Fedora 27: libextractor Security Update

November 11, 2017

1.6, multiple security fixes.

Summary

libextractor is a simple library for keyword extraction. libextractor

does not support all formats but supports a simple plugging mechanism

such that you can quickly add extractors for additional formats, even

without recompiling libextractor. libextractor typically ships with a

dozen helper-libraries that can be used to obtain keywords from common

file-types.

libextractor is a part of the GNU project (http://www.gnu.org/).

1.6, multiple security fixes.

[ 1 ] Bug #1501695 - NULL Pointer Dereference vulneribility in libextractor EXTRACTOR_nsf_extract_method

https://bugzilla.redhat.com/show_bug.cgi?id=1501695

[ 2 ] Bug #1499600 - NULL Pointer Dereference vulneribility in libextract when get flac meta from libFlac

https://bugzilla.redhat.com/show_bug.cgi?id=1499600

[ 3 ] Bug #1499599 - libextract Divide-By-Zero Denial of Service Vulnerability

https://bugzilla.redhat.com/show_bug.cgi?id=1499599

[ 4 ] Bug #1504389 - libextractor-1.6 is available

https://bugzilla.redhat.com/show_bug.cgi?id=1504389

su -c 'dnf upgrade libextractor' at the command line.

For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

FEDORA-2017-611d7cc98b 2017-11-11 13:29:22.446877 Product : Fedora 27 Version : 1.6 Release : 1.fc27 URL : http://www.gnu.org/software/libextractor/ Summary : Simple library for keyword extraction Description : libextractor is a simple library for keyword extraction. libextractor does not support all formats but supports a simple plugging mechanism such that you can quickly add extractors for additional formats, even without recompiling libextractor. libextractor typically ships with a dozen helper-libraries that can be used to obtain keywords from common file-types. libextractor is a part of the GNU project (http://www.gnu.org/). 1.6, multiple security fixes. [ 1 ] Bug #1501695 - NULL Pointer Dereference vulneribility in libextractor EXTRACTOR_nsf_extract_method https://bugzilla.redhat.com/show_bug.cgi?id=1501695 [ 2 ] Bug #1499600 - NULL Pointer Dereference vulneribility in libextract when get flac meta from libFlac https://bugzilla.redhat.com/show_bug.cgi?id=1499600 [ 3 ] Bug #1499599 - libextract Divide-By-Zero Denial of Service Vulnerability https://bugzilla.redhat.com/show_bug.cgi?id=1499599 [ 4 ] Bug #1504389 - libextractor-1.6 is available https://bugzilla.redhat.com/show_bug.cgi?id=1504389 su -c 'dnf upgrade libextractor' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ package-announce mailing list -- package-announce@lists.fedoraproject.org To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org