OESA-2026-4538: unrtf security update
UnRTF is a command-line program written in C which converts documents in Rich Text Format (.rtf) to HTML, LaTeX, troff macros, and RTF itself. Converting to HTML, it supports a number of features of Rich Text Format: Changes in the text's font, size, weight (bold), and slant (italic) Underlines and strikethroughs Partial support for text shadowing, outlining, embossing, or engraving Capitalizations Superscripts and subscripts Expanded and condensed text Changes in the foreground and background colors Conversion of special characters to HTML entities Security Fix(es):
UnRTF by GNU Project is vulnerable to out-of-bounds write. If a user opens an RTF file crafted by an attacker, it may lead to a denial-of-service (DoS) condition.(CVE-2026-109831)
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
openeuler/unrtfto a version that resolves this vulnerability.Fixed in 0.21.13-1.oe2403sp4