Ubuntu
libytnef package

  1. Zesty (17.04)
  2. Bug #1666884
  3. Comment #15

Comment 15 for bug 1666884

Revision history for this message
Oliver Giles (ohw-giles) wrote :

Hi, I implemented those fixes to libytnef. Yeraze has just released 1.9.3 so I'm interested to see if/when it will make it to Ubuntu, and to which releases.

The ytnef and ytnefprint binaries just call libytnef, both the wrong and the right fixes to CVE-2017-9068 are definitely part of the library, so I would say that trusty is most likely affected. There are also several other equally severe CVEs which have been reported and fixed since version 1.5.