Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
381a0874 by Salvatore Bonaccorso at 2026-08-25T07:25:06+02:00
Track updates for antiword issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -8672,22 +8672,22 @@ CVE-2025-27770 (UpTrain is an open-source platform to
evaluate and improve gener
CVE-2025-27621 (UpTrain is an open-source platform to evaluate and improve
generative ...)
NOT-FOR-US: UpTrain
CVE-2026-XXXX [heap out-of-bounds write during Unicode font-name conversion]
- - antiword <unfixed> (bug #1144645)
- [trixie] - antiword <postponed> (Revisit when fixed upstream)
-CVE-2026-XXXX [heap out-of-bounds write during OLE PPS name decoding]
- - antiword <unfixed> (bug #1144644)
+ - antiword 0.37-18 (bug #1144645)
[trixie] - antiword <postponed> (Revisit when fixed upstream)
+CVE-2026-XXXX [heap out-of-bounds read during OLE property decoding]
+ - antiword <unfixed> (bug #1145423; unimportant)
+ NOTE: Crash in CLI tool, no security impact
CVE-2026-XXXX [heap out-of-bounds write when appending font-table entry]
- - antiword <unfixed> (bug #1144643)
+ - antiword 0.37-18 (bug #1144643)
[trixie] - antiword <postponed> (Revisit when fixed upstream)
CVE-2026-XXXX [out-of-bounds read in szLpstr/xstrdup may expose adjacent heap
data]
- - antiword <unfixed> (bug #1144642; unimportant)
+ - antiword 0.37-18 (bug #1144642; unimportant)
NOTE: Crash in CLI tool, no security impact
CVE-2026-XXXX [out-of-bounds read through attacker-controlled property offset]
- - antiword <unfixed> (bug #1144641; unimportant)
+ - antiword 0.37-18 (bug #1144641; unimportant)
NOTE: Crash in CLI tool, no security impact
CVE-2026-XXXX [divide-by-zero on zero glyph width causes crash]
- - antiword <unfixed> (bug #1144640; unimportant)
+ - antiword 0.37-18 (bug #1144640; unimportant)
NOTE: Crash in CLI tool, no security impact
CVE-2026-63347
- suricata-update 1.3.8-1
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/381a0874f18e79113a5afbd7ff08ae3e1f27a529
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/381a0874f18e79113a5afbd7ff08ae3e1f27a529
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
