it-securitynotifies AT lists.piratenpartei.de
Betreff: Sicherheitsankündigungen
Listenarchiv
- From: Salvatore Bonaccorso <carnil AT debian.org>
- To: debian-security-announce AT lists.debian.org
- Subject: [IT-SecNots] [SECURITY] [DSA 5953-1] catdoc security update
- Date: Sun, 29 Jun 2025 18:56:27 +0000
- Authentication-results: lists.piratenpartei.de; dkim=none; spf=none (lists.piratenpartei.de: domain of "bounce-debian-security-announce=it-securitynotifies=lists.piratenpartei.de AT lists.debian.org" has no SPF policy when checking 2001:41b8:202:deb:216:36ff:fe40:4002) smtp.mailfrom="bounce-debian-security-announce=it-securitynotifies=lists.piratenpartei.de AT lists.debian.org"; dmarc=none
- List-archive: https://lists.debian.org/msgid-search/E1uVxCV-004gwh-1t AT seger.debian.org
- List-id: <debian-security-announce.lists.debian.org>
- List-url: <http://lists.debian.org/debian-security-announce/>
- Old-dkim-signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=debian.org; s=smtpauto.seger; h=Date:Message-Id:Subject:To:From:Reply-To:Cc:MIME-Version: Content-Type:Content-Transfer-Encoding:Content-ID:Content-Description: In-Reply-To:References; bh=YoOU15k+kGewyiAwywBL98uASQsAy/0p5mDn5WpkKmk=; b=fs Mc19jXzT/uy7fcvsoF0ql/2vPllnaL5B2XttP6vDF94sfEW2GrvB8vMSmtS061Ph7/8iaMG66RqYI ph1B6PgnDS9luV7gXd/L0DzqZflGc8G9RfQ0gRQOOT2AASUKbE5Eo6JVodX2MeF37rjcs/lYJomma oF+QRILf7hn+LN0yHf+4EHiKnqKXTLbLVck+kwbPKG3T2EHmNi9+la22FvVEBEwRfz4kXFYv3hFAY z4PJ36637xemxq6YEYjC+NX6iwcghCFwU8hAdz1AOYY2Cs4R/zjv0SJB63X5YZQa3F8z8eE75WxSa 1hKVOrHnI6n2J/9zHORPmb25XDdFGGng==;
- Old-return-path: <carnil AT seger.debian.org>
- Priority: urgent
- Resent-date: Sun, 29 Jun 2025 18:56:51 +0000 (UTC)
- Resent-from: debian-security-announce AT lists.debian.org
- Resent-message-id: <jzZT1RYw-VM.A.hEvH.zxYYoB@bendel>
- Resent-sender: debian-security-announce-request AT lists.debian.org
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
- -------------------------------------------------------------------------
Debian Security Advisory DSA-5953-1 security AT debian.org
https://www.debian.org/security/ Salvatore Bonaccorso
June 29, 2025 https://www.debian.org/security/faq
- -------------------------------------------------------------------------
Package : catdoc
CVE ID : CVE-2024-48877 CVE-2024-52035 CVE-2024-54028
Debian Bug : 1107168
Several vulnerabilities were discovered in catdoc, a text extractor for
MS-Office files, which may result in denial of service or the execution
of arbitrary code if a specially crafted file is processed.
For the stable distribution (bookworm), these problems have been fixed
in version 1:0.95-6~deb12u1.
We recommend that you upgrade your catdoc packages.
For the detailed security status of catdoc please refer to its security
tracker page at:
https://security-tracker.debian.org/tracker/catdoc
Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/
Mailing list: debian-security-announce AT lists.debian.org
-----BEGIN PGP SIGNATURE-----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=jg5L
-----END PGP SIGNATURE-----
- [IT-SecNots] [SECURITY] [DSA 5953-1] catdoc security update, Salvatore Bonaccorso, 29.06.2025
Archiv bereitgestellt durch MHonArc 2.6.19+.