Source: libgsf X-Debbugs-CC: [email protected] Severity: important Tags: security
Hi, The following vulnerability was published for libgsf. CVE-2026-116124[0]: | A security vulnerability has been detected in GNOME libgsf up to | 1.14.60. The impacted element is the function ole_info_read_metabat | of the file gsf/gsf-infile-msole.c of the component OLE2 Parser. The | manipulation leads to heap-based buffer overflow. The attack can be | initiated remotely. The identifier of the patch is | a8e25560b74f84c3f86df6ca0ac59195fa5af68a. It is recommended to apply | a patch to fix this issue. Fixed by: https://gitlab.gnome.org/GNOME/libgsf/-/commit/a8e25560b74f84c3f86df6ca0ac59195fa5af68a (LIBGSF_1_14_60) If you fix the vulnerability please also make sure to include the CVE (Common Vulnerabilities & Exposures) id in your changelog entry. For further information see: [0] https://security-tracker.debian.org/tracker/CVE-2026-116124 https://www.cve.org/CVERecord?id=CVE-2026-116124 Please adjust the affected versions in the BTS as needed.
