{"affected":[{"ecosystem_specific":{"binaries":[{"w3m":"0.5.3.git20161120-4.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Server 11 SP4","name":"w3m","purl":"pkg:rpm/suse/w3m&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"0.5.3.git20161120-4.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"w3m":"0.5.3.git20161120-4.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","name":"w3m","purl":"pkg:rpm/suse/w3m&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2011%20SP4"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"0.5.3.git20161120-4.1"}],"type":"ECOSYSTEM"}]}],"aliases":[],"details":"\nThis update for w3m fixes the following issues:\n\n- update to debian git version (bsc#1011293)\n  addressed security issues:\n         CVE-2016-9621: w3m: global-buffer-overflow write (bsc#1012020)\n         CVE-2016-9622: w3m: null deref (bsc#1012021)\n         CVE-2016-9623: w3m: null deref (bsc#1012022)\n         CVE-2016-9624: w3m: near-null deref (bsc#1012023)\n         CVE-2016-9625: w3m: stack overflow (bsc#1012024)\n         CVE-2016-9626: w3m: stack overflow (bsc#1012025)\n         CVE-2016-9627: w3m: heap overflow read + deref (bsc#1012026)\n         CVE-2016-9628: w3m: null deref (bsc#1012027)\n         CVE-2016-9629: w3m: null deref (bsc#1012028)\n         CVE-2016-9630: w3m: global-buffer-overflow read (bsc#1012029)\n         CVE-2016-9631: w3m: null deref (bsc#1012030)\n         CVE-2016-9632: w3m: global-buffer-overflow read (bsc#1012031)\n         CVE-2016-9633: w3m: OOM (bsc#1012032)\n         CVE-2016-9434: w3m: null deref (bsc#1011283)\n         CVE-2016-9435: w3m: use uninit value (bsc#1011284)\n         CVE-2016-9436: w3m: use uninit value (bsc#1011285)\n         CVE-2016-9437: w3m: write to rodata (bsc#1011286)\n         CVE-2016-9438: w3m: null deref (bsc#1011287)\n         CVE-2016-9439: w3m: stack overflow (bsc#1011288)\n         CVE-2016-9440: w3m: near-null deref (bsc#1011289)\n         CVE-2016-9441: w3m: near-null deref (bsc#1011290)\n         CVE-2016-9442: w3m: potential heap buffer corruption (bsc#1011291)\n         CVE-2016-9443: w3m: null deref (bsc#1011292)\n","id":"SUSE-SU-2016:3046-1","modified":"2016-12-07T15:45:29Z","published":"2016-12-07T15:45:29Z","references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2016/suse-su-20163046-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1011269"},{"type":"REPORT","url":"https://bugzilla.suse.com/1011270"},{"type":"REPORT","url":"https://bugzilla.suse.com/1011271"},{"type":"REPORT","url":"https://bugzilla.suse.com/1011272"},{"type":"REPORT","url":"https://bugzilla.suse.com/1011283"},{"type":"REPORT","url":"https://bugzilla.suse.com/1011284"},{"type":"REPORT","url":"https://bugzilla.suse.com/1011285"},{"type":"REPORT","url":"https://bugzilla.suse.com/1011286"},{"type":"REPORT","url":"https://bugzilla.suse.com/1011287"},{"type":"REPORT","url":"https://bugzilla.suse.com/1011288"},{"type":"REPORT","url":"https://bugzilla.suse.com/1011289"},{"type":"REPORT","url":"https://bugzilla.suse.com/1011290"},{"type":"REPORT","url":"https://bugzilla.suse.com/1011291"},{"type":"REPORT","url":"https://bugzilla.suse.com/1011292"},{"type":"REPORT","url":"https://bugzilla.suse.com/1011293"},{"type":"REPORT","url":"https://bugzilla.suse.com/1012020"},{"type":"REPORT","url":"https://bugzilla.suse.com/1012021"},{"type":"REPORT","url":"https://bugzilla.suse.com/1012022"},{"type":"REPORT","url":"https://bugzilla.suse.com/1012023"},{"type":"REPORT","url":"https://bugzilla.suse.com/1012024"},{"type":"REPORT","url":"https://bugzilla.suse.com/1012025"},{"type":"REPORT","url":"https://bugzilla.suse.com/1012026"},{"type":"REPORT","url":"https://bugzilla.suse.com/1012027"},{"type":"REPORT","url":"https://bugzilla.suse.com/1012028"},{"type":"REPORT","url":"https://bugzilla.suse.com/1012029"},{"type":"REPORT","url":"https://bugzilla.suse.com/1012030"},{"type":"REPORT","url":"https://bugzilla.suse.com/1012031"},{"type":"REPORT","url":"https://bugzilla.suse.com/1012032"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2010-2074"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-9422"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-9423"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-9424"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-9425"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-9434"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-9435"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-9436"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-9437"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-9438"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-9439"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-9440"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-9441"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-9442"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-9443"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-9621"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-9622"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-9623"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-9624"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-9625"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-9626"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-9627"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-9628"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-9629"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-9630"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-9631"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-9632"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-9633"}],"related":["CVE-2010-2074","CVE-2016-9422","CVE-2016-9423","CVE-2016-9424","CVE-2016-9425","CVE-2016-9434","CVE-2016-9435","CVE-2016-9436","CVE-2016-9437","CVE-2016-9438","CVE-2016-9439","CVE-2016-9440","CVE-2016-9441","CVE-2016-9442","CVE-2016-9443","CVE-2016-9621","CVE-2016-9622","CVE-2016-9623","CVE-2016-9624","CVE-2016-9625","CVE-2016-9626","CVE-2016-9627","CVE-2016-9628","CVE-2016-9629","CVE-2016-9630","CVE-2016-9631","CVE-2016-9632","CVE-2016-9633"],"summary":"Security update for w3m","upstream":["CVE-2010-2074","CVE-2016-9422","CVE-2016-9423","CVE-2016-9424","CVE-2016-9425","CVE-2016-9434","CVE-2016-9435","CVE-2016-9436","CVE-2016-9437","CVE-2016-9438","CVE-2016-9439","CVE-2016-9440","CVE-2016-9441","CVE-2016-9442","CVE-2016-9443","CVE-2016-9621","CVE-2016-9622","CVE-2016-9623","CVE-2016-9624","CVE-2016-9625","CVE-2016-9626","CVE-2016-9627","CVE-2016-9628","CVE-2016-9629","CVE-2016-9630","CVE-2016-9631","CVE-2016-9632","CVE-2016-9633"]}