Stay Secure with the Latest Linux Advisories

security advisoryFedoracritical fix

Fedora 27: FEDORA-2017-8489b17872 Critical: tnef Integer Underflow

Update to 1.4.15. Fixes CVE-2017-8911. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2017-8489b17872 2017-10-17 00:11:41.917162 --------------------------------------------------------------------------------Name : tnef Product : Fedora 27 Version : 1.4.15 Release : 1.fc27 URL : https://github.com/verdammelt/tnef Summary : Extract files from email attachments like WINMAIL.DAT Description : This application provides a way to unpack Microsoft MS-TNEF MIME attachments. It operates like tar in order to unpack files of type "application/ms-tnef", which may have been placed into the MS-TNEF attachment instead of being attached separately. Such files may have attachment names similar to WINMAIL.DAT --------------------------------------------------------------------------------Update Information: Update to 1.4.15. Fixes CVE-2017-8911 --------------------------------------------------------------------------------References: [ 1 ] Bug #1427435 - CVE-2017-6307 CVE-2017-6308 CVE-2017-6309 CVE-2017-6310 tnef: Multiple vulnerabilities fixed in 1.4.13 [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1427435 [ 2 ] Bug #1451259 - CVE-2017-8911 tnef: Integer underflow in unicode_to_utf8 [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1451259 [ 3 ] Bug #1451258 - CVE-2017-8911 tnef: Integer underflow in unicode_to_utf8 [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1451258 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade tnef' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. . Fedora 28 tnef upgrade to 1.4.16 fixes CVE-2018-xxxx, eliminating severe buffer overflow vulnerability.. Fedora 27 Security,tnef Update,Critical Security Fix,Integer Underflow. . Severity: Critical. LinuxSecurity.com Team

Oct 17, 2017 •Critical Fedora