This bug was fixed in the package libwmf - 0.2.8.4-10.6ubuntu1
---
libwmf (0.2.8.4-10.6ubuntu1) zesty; urgency=low
* Merge from Debian unstable. (LP: #1676958) Remaining changes:
- Split out GTK plugin into separate package.
-- Balint Reczey Tue, 28 Mar 2017 15:37:26 +
** Changed in: libwmf (Debian)
Status: Unknown => Fix Released
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1676958
Title:
Please merge 0.2.8.4-10.6 from Debian: for for allocating huge bloc
** Information type changed from Public to Public Security
** Changed in: libwmf (Ubuntu)
Importance: Undecided => Low
** Bug watch added: Debian Bug tracker #842090
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=842090
** Also affects: libwmf (Debian) via
http://bugs.debian.org/cgi-b
Sure, done. I wanted to ask earlier it this was preferred.
** Patch added: "libwmf_0.2.8.4-10.6ubuntu1.patch"
https://bugs.launchpad.net/ubuntu/+source/libwmf/+bug/1676958/+attachment/4849859/+files/libwmf_0.2.8.4-10.6ubuntu1.patch
--
You received this bug notification because you are a memb
Can you please update the patch to also close this bug in changelog for
the merge entry?
** Summary changed:
- Please merge 0.2.8.4-10.6 from Debian
+ Please merge 0.2.8.4-10.6 from Debian: for for allocating huge block of
memory (CVE-2016-9011)
--
You received this bug notification because yo
No, there is no FTBFS and there are no new features just a security fix.
** Patch added: "libwmf_0.2.8.4-10.6ubuntu1.patch"
https://bugs.launchpad.net/ubuntu/+source/libwmf/+bug/1676958/+attachment/4849748/+files/libwmf_0.2.8.4-10.6ubuntu1.patch
--
You received this bug notification because
Is this fixing a current FTBFS? Do we have another bug for the memory
usage issue in LP?
Furthermore, you may with to get rid of "[ Ubuntu Merge-o-Matic ]";
since you did the merge work yourself ;)
Finally, in this case there does not look to be any new features
introduced with the merge. Am I co
Subscribed ubuntu-sponsors too (see
https://wiki.ubuntu.com/SponsorshipProcess); but I'll do the sponsoring
myself once the question above is answered.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/167
