Comment 10 for bug 22372

Revision history for this message
Martin Pitt (pitti) wrote :

 abiword (2.2.9-1ubuntu2) breezy; urgency=low
 .
   * SECURITY UPDATE: Fix arbitrary code execution with crafted RTF documents.
   * Add debian/patches/18_rtf_check_keyword_len.dpatch:
     - Limit the size of RTF identifiers to avoid overflowing a static buffer.
   * References:
     CAN-2005-2964
     Ubuntu #16165

warty and hoary are pending