Synopsis:          Important: libwmf security update
Advisory ID:       SLSA-2015:1917-1
Issue Date:        2015-10-20
CVE Numbers:       CVE-2015-0848
                   CVE-2015-4695
                   CVE-2015-4696
                   CVE-2015-4588
--

It was discovered that libwmf did not correctly process certain WMF
(Windows Metafiles) with embedded BMP images. By tricking a victim into
opening a specially crafted WMF file in an application using libwmf, a
remote attacker could possibly use this flaw to execute arbitrary code
with the privileges of the user running the application. (CVE-2015-0848,
CVE-2015-4588)

It was discovered that libwmf did not properly process certain WMF files.
By tricking a victim into opening a specially crafted WMF file in an
application using libwmf, a remote attacker could possibly exploit this
flaw to cause a crash or execute arbitrary code with the privileges of the
user running the application. (CVE-2015-4696)

It was discovered that libwmf did not properly process certain WMF files.
By tricking a victim into opening a specially crafted WMF file in an
application using libwmf, a remote attacker could possibly exploit this
flaw to cause a crash. (CVE-2015-4695)

After installing the update, all applications using libwmf must be
restarted for the update to take effect.
--

SL6
  x86_64
    libwmf-0.2.8.4-25.el6_7.i686.rpm
    libwmf-0.2.8.4-25.el6_7.x86_64.rpm
    libwmf-debuginfo-0.2.8.4-25.el6_7.i686.rpm
    libwmf-debuginfo-0.2.8.4-25.el6_7.x86_64.rpm
    libwmf-lite-0.2.8.4-25.el6_7.i686.rpm
    libwmf-lite-0.2.8.4-25.el6_7.x86_64.rpm
    libwmf-devel-0.2.8.4-25.el6_7.i686.rpm
    libwmf-devel-0.2.8.4-25.el6_7.x86_64.rpm
  i386
    libwmf-0.2.8.4-25.el6_7.i686.rpm
    libwmf-debuginfo-0.2.8.4-25.el6_7.i686.rpm
    libwmf-lite-0.2.8.4-25.el6_7.i686.rpm
    libwmf-devel-0.2.8.4-25.el6_7.i686.rpm
SL7
  x86_64
    libwmf-0.2.8.4-41.el7_1.i686.rpm
    libwmf-0.2.8.4-41.el7_1.x86_64.rpm
    libwmf-debuginfo-0.2.8.4-41.el7_1.i686.rpm
    libwmf-debuginfo-0.2.8.4-41.el7_1.x86_64.rpm
    libwmf-lite-0.2.8.4-41.el7_1.i686.rpm
    libwmf-lite-0.2.8.4-41.el7_1.x86_64.rpm
    libwmf-devel-0.2.8.4-41.el7_1.i686.rpm
    libwmf-devel-0.2.8.4-41.el7_1.x86_64.rpm

- Scientific Linux Development Team