Fedora 27: libextractor Security Advisory - Critical NULL Pointer and DoS

libextractor is a simple library for keyword extraction. libextractor

does not support all formats but supports a simple plugging mechanism

such that you can quickly add extractors for additional formats, even

without recompiling libextractor. libextractor typically ships with a

dozen helper-libraries that can be used to obtain keywords from common

file-types.

libextractor is a part of the GNU project ().

1.6, multiple security fixes.

[ 1 ] Bug #1501695 - NULL Pointer Dereference vulneribility in libextractor EXTRACTOR_nsf_extract_method

https://bugzilla.redhat.com/show_bug.cgi?id=1501695

[ 2 ] Bug #1499600 - NULL Pointer Dereference vulneribility in libextract when get flac meta from libFlac

https://bugzilla.redhat.com/show_bug.cgi?id=1499600

[ 3 ] Bug #1499599 - libextract Divide-By-Zero Denial of Service Vulnerability

https://bugzilla.redhat.com/show_bug.cgi?id=1499599

[ 4 ] Bug #1504389 - libextractor-1.6 is available

https://bugzilla.redhat.com/show_bug.cgi?id=1504389

su -c 'dnf upgrade libextractor' at the command line.

For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org