OESA-2026-4537: unrtf security update
UnRTF is a command-line program written in C which converts documents in Rich Text Format (.rtf) to HTML, LaTeX, troff macros, and RTF itself. Converting to HTML, it supports a number of features of Rich Text Format: Changes in the text's font, size, weight (bold), and slant (italic) Underlines and strikethroughs Partial support for text shadowing, outlining, embossing, or engraving Capitalizations Superscripts and subscripts Expanded and condensed text Changes in the foreground and background colors Conversion of special characters to HTML entities Security Fix(es):
UnRTF by GNU Project is vulnerable to out-of-bounds write. If a user opens an RTF file crafted by an attacker, it may lead to a denial-of-service (DoS) condition.(CVE-2026-109831)
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
openeuler/unrtfto a version that resolves this vulnerability.Fixed in 0.21.13-1.oe2403sp3
Event History
Frequently Asked Questions
Who is exposed to this issue?
Systems running the openEuler unrtf package are exposed when a user converts or otherwise opens an attacker-crafted RTF file with UnRTF. The issue is remotely reachable only through delivery of a malicious file and requires user interaction.
What could exploitation do?
The documented impact is a denial-of-service condition caused by an out-of-bounds write. The supplied information does not identify confidentiality impact; the vector lists integrity and availability as affected.
How can I determine whether I may be affected?
Check whether the openEuler unrtf package is installed and whether it is used to process RTF documents from untrusted sources. The advisory does not provide affected or fixed package versions.