Mageia alert MGASA-2017-0240 (catdoc)

From:
    	     
 
Mageia Updates <buildsystem-daemon@mageia.org> 
To:
    	     
 
updates-announce@ml.mageia.org 
Subject:
    	     
 
[updates-announce] MGASA-2017-0240: Updated catdoc package fixes security vulnerability 
Date:
    	     
 
Thu, 3 Aug 2017 21:06:25 +0200
Message-ID:
    	     
 
<20170803190625.EA6EE9F875@duvel.mageia.org>
MGASA-2017-0240 - Updated catdoc package fixes security vulnerability

Publication date: 03 Aug 2017
URL: http://advisories.mageia.org/MGASA-2017-0240.html
Type: security
Affected Mageia releases: 5, 6
CVE: CVE-2017-11110

Description:
Attackers may have used specially crafted files to cause a denial of service
through a heap-based buffer under-flow and application crash, or have
unspecified other impact (CVE-2017-11110).

References:
- https://bugs.mageia.org/show_bug.cgi?id=21302
- https://lists.opensuse.org/opensuse-updates/2017-07/msg00...
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11110

SRPMS:
- 5/core/catdoc-0.95-1.1.mga5
- 6/core/catdoc-0.95-1.1.mga6