Ubuntu: Security Advisory (USN-4615-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-4615-1: Yerase's TNEF vulnerabilities

It was discovered that Yerase's TNEF had null pointer dereferences, infinite loop, buffer overflow, out of bounds reads, directory traversal issues and other vulnerabilities. An attacker could use those issues to cause a crash and consequently a denial of service. CVE-2017-6298, CVE-2017-6299,...

CVE-2017-6306

The CVE-2017-6306 issue concerns ytnef/libytnef prior to version 1.9.1 with a directory traversal vulnerability in the SanitizeFilename function (settings.c). Connected advisories confirm this CVE is addressed in later releases: Fedora 30 updated ytnef to 1.9.3; Mageia reports updated libytnef pa...