CVE-2023-38252 * CVE-2023-38253 CVSS scores: * CVE-2023-38252 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2023-38253 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: * Basesystem Module 15-SP4 * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves two vulnerabilities can now be installed. ## Description: This update for w3m fixes the following issues: * Update to version 0.5.3+git20230121 * CVE-2023-38252: Fixed an out-of-bounds write in function Strnew_size that allows attackers to cause a denial of service via a crafted HTML file. (bsc#1213324) * CVE-2023-38253: Fixed an out-of-bounds write in function growbuf_to_Str that allows attackers to cause a denial of service via a crafted HTML file. (bsc#1213323) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patchopenSUSE-SLE-15.5-2023-4439=1 * Basesystem Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-4439=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4439=1 * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4439=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * w3m-0.5.3+git20230121-150000.3.6.1 * w3m-debugsource-0.5.3+git20230121-150000.3.6.1 * w3m-inline-image-debuginfo-0.5.3+git20230121-150000.3.6.1 * w3m-inline-image-0.5.3+git20230121-150000.3.6.1 * w3m-debuginfo-0.5.3+git20230121-150000.3.6.1 * Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64) * w3m-0.5.3+git20230121-150000.3.6.1 * w3m-debugsource-0.5.3+git20230121-150000.3.6.1 * w3m-debuginfo-0.5.3+git20230121-150000.3.6.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * w3m-0.5.3+git20230121-150000.3.6.1 * w3m-debugsource-0.5.3+git20230121-150000.3.6.1 * w3m-debuginfo-0.5.3+git20230121-150000.3.6.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * w3m-0.5.3+git20230121-150000.3.6.1 * w3m-debugsource-0.5.3+git20230121-150000.3.6.1 * w3m-inline-image-debuginfo-0.5.3+git20230121-150000.3.6.1 * w3m-inline-image-0.5.3+git20230121-150000.3.6.1 * w3m-debuginfo-0.5.3+git20230121-150000.3.6.1 ## References: * https://www.suse.com/security/cve/CVE-2023-38252.html * https://www.suse.com/security/cve/CVE-2023-38253.html * https://bugzilla.suse.com/show_bug.cgi?id=1213323 * https://bugzilla.suse.com/show_bug.cgi?id=1213324 . A new release for w3m tackles several security vulnerabilities, improving overall reliability and fixing denial of service flaws.. w3m Security Advisory, openSUSE Patch, Denial of Service, Out-of-Bounds Fix. . LinuxSecurity.com Team

Calendar%202 Nov 14, 2023 OpenSUSE
100
Ls Advisories Suse Esm H240
Price Tag%201security advisorymoderateDoS

SUSE: 2023:4439-1 Moderate: w3m Out-Of-Bounds DoS Threat

* bsc#1213323 * bsc#1213324 Cross-References: * CVE-2023-38252 . # Security update for w3m Announcement ID: SUSE-SU-2023:4439-1 Rating: moderate References: * bsc#1213323 * bsc#1213324 Cross-References: * CVE-2023-38252 * CVE-2023-38253 CVSS scores: * CVE-2023-38252 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2023-38253 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: * Basesystem Module 15-SP4 * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves two vulnerabilities can now be installed. ## Description: This update for w3m fixes the following issues: * Update to version 0.5.3+git20230121 * CVE-2023-38252: Fixed an out-of-bounds write in function Strnew_size that allows attackers to cause a denial of service via a crafted HTML file. (bsc#1213324) * CVE-2023-38253: Fixed an out-of-bounds write in function growbuf_to_Str that allows attackers to cause a denial of service via a crafted HTML file. (bsc#1213323) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4439=1 * Basesystem Module 15-SP4 zypper in -t patchSUSE-SLE-Module-Basesystem-15-SP4-2023-4439=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4439=1 * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4439=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * w3m-0.5.3+git20230121-150000.3.6.1 * w3m-debugsource-0.5.3+git20230121-150000.3.6.1 * w3m-inline-image-debuginfo-0.5.3+git20230121-150000.3.6.1 * w3m-inline-image-0.5.3+git20230121-150000.3.6.1 * w3m-debuginfo-0.5.3+git20230121-150000.3.6.1 * Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64) * w3m-0.5.3+git20230121-150000.3.6.1 * w3m-debugsource-0.5.3+git20230121-150000.3.6.1 * w3m-debuginfo-0.5.3+git20230121-150000.3.6.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * w3m-0.5.3+git20230121-150000.3.6.1 * w3m-debugsource-0.5.3+git20230121-150000.3.6.1 * w3m-debuginfo-0.5.3+git20230121-150000.3.6.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * w3m-0.5.3+git20230121-150000.3.6.1 * w3m-debugsource-0.5.3+git20230121-150000.3.6.1 * w3m-inline-image-debuginfo-0.5.3+git20230121-150000.3.6.1 * w3m-inline-image-0.5.3+git20230121-150000.3.6.1 * w3m-debuginfo-0.5.3+git20230121-150000.3.6.1 ## References: * https://www.suse.com/security/cve/CVE-2023-38252.html * https://www.suse.com/security/cve/CVE-2023-38253.html * https://bugzilla.suse.com/show_bug.cgi?id=1213323 * https://bugzilla.suse.com/show_bug.cgi?id=1213324 . The latest w3m update addresses two vulnerabilities that could lead to Denial of Service attacks through specially crafted HTML documents. For further details, check out the SUSE advisory.. SUSE Linux, w3m Update, DoS Threat, Security Patch, Linux Advisory. . LinuxSecurity.com Team

Calendar%202 Nov 14, 2023 SuSE
Banner 2 1028x280 1708121730 1 1771599631
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics