[Secure-testing-commits] r46309 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2016-11-18 08:41:12 +0000 (Fri, 18 Nov 2016)
New Revision: 46309

Modified:
   data/CVE/list
Log:
Add second batch of w3m issues

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-11-18 08:34:28 UTC (rev 46308)
+++ data/CVE/list	2016-11-18 08:41:12 UTC (rev 46309)
@@ -26,6 +26,35 @@
 	[jessie] - drupal7 7.32-1+deb8u8
 	NOTE: Workaround entry for DSA-3718-1 until CVE is assigned
 	NOTE: https://www.drupal.org/SA-CORE-2016-005
+CVE-2016-9443
+	- w3m <unfixed>
+	NOTE: https://github.com/tats/w3m/issues/28
+CVE-2016-9442
+	- w3m <unfixed>
+	NOTE: https://github.com/tats/w3m/commit/d43527cfa0dbb3ccefec4a6f7b32c1434739aa29
+CVE-2016-9441
+	- w3m <unfixed>
+	NOTE: https://github.com/tats/w3m/issues/24
+CVE-2016-9440
+	- w3m <unfixed>
+	NOTE: https://github.com/tats/w3m/issues/22
+CVE-2016-9439
+	- w3m <unfixed>
+	NOTE: https://github.com/tats/w3m/issues/20
+CVE-2016-9438
+	- w3m <unfixed>
+	NOTE: https://github.com/tats/w3m/issues/18
+CVE-2016-9437
+	- w3m <unfixed>
+	NOTE: https://github.com/tats/w3m/issues/17
+CVE-2016-9436 [problem fixed by the new "tagname[0] = '\0'" line in parsetagx.c]
+	- w3m <unfixed>
+	NOTE: https://github.com/tats/w3m/issues/16
+	NOTE: Fixed by: https://github.com/tats/w3m/commit/33509cc81ec5f2ba44eb6fd98bd5c1b5873e46bd
+CVE-2016-9435 [for the problem fixed by the new conditional PUSH_ENV(HTML_DL) call in file.c]
+	- w3m <unfixed>
+	NOTE: https://github.com/tats/w3m/issues/16
+	NOTE: Fixed by: https://github.com/tats/w3m/commit/33509cc81ec5f2ba44eb6fd98bd5c1b5873e46bd
 CVE-2016-9434
 	- w3m <unfixed>
 	NOTE: https://github.com/tats/w3m/issues/15