Debian Security Advisory
DSA-3302-1 libwmf -- security update
- Date Reported:
- 06 Jul 2015
- Affected Packages:
- libwmf
- Vulnerable:
- Yes
- Security database references:
- In Mitre's CVE dictionary: CVE-2015-0848, CVE-2015-4588, CVE-2015-4695, CVE-2015-4696.
- More information:
-
Insufficient input sanitising in libwmf, a library to process Windows metafile data, may result in denial of service or the execution of arbitrary code if a malformed WMF file is opened.
For the oldstable distribution (wheezy), these problems have been fixed in version 0.2.8.4-10.3+deb7u1.
For the stable distribution (jessie), these problems have been fixed in version 0.2.8.4-10.3+deb8u1.
For the unstable distribution (sid), these problems will be fixed soon.
We recommend that you upgrade your libwmf packages.