Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.announce.security > #4515

[SECURITY] [DSA 5953-1] catdoc security update

Show all headers | View raw

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian Security Advisory DSA-5953-1                   security@debian.org
https://www.debian.org/security/                     Salvatore Bonaccorso
June 29, 2025                         https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : catdoc
CVE ID         : CVE-2024-48877 CVE-2024-52035 CVE-2024-54028
Debian Bug     : 1107168

Several vulnerabilities were discovered in catdoc, a text extractor for
MS-Office files, which may result in denial of service or the execution
of arbitrary code if a specially crafted file is processed.

For the stable distribution (bookworm), these problems have been fixed
in version 1:0.95-6~deb12u1.

We recommend that you upgrade your catdoc packages.

For the detailed security status of catdoc please refer to its security
tracker page at:
https://security-tracker.debian.org/tracker/catdoc

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: debian-security-announce@lists.debian.org
-----BEGIN PGP SIGNATURE-----
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=jg5L
-----END PGP SIGNATURE-----

Back to linux.debian.announce.security | Previous | Next | Find similar | Unroll thread

Thread

[SECURITY] [DSA 5953-1] catdoc security update Salvatore Bonaccorso <carnil@debian.org> - 2025-06-29 21:00 +0200

csiph-web