File _patchinfo of Package patchinfo.31354
<patchinfo incident="31354">
<issue tracker="cve" id="2023-38253"/>
<issue tracker="cve" id="2023-38252"/>
<issue tracker="bnc" id="1213324">VUL-0: CVE-2023-38252: w3m: out-of-bounds read in Strnew_size() at w3m/Str.c</issue>
<issue tracker="bnc" id="1213323">VUL-0: CVE-2023-38253: w3m: out-of-bounds read in growbuf_to_Str() at w3m/indep.c</issue>
<packager>tsaupe</packager>
<rating>moderate</rating>
<category>security</category>
<summary>Security update for w3m</summary>
<description>This update for w3m fixes the following issues:
- Update to version 0.5.3+git20230121
- CVE-2023-38252: Fixed an out-of-bounds write in function Strnew_size that allows attackers to cause a denial of service via a crafted HTML file. (bsc#1213324)
- CVE-2023-38253: Fixed an out-of-bounds write in function growbuf_to_Str that allows attackers to cause a denial of service via a crafted HTML file. (bsc#1213323)
</description>
</patchinfo>