libwmf-0.2.8.4-25.AXS4

エラータID: AXSA:2015-513:01

Release date: 
Thursday, October 22, 2015 - 11:00
Subject: 
libwmf-0.2.8.4-25.AXS4
Affected Channels: 
Asianux Server 4 for x86_64
Asianux Server 4 for x86
Severity: 
High
Description: 

A library for reading and converting Windows MetaFile vector graphics (WMF).

Security issues fixed with this release:

CVE-2015-0848
CVE-2015-4588
CVE-2015-4695
CVE-2015-4696

Solution: 

Update package.

CVEs: 
CVE-2015-0848
Heap-based buffer overflow in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted BMP image.
CVE-2015-4588
Heap-based buffer overflow in the DecodeImage function in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted "run-length count" in an image in a WMF file.
CVE-2015-4695
meta.h in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WMF file.
CVE-2015-4696
Use-after-free vulnerability in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (crash) via a crafted WMF file to the (1) wmf2gd or (2) wmf2eps command.
Additional Info: 

N/A

Download: 

SRPMS
  1. libwmf-0.2.8.4-25.AXS4.src.rpm
    MD5: 08dd480c914b021288a8d94463a47f29
    SHA-256: 1ef608727c662741c4d9d61956ca123b1a0703f10fffb701d1eac58c896a5829
    Size: 2.08 MB

Asianux Server 4 for x86
  1. libwmf-0.2.8.4-25.AXS4.i686.rpm
    MD5: 5e8d8a5358f72b060e03b297368c9aad
    SHA-256: 03c490190f8309a843a584caee91e76b8b251e982e377cc5f6f7fd32ccc4dcc0
    Size: 130.39 kB
  2. libwmf-lite-0.2.8.4-25.AXS4.i686.rpm
    MD5: d6f903be28966c2f1ad95fb6a6d35b4d
    SHA-256: 1c2efab4f959ec8bd5e4449d8178dcab92d130a31cb060ee0d4dbcb19436e7fc
    Size: 51.45 kB

Asianux Server 4 for x86_64
  1. libwmf-0.2.8.4-25.AXS4.x86_64.rpm
    MD5: 08aa20c29b07c5a0d70f6feab51e6139
    SHA-256: 0a96d0de19a7ac029857de2bde283ac88eed095fe57d2535da67ea914c0c29a7
    Size: 131.20 kB
  2. libwmf-lite-0.2.8.4-25.AXS4.x86_64.rpm
    MD5: feb55678c59b70de871337a403ea9a78
    SHA-256: dd1725544e99756453a5a710cdaa10bab1b9e6a111f9b7ce61167182db4ba582
    Size: 50.16 kB
  3. libwmf-0.2.8.4-25.AXS4.i686.rpm
    MD5: 5e8d8a5358f72b060e03b297368c9aad
    SHA-256: 03c490190f8309a843a584caee91e76b8b251e982e377cc5f6f7fd32ccc4dcc0
    Size: 130.39 kB
  4. libwmf-lite-0.2.8.4-25.AXS4.i686.rpm
    MD5: d6f903be28966c2f1ad95fb6a6d35b4d
    SHA-256: 1c2efab4f959ec8bd5e4449d8178dcab92d130a31cb060ee0d4dbcb19436e7fc
    Size: 51.45 kB