Wiki » Support/Advisories/MGASA-2012-0201

MGASA-2012-0201

Date:	August 6th, 2012
Affected releases:	1, 2

Description:
Updated libytnef package fixes security vulnerability:

Function DecompressRTF() in libytnef 1.5 leads to a buffer overflow
on certain TNEF files (presumably, on files, generated by some recent
versions of MS software).

Updated Packages:
Mageia 1:
lib(64)ytnef0-1.5-5.5.mga1
lib(64)ytnef-devel-1.5-5.5.mga1

Mageia 2:
lib(64)ytnef0-1.5-5.5.mga2
lib(64)ytnef-devel-1.5-5.5.mga2

References:
http://sourceforge.net/tracker/?func=detail&aid=2949686&group_id=70352&atid=527487
http://lists.fedoraproject.org/pipermail/package-announce/2012-July/083853.html
https://bugs.mageia.org/show_bug.cgi?id=6881