Synopsis

Low: libwmf security update

Type/Severity

Security Advisory: Low

Topic

An update for libwmf is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

The libwmf packages provide a library for reading and converting Windows Metafile Format (WMF) vector graphics. The library is used by applications such as GIMP and ImageMagick.

Security Fix(es):

• gd: double free in the gdImage*Ptr in gd_gif_out.c, gd_jpeg.c, and gd_wbmp.c (CVE-2019-6978)
  

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux for x86_64 8 x86_64
• Red Hat Enterprise Linux for IBM z Systems 8 s390x
• Red Hat Enterprise Linux for Power, little endian 8 ppc64le
• Red Hat Enterprise Linux for ARM 64 8 aarch64
• Red Hat CodeReady Linux Builder for x86_64 8 x86_64
• Red Hat CodeReady Linux Builder for Power, little endian 8 ppc64le
• Red Hat CodeReady Linux Builder for ARM 64 8 aarch64
• Red Hat CodeReady Linux Builder for IBM z Systems 8 s390x

Fixes

• BZ - 1671390 - CVE-2019-6978 gd: double free in the gdImage*Ptr in gd_gif_out.c, gd_jpeg.c, and gd_wbmp.c

CVEs

• CVE-2019-6978

References

• https://access.redhat.com/security/updates/classification/#low

Red Hat Enterprise Linux for x86_64 8

SRPM
libwmf-0.2.9-8.el8_0.src.rpm	SHA-256: 47a246188e21415eed101583e6155bc8c871f9af2be26b1aa1032447e0a367c4
x86_64
libwmf-0.2.9-8.el8_0.i686.rpm	SHA-256: afe461351842f294c062ffff3f2131a57476639bf3902f57746334b1901652f0
libwmf-0.2.9-8.el8_0.x86_64.rpm	SHA-256: 9ba1356f6d2a04de7b5e01bf11e9cd0c6c5c634b884ade49035267b81a201103
libwmf-debuginfo-0.2.9-8.el8_0.i686.rpm	SHA-256: b6351030f55d5739c3070d1e4a9929599696119ba33daf12b766ee3cbf93f20a
libwmf-debuginfo-0.2.9-8.el8_0.x86_64.rpm	SHA-256: 6b36419116bc16aab697badc441d0f772f6e689330b79c83a9e28d9afa9f3ba4
libwmf-debugsource-0.2.9-8.el8_0.i686.rpm	SHA-256: d46a77ebe9261fad5d8af8907c90cd904d5225e1d379e240c1ed5e80d59348a4
libwmf-debugsource-0.2.9-8.el8_0.x86_64.rpm	SHA-256: 973be3cd786b654219d4a426601282587abdc31b2a1d41c4d2586e703f43f346
libwmf-lite-0.2.9-8.el8_0.i686.rpm	SHA-256: a033d3d08ae3a130d3860c06b89b415cb78dd184f3b430c28c06b63602f50e38
libwmf-lite-0.2.9-8.el8_0.x86_64.rpm	SHA-256: dbb53f6282d10915d81bea706574fd8df9b29aaf73fa4651699186fdf7641a73
libwmf-lite-debuginfo-0.2.9-8.el8_0.i686.rpm	SHA-256: 1dd0f269f332af264c01f0e5f75745d9dd3a76fa6e4d677a667c9550fa805c65
libwmf-lite-debuginfo-0.2.9-8.el8_0.x86_64.rpm	SHA-256: f70c32f0ae39d4a74e825b7b3eec6f91fc8cf9098802e85500e802fe7a9c9056

