{"schemaVersion":3,"id":"SUSE-SU-2016:3053-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Security update for w3m\n\n\nThis update for w3m fixes the following issues:\n\n- update to debian git version (bsc#1011293)\n  addressed security issues:\n         CVE-2016-9622: w3m: null deref (bsc#1012021)\n         CVE-2016-9623: w3m: null deref (bsc#1012022)\n         CVE-2016-9624: w3m: near-null deref (bsc#1012023)\n         CVE-2016-9625: w3m: stack overflow (bsc#1012024)\n         CVE-2016-9626: w3m: stack overflow (bsc#1012025)\n         CVE-2016-9627: w3m: heap overflow read + deref (bsc#1012026)\n         CVE-2016-9628: w3m: null deref (bsc#1012027)\n         CVE-2016-9629: w3m: null deref (bsc#1012028)\n         CVE-2016-9630: w3m: global-buffer-overflow read (bsc#1012029)\n         CVE-2016-9631: w3m: null deref (bsc#1012030)\n         CVE-2016-9632: w3m: global-buffer-overflow read (bsc#1012031)\n         CVE-2016-9633: w3m: OOM (bsc#1012032)\n         CVE-2016-9434: w3m: null deref (bsc#1011283)\n         CVE-2016-9435: w3m: use uninit value (bsc#1011284)\n         CVE-2016-9436: w3m: use uninit value (bsc#1011285)\n         CVE-2016-9437: w3m: write to rodata (bsc#1011286)\n         CVE-2016-9438: w3m: null deref (bsc#1011287)\n         CVE-2016-9439: w3m: stack overflow (bsc#1011288)\n         CVE-2016-9440: w3m: near-null deref (bsc#1011289)\n         CVE-2016-9441: w3m: near-null deref (bsc#1011290)\n         CVE-2016-9442: w3m: potential heap buffer corruption (bsc#1011291)\n         CVE-2016-9443: w3m: null deref (bsc#1011292)","dates":{"published":"2016-12-08T10:06:04.000Z","modified":"2026-02-04T03:49:57.595Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"suse","product":"w3m&distro=SUSE Linux Enterprise Desktop 12 SP1","name":"w3m","label":"w3m&distro=SUSE Linux Enterprise Desktop 12 SP1","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/w3m&distro=SUSE Linux Enterprise Desktop 12 SP1","purlType":"rpm","versions":[{"text":"< 0.5.3.git20161120-160.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.5.3.git20161120-160.1","eol":null,"hubHref":null},{"vendor":"suse","product":"w3m&distro=SUSE Linux Enterprise Desktop 12 SP2","name":"w3m","label":"w3m&distro=SUSE Linux Enterprise Desktop 12 SP2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/w3m&distro=SUSE Linux Enterprise Desktop 12 SP2","purlType":"rpm","versions":[{"text":"< 0.5.3.git20161120-160.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.5.3.git20161120-160.1","eol":null,"hubHref":null},{"vendor":"suse","product":"w3m&distro=SUSE Linux Enterprise Server 12 SP1","name":"w3m","label":"w3m&distro=SUSE Linux Enterprise Server 12 SP1","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/w3m&distro=SUSE Linux Enterprise Server 12 SP1","purlType":"rpm","versions":[{"text":"< 0.5.3.git20161120-160.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.5.3.git20161120-160.1","eol":null,"hubHref":null},{"vendor":"suse","product":"w3m&distro=SUSE Linux Enterprise Server 12 SP2","name":"w3m","label":"w3m&distro=SUSE Linux Enterprise Server 12 SP2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/w3m&distro=SUSE Linux Enterprise Server 12 SP2","purlType":"rpm","versions":[{"text":"< 0.5.3.git20161120-160.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.5.3.git20161120-160.1","eol":null,"hubHref":null},{"vendor":"suse","product":"w3m&distro=SUSE Linux Enterprise Server for Raspberry Pi 12 SP2","name":"w3m","label":"w3m&distro=SUSE Linux Enterprise Server for Raspberry Pi 12 SP2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/w3m&distro=SUSE Linux Enterprise Server for Raspberry Pi 12 SP2","purlType":"rpm","versions":[{"text":"< 0.5.3.git20161120-160.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.5.3.git20161120-160.1","eol":null,"hubHref":null},{"vendor":"suse","product":"w3m&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP1","name":"w3m","label":"w3m&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP1","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/w3m&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP1","purlType":"rpm","versions":[{"text":"< 0.5.3.git20161120-160.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.5.3.git20161120-160.1","eol":null,"hubHref":null},{"vendor":"suse","product":"w3m&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP2","name":"w3m","label":"w3m&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/w3m&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP2","purlType":"rpm","versions":[{"text":"< 0.5.3.git20161120-160.