<?xml version="1.0" encoding="UTF-8"?>
<!--PATCHINFO id="ff8769e766d1089fd9a64aa5f25ca888"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="2559">
  <id>dbg111-w3m</id>
  <title>w3m security update (CVE-2010-2074) to handle 0 characters in x509 certificates properly.</title>
  <release>openSUSE 11.1 DEBUGINFO</release>
  <issued date="1276726913"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=609451" id="609451" title="bug number 609451" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2074" id="CVE-2010-2074" title="CVE-2010-2074" type="cve"/>
  </references>
  <description>w3m did not handle embedded nul characters in the common
name and in subject alternative names of x509 certificates.
CVE-2010-2074 has been assigned to this issue. This update
also turns on verification of x509 certificates by default
which was not the case before.
</description>
  <pkglist>
    <collection>
        <package name="w3m-debuginfo" arch="i586" version="0.5.2" release="128.7.1">
          <filename>w3m-debuginfo-0.5.2-128.7.1.i586.rpm</filename>
        </package>
        <package name="w3m-debuginfo" arch="ppc" version="0.5.2" release="128.7.1">
          <filename>w3m-debuginfo-0.5.2-128.7.1.ppc.rpm</filename>
        </package>
        <package name="w3m-debuginfo" arch="x86_64" version="0.5.2" release="128.7.1">
          <filename>w3m-debuginfo-0.5.2-128.7.1.x86_64.rpm</filename>
        </package>
        <package name="w3m-debugsource" arch="i586" version="0.5.2" release="128.7.1">
          <filename>w3m-debugsource-0.5.2-128.7.1.i586.rpm</filename>
        </package>
        <package name="w3m-debugsource" arch="ppc" version="0.5.2" release="128.7.1">
          <filename>w3m-debugsource-0.5.2-128.7.1.ppc.rpm</filename>
        </package>
        <package name="w3m-debugsource" arch="x86_64" version="0.5.2" release="128.7.1">
          <filename>w3m-debugsource-0.5.2-128.7.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
