What is the severity of RHSA-2019:2722?

The severity of RHSA-2019:2722 is classified as low.

How do I fix RHSA-2019:2722?

To fix RHSA-2019:2722, you should update the libwmf package to version 0.2.9-8.el8_0.

Which systems are affected by RHSA-2019:2722?

RHSA-2019:2722 affects systems running the libwmf package versions prior to 0.2.9-8.el8_0.

What are the main issues addressed in RHSA-2019:2722?

RHSA-2019:2722 addresses a double free vulnerability in multiple GD library components.

Is there a specific version of libwmf recommended after RHSA-2019:2722?

Yes, version 0.2.9-8.el8_0 is the recommended version to resolve the issues in RHSA-2019:2722.

Vulnerability/
RHSA-2019:2722

CWE

415

10/9/2019

RHSA-2019:2722: Low: libwmf security update

First published: Tue Sep 10 2019(Updated: )

The libwmf packages provide a library for reading and converting Windows Metafile Format (WMF) vector graphics. The library is used by applications such as GIMP and ImageMagick.<br>Security Fix(es):<br><li> gd: double free in the gdImage*Ptr in gd_gif_out.c, gd_jpeg.c, and gd_wbmp.c (CVE-2019-6978)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected Software	Affected Version	How to fix
redhat/libwmf	<0.2.9-8.el8_0	0.2.9-8.el8_0
redhat/libwmf	<0.2.9-8.el8_0	0.2.9-8.el8_0
redhat/libwmf-debuginfo	<0.2.9-8.el8_0	0.2.9-8.el8_0
redhat/libwmf-debuginfo	<0.2.9-8.el8_0	0.2.9-8.el8_0
redhat/libwmf-debugsource	<0.2.9-8.el8_0	0.2.9-8.el8_0
redhat/libwmf-debugsource	<0.2.9-8.el8_0	0.2.9-8.el8_0
redhat/libwmf-lite	<0.2.9-8.el8_0	0.2.9-8.el8_0
redhat/libwmf-lite	<0.2.9-8.el8_0	0.2.9-8.el8_0
redhat/libwmf-lite-debuginfo	<0.2.9-8.el8_0	0.2.9-8.el8_0
redhat/libwmf-lite-debuginfo	<0.2.9-8.el8_0	0.2.9-8.el8_0
redhat/libwmf	<0.2.9-8.el8_0	0.2.9-8.el8_0
redhat/libwmf-debuginfo	<0.2.9-8.el8_0	0.2.9-8.el8_0
redhat/libwmf-debugsource	<0.2.9-8.el8_0	0.2.9-8.el8_0
redhat/libwmf-lite	<0.2.9-8.el8_0	0.2.9-8.el8_0
redhat/libwmf-lite-debuginfo	<0.2.9-8.el8_0	0.2.9-8.el8_0
redhat/libwmf	<0.2.9-8.el8_0.aa	0.2.9-8.el8_0.aa
redhat/libwmf-debuginfo	<0.2.9-8.el8_0.aa	0.2.9-8.el8_0.aa
redhat/libwmf-debugsource	<0.2.9-8.el8_0.aa	0.2.9-8.el8_0.aa
redhat/libwmf-lite	<0.2.9-8.el8_0.aa	0.2.9-8.el8_0.aa
redhat/libwmf-lite-debuginfo	<0.2.9-8.el8_0.aa	0.2.9-8.el8_0.aa
redhat/libwmf-devel	<0.2.9-8.el8_0	0.2.9-8.el8_0
redhat/libwmf-devel	<0.2.9-8.el8_0	0.2.9-8.el8_0
redhat/libwmf-devel	<0.2.9-8.el8_0	0.2.9-8.el8_0
redhat/libwmf-devel	<0.2.9-8.el8_0.aa	0.2.9-8.el8_0.aa

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of RHSA-2019:2722?
The severity of RHSA-2019:2722 is classified as low.
How do I fix RHSA-2019:2722?
To fix RHSA-2019:2722, you should update the libwmf package to version 0.2.9-8.el8_0.
Which systems are affected by RHSA-2019:2722?
RHSA-2019:2722 affects systems running the libwmf package versions prior to 0.2.9-8.el8_0.
What are the main issues addressed in RHSA-2019:2722?
RHSA-2019:2722 addresses a double free vulnerability in multiple GD library components.
Is there a specific version of libwmf recommended after RHSA-2019:2722?
Yes, version 0.2.9-8.el8_0 is the recommended version to resolve the issues in RHSA-2019:2722.

agent/severity
agent/type
agent/softwarecombine
agent/last-modified-date
agent/first-publish-date
agent/references
agent/weakness
agent/remedy
agent/title
agent/description
collector/redhat-errata
source/Red Hat
anchor-id/RHSA-2019:2722
agent/software-canonical-lookup
agent/event
agent/trending
agent/tags
agent/source
package-manager/redhat