Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 496
Alerts This Week
Warning Icon 1 496

Debian: DSA-5231-1 Urgent: Libxml2 Denial of Service Vulnerability

debian
Calendar Grey February 9, 2015
Scroller Debian
Important notice regarding unrtf from Debian concerning potential execution vulnerabilities and service disruption problems.
Michal Zalewski and Hanno Boeck discovered several vulnerabilities in unrtf, a RTF to other formats converter, leading to a denial of service (application crash) or, potentially, t...

Summary

For the stable distribution (wheezy), these problems have been fixed in
version 0.21.5-3~deb7u1. This update is based on a new upstream version
of unrtf including additional bug fixes, new features and incompatible
changes (especially PostScript support is dropped).

For the upcoming stable distribution (jessie) and the unstable
distribution (sid), these problems have been fixed in version 0.21.5-2.

We recommend that you upgrade your unrtf packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/



Severity
critical
Lowest
Low
Medium
High
Critical

Package: unrtf
CVE ID: CVE-2014-9274 CVE-2014-9275

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.