Multiple vulnerabilities have been found in UnRTF, the worst of which may result in execution of arbitrary code.
|Package||app-text/unrtf on all architectures|
|Affected versions||< 0.21.9|
|Unaffected versions||>= 0.21.9|
UnRTF is a command-line program which converts RTF documents to other formats.
Multiple vulnerabilities have been discovered in UnRTF. Please review the CVE identifiers referenced below for details.
A remote attacker may be able to execute arbitrary code with the privileges of the process or cause a Denial of Service condition.
There is no known workaround at this time.
All UnRTF users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-text/unrtf-0.21.9"
July 07, 2015
July 07, 2015: 1