Red Hat Enterprise Linux for IBM z Systems 8

SRPM
libwmf-0.2.9-8.el8_0.src.rpm	SHA-256: 47a246188e21415eed101583e6155bc8c871f9af2be26b1aa1032447e0a367c4
s390x
libwmf-0.2.9-8.el8_0.s390x.rpm	SHA-256: 75791800250523436b8ad2110965a016385d1c0e7e47182352448bd777760f84
libwmf-debuginfo-0.2.9-8.el8_0.s390x.rpm	SHA-256: 5a98ca5ae1183f7d3eae23dc9ef7cd26317fe38c5f7a5b8b2a7b65e6dc9dfff9
libwmf-debugsource-0.2.9-8.el8_0.s390x.rpm	SHA-256: 39ec0fded4bad74df70f28ccf55425234625d697cf5d76ab61e5cd44f389505f
libwmf-lite-0.2.9-8.el8_0.s390x.rpm	SHA-256: 21b2ba71cbd7c1d08e1ad4eed03e17b0ac0c04048e2b3cc323c752c458a286a8
libwmf-lite-debuginfo-0.2.9-8.el8_0.s390x.rpm	SHA-256: ff2f886c8236fd0028aec75c1813c55be804d5aa79aec87d7899b363f1de36ab

Red Hat Enterprise Linux for Power, little endian 8

SRPM
libwmf-0.2.9-8.el8_0.src.rpm	SHA-256: 47a246188e21415eed101583e6155bc8c871f9af2be26b1aa1032447e0a367c4
ppc64le
libwmf-0.2.9-8.el8_0.ppc64le.rpm	SHA-256: b13e91c29ee4a58a91ba254ebb429d4ff7ecc04f3e8732475a0e4ede96700f08
libwmf-debuginfo-0.2.9-8.el8_0.ppc64le.rpm	SHA-256: 0f20d9f211aad7c7a5638875bf843163bb4d062aca8b0e256ed097d80202c83c
libwmf-debugsource-0.2.9-8.el8_0.ppc64le.rpm	SHA-256: a3055e4eb6a82e491f2e5277f0da3e08dcb65ad39b43d6acb82ee3f87ad76c7f
libwmf-lite-0.2.9-8.el8_0.ppc64le.rpm	SHA-256: d48c99195f4799db350476c30531a0b8f9cd5e59dc28c2c98db1c8a2aeed2790
libwmf-lite-debuginfo-0.2.9-8.el8_0.ppc64le.rpm	SHA-256: c6180c7ffd0d75df0ee02102f967f912e1db2c901da521759382af18923612d7

Red Hat Enterprise Linux for ARM 64 8

SRPM
libwmf-0.2.9-8.el8_0.src.rpm	SHA-256: 47a246188e21415eed101583e6155bc8c871f9af2be26b1aa1032447e0a367c4
aarch64
libwmf-0.2.9-8.el8_0.aarch64.rpm	SHA-256: faec87d6f01f55ead8c18b441e4f5b58ad61b292887283776ec0faa4444206da
libwmf-debuginfo-0.2.9-8.el8_0.aarch64.rpm	SHA-256: 65ddb3565cd1f207785b31b964edf54be8bb45eb14b21c40dbf89fb2101a4674
libwmf-debugsource-0.2.9-8.el8_0.aarch64.rpm	SHA-256: a8b60f700cf55afaddb5580600b0b2969f077b7b8823ef0fb0941e7b7f68cfdf
libwmf-lite-0.2.9-8.el8_0.aarch64.rpm	SHA-256: f13ca69618c79fc18103131fadbc07643c22ebb831efbce163b44092015ac59e
libwmf-lite-debuginfo-0.2.9-8.el8_0.aarch64.rpm	SHA-256: 1a169e5b2ad76d317917c50853ce0b325a43bb4b9b25c2474912de254861ce18

