[DSA 5953-1] catdoc security update

Salvatore Bonaccorso <[email protected]>
Newsgroups gmane.linux.debian.user.security.announce
Message-ID <[email protected]>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian Security Advisory DSA-5953-1                   [email protected]
https://www.debian.org/security/                     Salvatore Bonaccorso
June 29, 2025                         https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : catdoc
CVE ID         : CVE-2024-48877 CVE-2024-52035 CVE-2024-54028
Debian Bug     : 1107168

Several vulnerabilities were discovered in catdoc, a text extractor for
MS-Office files, which may result in denial of service or the execution
of arbitrary code if a specially crafted file is processed.

For the stable distribution (bookworm), these problems have been fixed
in version 1:0.95-6~deb12u1.

We recommend that you upgrade your catdoc packages.

For the detailed security status of catdoc please refer to its security
tracker page at:
https://security-tracker.debian.org/tracker/catdoc

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: [email protected]
-----BEGIN PGP SIGNATURE-----
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=jg5L
-----END PGP SIGNATURE-----
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.