[SECURITY] Fedora 29 Update: libwmf-0.2.12-1.fc29
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2019-76fbe24cab
2019-02-10 02:33:26.265758
--------------------------------------------------------------------------------
Name : libwmf
Product : Fedora 29
Version : 0.2.12
Release : 1.fc29
URL : https://github.com/caolanm/libwmf
Summary : Windows MetaFile Library
Description :
A library for reading and converting Windows MetaFile vector graphics (WMF).
--------------------------------------------------------------------------------
Update Information:
CVE-2019-6978: double free in the gdImage*Ptr in gd_jpeg.c, and gd_wbmp.c
--------------------------------------------------------------------------------
ChangeLog:
* Fri Feb 1 2019 Caol��n McNamara <caolanm(a)redhat.com> - 0.2.12-1
- Related: rhbz#1671392/rhbz#1671621 unwanted soname bump
* Fri Feb 1 2019 Rex Dieter <rdieter(a)fedoraproject.org> - 0.2.11-2
- track library sonames so bumps aren't a surprise
- use %make_build %make_install macros
* Thu Jan 31 2019 Caol��n McNamara <caolanm(a)redhat.com> - 0.2.11-1
- Resolves: rhbz#1671392 CVE-2019-6978 latest version
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1671392 - CVE-2019-6978 libwmf: gd: double free in the gdImage*Ptr in
gd_gif_out.c, gd_jpeg.c, and gd_wbmp.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1671392
[ 2 ] Bug #1671621 - gimp-2.10.8-5.fc29 requires libwmf-0.2.so.7 and
libwmflite-0.2.so.7, but libwmf-0.2.11-1.fc29 provides libwmf-0.2.so.8 and
libwmf-lite-0.2.11-1.fc29 provides libwmflite-0.2.so.8
https://bugzilla.redhat.com/show_bug.cgi?id=1671621
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2019-76fbe24cab' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------