Update to 1.4.15. Fixes CVE-2017-8911
Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:
sudo dnf upgrade --refresh --advisory=FEDORA-2017-c2882ae75b
Please log in to add feedback.
This update has been submitted for testing by kevin.
This update has been pushed to testing.
This update has reached 7 days in testing and can be pushed to stable now if the maintainer wishes
works for me
This update has been submitted for batched by kevin.
This update has been submitted for stable by bodhi.
tnef 1.4.15 fc26 runs, but: testing with the proof of concept generates an assert and core dump. I'm not sure that it should core dump..I would have expected an error message / errorlevel return.
I've asked at: https://github.com/verdammelt/tnef/issues/23
p.s. thanks to Kevin for noticing / updating my package.
Extracting a TNEF attachment works fine for me.
This update has been pushed to stable.
Extracting conforming content works OK. Extracting from the faulty ProofOfConcept tnef file generates an assertion and core dump. The program author says the core dump is expected.