openSUSE Security Update : catdoc (openSUSE-2017-669)

medium Nessus Plugin ID 100714

Language:

Synopsis

The remote openSUSE host is missing a security update.

Description

catdoc was updated to version 0.95 to fix the following issues :

- Fix various issues found during fuzzing which may lead to an application crash or have unspecified further impact when the user is tricked into opening specially crafted files (boo#919228)

- Replace charset tables with new ones, published by Unicode Consortium with more permissive license

- Fix lot of segfaults on incorrect or corrupted data

Solution

Update the affected catdoc packages.

See Also

https://bugzilla.opensuse.org/show_bug.cgi?id=919228

Plugin Details

Severity: Medium

ID: 100714

File Name: openSUSE-2017-669.nasl

Version: 3.3

Type: local

Agent: unix

Published: 6/9/2017

Updated: 1/19/2021

Supported Sensors: Frictionless Assessment AWS, Frictionless Assessment Azure, Frictionless Assessment Agent, Nessus Agent, Nessus

Vulnerability Information

CPE: p-cpe:/a:novell:opensuse:catdoc, p-cpe:/a:novell:opensuse:catdoc-debuginfo, p-cpe:/a:novell:opensuse:catdoc-debugsource, cpe:/o:novell:opensuse:42.2

Required KB Items: Host/local_checks_enabled, Host/cpu, Host/SuSE/release, Host/SuSE/rpm-list

Patch Publication Date: 6/9/2017