All ProjectsArch LinuxArch VM ImagesAUR web interfaceCommunity PackagesPacmanRelease Engineering Switch

Show Task #

Please read this before reporting a bug:
http://wiki.archlinux.org/index.php/Reporting_Bug_Guidelines

Do NOT report bugs when a package is just outdated, or it is in Unsupported. Use the 'flag out of date' link on the package page, or the Mailing List.

REPEAT: Do NOT report bugs for outdated packages!

Tasklist

FS#42982 - [antiword] buffer overflow (CVE-2014-8123)

Task Type Bug Report Category Upstream Bugs Status Closed Assigned To Lukas Fleischer (lfleischer) Architecture All Severity High Priority Normal Reported Version Due in Version Undecided Due Date Undecided Percent Complete Votes 0 Private No

Details A buffer overflow has been found in antiword <= 0.37 [1]. While the issue has been acknowledge and the patch accepted, it does not seem that a new release will be issued soon. I believe we might want to backport the fix. [1] http://seclists.org/oss-sec/2014/q4/874