Fedora 30 : 1:ytnef (2019-7d7083b8be)

ytnef 1.9.3 release, fixing a number of security issues : - CVE-2017-9470 - CVE-2017-9471 - CVE-2017-9474 - CVE-2017-9058 - CVE-2017-12142 - CVE-2017-12141 - CVE-2017-12144 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system...

DEBIAN-CVE-2017-12142

In ytnef 1.9.2, an invalid memory read vulnerability was found in the function SwapDWord in ytnef.c, which allows attackers to cause a denial of service via a crafted file...

CVE-2017-12142

CVE-2017-12142 affects ytnef 1.9.2, where an invalid memory read in SwapDWord (ytnef.c) allows a crafted file to cause a denial of service. The issue is documented across multiple sources (OSV, NVD, Nessus/NASL feeds) with Fedora’s update stream indicating ytnef-1.9.3 includes the fix. Remediatio...