Red Hat CodeReady Linux Builder for x86_64 8

SRPM
x86_64
libwmf-debuginfo-0.2.9-8.el8_0.i686.rpm	SHA-256: b6351030f55d5739c3070d1e4a9929599696119ba33daf12b766ee3cbf93f20a
libwmf-debuginfo-0.2.9-8.el8_0.x86_64.rpm	SHA-256: 6b36419116bc16aab697badc441d0f772f6e689330b79c83a9e28d9afa9f3ba4
libwmf-debugsource-0.2.9-8.el8_0.i686.rpm	SHA-256: d46a77ebe9261fad5d8af8907c90cd904d5225e1d379e240c1ed5e80d59348a4
libwmf-debugsource-0.2.9-8.el8_0.x86_64.rpm	SHA-256: 973be3cd786b654219d4a426601282587abdc31b2a1d41c4d2586e703f43f346
libwmf-devel-0.2.9-8.el8_0.i686.rpm	SHA-256: 50e513725d184f8f8596af1d5bac4b901bb7caded46333b284c970fcaae26de3
libwmf-devel-0.2.9-8.el8_0.x86_64.rpm	SHA-256: ef5e2c95a0a891088d6228365ee4a83302a64caa111887a3a5c1c9def08163dd
libwmf-lite-debuginfo-0.2.9-8.el8_0.i686.rpm	SHA-256: 1dd0f269f332af264c01f0e5f75745d9dd3a76fa6e4d677a667c9550fa805c65
libwmf-lite-debuginfo-0.2.9-8.el8_0.x86_64.rpm	SHA-256: f70c32f0ae39d4a74e825b7b3eec6f91fc8cf9098802e85500e802fe7a9c9056

Red Hat CodeReady Linux Builder for Power, little endian 8

SRPM
ppc64le
libwmf-debuginfo-0.2.9-8.el8_0.ppc64le.rpm	SHA-256: 0f20d9f211aad7c7a5638875bf843163bb4d062aca8b0e256ed097d80202c83c
libwmf-debugsource-0.2.9-8.el8_0.ppc64le.rpm	SHA-256: a3055e4eb6a82e491f2e5277f0da3e08dcb65ad39b43d6acb82ee3f87ad76c7f
libwmf-devel-0.2.9-8.el8_0.ppc64le.rpm	SHA-256: 64dcb94c341ceef0786d894222d362c8863298e9e1ed2123c1bcd7b548bc0b4f
libwmf-lite-debuginfo-0.2.9-8.el8_0.ppc64le.rpm	SHA-256: c6180c7ffd0d75df0ee02102f967f912e1db2c901da521759382af18923612d7

Red Hat CodeReady Linux Builder for ARM 64 8

SRPM
aarch64
libwmf-debuginfo-0.2.9-8.el8_0.aarch64.rpm	SHA-256: 65ddb3565cd1f207785b31b964edf54be8bb45eb14b21c40dbf89fb2101a4674
libwmf-debugsource-0.2.9-8.el8_0.aarch64.rpm	SHA-256: a8b60f700cf55afaddb5580600b0b2969f077b7b8823ef0fb0941e7b7f68cfdf
libwmf-devel-0.2.9-8.el8_0.aarch64.rpm	SHA-256: 89774fddbce014bede22685970f02eca4846f225fec30bbf2a6a179ed2d24759
libwmf-lite-debuginfo-0.2.9-8.el8_0.aarch64.rpm	SHA-256: 1a169e5b2ad76d317917c50853ce0b325a43bb4b9b25c2474912de254861ce18

Red Hat CodeReady Linux Builder for IBM z Systems 8

SRPM
s390x
libwmf-debuginfo-0.2.9-8.el8_0.s390x.rpm	SHA-256: 5a98ca5ae1183f7d3eae23dc9ef7cd26317fe38c5f7a5b8b2a7b65e6dc9dfff9
libwmf-debugsource-0.2.9-8.el8_0.s390x.rpm	SHA-256: 39ec0fded4bad74df70f28ccf55425234625d697cf5d76ab61e5cd44f389505f
libwmf-devel-0.2.9-8.el8_0.s390x.rpm	SHA-256: bc6f6d1790bc9d1e7cf9eb27bda503f6a4c5af7282c4ae35830daf570ef9fd6c
libwmf-lite-debuginfo-0.2.9-8.el8_0.s390x.rpm	SHA-256: ff2f886c8236fd0028aec75c1813c55be804d5aa79aec87d7899b363f1de36ab