-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.7 Date: Tue, 5 May 2009 13:28:52 +0000 Source: libwmf Binary: libwmf-dev libwmf-bin libwmf-doc libwmf0.2-7 Architecture: source all amd64 Version: 0.2.8.4-2+etch1 Distribution: oldstable-security Urgency: high Maintainer: Matej Vela <vela@debian.org> Changed-By: Nico Golde <nion@debian.org> Description: libwmf-bin - Windows metafile conversion tools libwmf-dev - Windows metafile conversion development libwmf-doc - Windows metafile documentation libwmf0.2-7 - Windows metafile conversion library Closes: 526434 Changes: libwmf (0.2.8.4-2+etch1) oldstable-security; urgency=high . * Non-maintainer upload by the Security Team. * Fix use-after-free in embedded copy of gd enabling an attacker to do DoS attacks or execute arbitrary code via a crafted wmf file (CVE-2009-1364; Closes: #526434). Files: 3cee5266c519e54d0da6af8e7bfce4fb 777 libs optional libwmf_0.2.8.4-2+etch1.dsc d1177739bf1ceb07f57421f0cee191e0 2169375 libs optional libwmf_0.2.8.4.orig.tar.gz 2b4fed248a00761fd52d0121b1a85bc3 7644 libs optional libwmf_0.2.8.4-2+etch1.diff.gz 84d6098d1c8664b140af1133a2131a21 181534 libs optional libwmf0.2-7_0.2.8.4-2+etch1_amd64.deb c297e08f3ef5b051539e953e86c079ef 18236 graphics optional libwmf-bin_0.2.8.4-2+etch1_amd64.deb 38bb87b9709162127b1781f1f94faabd 207970 libdevel optional libwmf-dev_0.2.8.4-2+etch1_amd64.deb dad2e5a29f12e8eb1044aa0e8711f9ca 285000 doc optional libwmf-doc_0.2.8.4-2+etch1_all.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) iEYEARECAAYFAkoBi6EACgkQHYflSXNkfP/IygCeLYJPNXkGJSUgZCcSqxCa1FPM 3LUAoKlMbujKmxxkQ+qw00bQFgKnrQcV =0Tgw -----END PGP SIGNATURE----- Accepted: libwmf-bin_0.2.8.4-2+etch1_amd64.deb to main/libw/libwmf/libwmf-bin_0.2.8.4-2+etch1_amd64.deb libwmf-dev_0.2.8.4-2+etch1_amd64.deb to main/libw/libwmf/libwmf-dev_0.2.8.4-2+etch1_amd64.deb libwmf-doc_0.2.8.4-2+etch1_all.deb to main/libw/libwmf/libwmf-doc_0.2.8.4-2+etch1_all.deb libwmf0.2-7_0.2.8.4-2+etch1_amd64.deb to main/libw/libwmf/libwmf0.2-7_0.2.8.4-2+etch1_amd64.deb libwmf_0.2.8.4-2+etch1.diff.gz to main/libw/libwmf/libwmf_0.2.8.4-2+etch1.diff.gz libwmf_0.2.8.4-2+etch1.dsc to main/libw/libwmf/libwmf_0.2.8.4-2+etch1.dsc