[SECURITY] Fedora 29 Update: libwmf-0.2.12-1.fc29

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2019-76fbe24cab
2019-02-10 02:33:26.265758
--------------------------------------------------------------------------------

Name        : libwmf
Product     : Fedora 29
Version     : 0.2.12
Release     : 1.fc29
URL         : https://github.com/caolanm/libwmf
Summary     : Windows MetaFile Library
Description :
A library for reading and converting Windows MetaFile vector graphics (WMF).

--------------------------------------------------------------------------------
Update Information:

CVE-2019-6978: double free in the gdImage*Ptr in gd_jpeg.c, and gd_wbmp.c
--------------------------------------------------------------------------------
ChangeLog:

* Fri Feb  1 2019 Caol��n McNamara <caolanm(a)redhat.com&gt; - 0.2.12-1
- Related: rhbz#1671392/rhbz#1671621 unwanted soname bump
* Fri Feb  1 2019 Rex Dieter <rdieter(a)fedoraproject.org&gt; - 0.2.11-2
- track library sonames so bumps aren't a surprise
- use %make_build %make_install macros
* Thu Jan 31 2019 Caol��n McNamara <caolanm(a)redhat.com&gt; - 0.2.11-1
- Resolves: rhbz#1671392 CVE-2019-6978 latest version
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1671392 - CVE-2019-6978 libwmf: gd: double free in the gdImage*Ptr in
gd_gif_out.c, gd_jpeg.c, and gd_wbmp.c [fedora-all]
        https://bugzilla.redhat.com/show_bug.cgi?id=1671392
  [ 2 ] Bug #1671621 - gimp-2.10.8-5.fc29 requires libwmf-0.2.so.7 and 
libwmflite-0.2.so.7, but libwmf-0.2.11-1.fc29 provides libwmf-0.2.so.8 and
libwmf-lite-0.2.11-1.fc29 provides libwmflite-0.2.so.8
        https://bugzilla.redhat.com/show_bug.cgi?id=1671621
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2019-76fbe24cab' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------