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.5.3.git20161120-160.1","eol":null,"hubHref":null}],"affectedCount":7,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20163053-1/","label":"www.suse.com/support/update/announcement/2016/suse-su-20163053-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1011283","label":"bugzilla.suse.com/1011283","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1011284","label":"bugzilla.suse.com/1011284","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1011285","label":"bugzilla.suse.com/1011285","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1011286","label":"bugzilla.suse.com/1011286","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1011287","label":"bugzilla.suse.com/1011287","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1011288","label":"bugzilla.suse.com/1011288","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1011289","label":"bugzilla.suse.com/1011289","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1011290","label":"bugzilla.suse.com/1011290","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1011291","label":"bugzilla.suse.com/1011291","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1011292","label":"bugzilla.suse.com/1011292","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1011293","label":"bugzilla.suse.com/1011293","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1012021","label":"bugzilla.suse.com/1012021","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1012022","label":"bugzilla.suse.com/1012022","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1012023","label":"bugzilla.suse.com/1012023","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1012024","label":"bugzilla.suse.com/1012024","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1012025","label":"bugzilla.suse.com/1012025","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1012026","label":"bugzilla.suse.com/1012026","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1012027","label":"bugzilla.suse.com/1012027","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1012028","label":"bugzilla.suse.com/1012028","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1012029","label":"bugzilla.suse.com/1012029","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1012030","label":"bugzilla.suse.com/1012030","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1012031","label":"bugzilla.suse.com/1012031","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1012032","label":"bugzilla.suse.com/1012032","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9434","label":"www.suse.com/security/cve/CVE-2016-9434","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9435","label":"www.suse.com/security/cve/CVE-2016-9435","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9436","label":"www.suse.com/security/cve/CVE-2016-9436","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9437","label":"www.suse.com/security/cve/CVE-2016-9437","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9438","label":"www.suse.com/security/cve/CVE-2016-9438","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9439","label":"www.suse.com/security/cve/CVE-2016-9439","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9440","label":"www.suse.com/security/cve/CVE-2016-9440","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9441","label":"www.suse.com/security/cve/CVE-2016-9441","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9442","label":"www.suse.com/security/cve/CVE-2016-9442","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9443","label":"www.suse.com/security/cve/CVE-2016-9443","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9621","label":"www.suse.com/security/cve/CVE-2016-9621","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9622","label":"www.suse.com/security/cve/CVE-2016-9622","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9623","label":"www.suse.com/security/cve/CVE-2016-9623","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9624","label":"www.suse.com/security/cve/CVE-2016-9624","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9625","label":"www.suse.com/security/cve/CVE-2016-9625","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9626","label":"www.suse.com/security/cve/CVE-2016-9626","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9627","label":"www.suse.com/security/cve/CVE-2016-9627","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9628","label":"www.suse.com/security/cve/CVE-2016-9628","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9629","label":"www.suse.com/security/cve/CVE-2016-9629","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9630","label":"www.suse.com/security/cve/CVE-2016-9630","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9631","label":"www.suse.com/security/cve/CVE-2016-9631","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9632","label":"www.suse.com/security/cve/CVE-2016-9632","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9633","label":"www.suse.com/security/cve/CVE-2016-9633","hostname":"www.suse.com","tags":["WEB"]}],"lineage":{"upstream":["CVE-2016-9434","CVE-2016-9435","CVE-2016-9436","CVE-2016-9437","CVE-2016-9438","CVE-2016-9439","CVE-2016-9440","CVE-2016-9441","CVE-2016-9442","CVE-2016-9443","CVE-2016-9621","CVE-2016-9622","CVE-2016-9623","CVE-2016-9624","CVE-2016-9625","CVE-2016-9626","CVE-2016-9627","CVE-2016-9628","CVE-2016-9629","CVE-2016-9630","CVE-2016-9631","CVE-2016-9632","CVE-2016-9633"],"downstream":[],"duplicates":[],"related":["CVE-2016-9434","CVE-2016-9435","CVE-2016-9436","CVE-2016-9437","CVE-2016-9438","CVE-2016-9439","CVE-2016-9440","CVE-2016-9441","CVE-2016-9442","CVE-2016-9443","CVE-2016-9621","CVE-2016-9622","CVE-2016-9623","CVE-2016-9624","CVE-2016-9625","CVE-2016-9626","CVE-2016-9627","CVE-2016-9628","CVE-2016-9629","CVE-2016-9630","CVE-2016-9631","CVE-2016-9632","CVE-2016-9633"]},"timeline":[{"kind":"published","date":"2016-12-08T10:06:04.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-02-04T03:49:57.595Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T17:28:12.095Z","stale":false,"partial":false}}