Debian Patches

Status for antiword/0.37-18

Patch Description Author Forwarded Bugs Origin Last update
10_fix_buffer_overflow_wordole_c.patch Add check for buffer overflow with malformed input files This was later re-found and became CVE-2014-8123. <eriks@debian.org> yes debian 2018-11-30
50_antiword-manpage-hyphen-to-minus.patch Fix hyphen in antiword.1 to be a minus Olly Betts <olly@survex.com> not-needed 2025-04-18
docx.patch Try to reduce confusion around docx files Now also checks for XML files and HTML files Olly Betts <olly@survex.com> not-needed debian 2025-04-18
remove-dead-upstream-links.patch Remove dead upstream links The cjb.net domain has been let lapse and is now a holding page.
The winfield.demon.nl site is 404.
Olly Betts <olly@survex.com> not-needed 2025-04-18
use-snprintf.patch Use snprintf Use snprintf() when converting dates to strings to make completely sure we
can't overrun the buffer.
Olly Betts <olly@survex.com> not-needed 2025-04-18
stop-parsing-documentsummary.patch Stop parsing the document summary information We were only reading two fields from it: "manager" (which is never actually
used) and "company" (which is only used in the docbook XML export, where if
set it was included in document metadata). Rather than try to fix buffer
overreads in this code, it seems simpler to just excise it.
Olly Betts <olly@survex.com> not-needed debian vendor 2025-04-18
fix-write-after-end-of-font-table.patch Fix write one past end of font table array
diff --git a/fonts.c b/fonts.c
index 77fde74e..1f18e09b 100644
<olly@survex.com> not-needed debian 2026-08-24
check_fonttable_bounds.patch Add missing checks for running off the end of the fonttable <olly@survex.com> not-needed debian 2026-08-24
fix-divide-by-zero.patch Fix integer divide by zero
diff --git a/word2text.c b/word2text.c
index 62b8964c..45f1b60c 100644
<olly@survex.com> not-needed debian 2026-08-24
fix-oob-read-properties.patch Fix OOB read reading document properties <olly@survex.com> not-needed debian 2026-08-24

All known versions for source package 'antiword'

Links