==========================================================================
Ubuntu Security Notice USN-3319-1
June 15, 2017

libmwaw vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

– Ubuntu 17.04
– Ubuntu 16.10
– Ubuntu 16.04 LTS
– Ubuntu 14.04 LTS

Summary:

libmwaw could be made to crash or run programs as your login if it opened a
specially crafted file.

Software Description:
– libmwaw: import library for some old Mac text documents

Details:

It was discovered that libmwaw incorrectly handled certain malformed
document files. If a user or automated system were tricked into opening a
specially crafted file, a remote attacker could cause libmwaw to crash,
resulting in a denial of service, or possibly execute arbitrary code.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 17.04:
libmwaw-0.3-3 0.3.9-1ubuntu0.1

Ubuntu 16.10:
libmwaw-0.3-3 0.3.8-2ubuntu0.1

Ubuntu 16.04 LTS:
libmwaw-0.3-3 0.3.7-1ubuntu2.1

Ubuntu 14.04 LTS:
libmwaw-0.1-1 0.1.11-1ubuntu1.1

In general, a standard system update will make all the necessary changes.

References:
https://www.ubuntu.com/usn/usn-3319-1
CVE-2017-9433

Package Information:
https://launchpad.net/ubuntu/+source/libmwaw/0.3.9-1ubuntu0.1
https://launchpad.net/ubuntu/+source/libmwaw/0.3.8-2ubuntu0.1
https://launchpad.net/ubuntu/+source/libmwaw/0.3.7-1ubuntu2.1
https://launchpad.net/ubuntu/+source/libmwaw/0.1.11-1ubuntu1.1

—–BEGIN PGP SIGNATURE—–
Version: GnuPG v2
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=AcMn
—–END PGP SIGNATURE—–
—