Copied from Fedora.

http://pkgs.fedoraproject.org/cgit/libwmf.git/tree/libwmf-0.2.8.4-CVE-2007-0455.patch

--- libwmf-0.2.8.4/src/extra/gd/gdft.c	2010-12-06 11:18:26.000000000 +0000
+++ libwmf-0.2.8.4/src/extra/gd/gdft.c	2010-12-06 11:21:09.000000000 +0000
@@ -811,7 +811,7 @@
 	    {
 	      ch = c & 0xFF;	/* don't extend sign */
 	    }
-	  next++;
+	  if (*next) next++;
 	}
       else
 	{
<a href='/'><img src='https://git.koszko.org/cgit-static/cgit.png' alt='cgit logo'/></a></td>
<td class='main'><a href='/'>index</a> : <a href='/guix/'>guix</a></td><td class='form'><form method='get'>
<input type='hidden' name='id' value='8540c2d86ca535ceb188c838cf1885de6f65c94f'/><select name='h' onchange='this.form.submit();'>
<option value='koszko' selected='selected'>koszko</option>
<option value='koszko-scripts'>koszko-scripts</option>
</select> <input type='submit' value='switch'/></form></td></tr>
<tr><td class='sub'>Wojtek's customized Guix</td><td class='sub right'></td></tr></table>
<table class='tabs'><tr><td>
<a href='/guix/about/'>about</a><a href='/guix/'>summary</a><a href='/guix/refs/?id=8540c2d86ca535ceb188c838cf1885de6f65c94f'>refs</a><a class='active' href='/guix/log/gnu/packages/mp3.scm'>log</a><a href='/guix/tree/gnu/packages/mp3.scm?id=8540c2d86ca535ceb188c838cf1885de6f65c94f'>tree</a><a href='/guix/commit/gnu/packages/mp3.scm?id=8540c2d86ca535ceb188c838cf1885de6f65c94f'>commit</a><a href='/guix/diff/gnu/packages/mp3.scm?id=8540c2d86ca535ceb188c838cf1885de6f65c94f'>diff</a></td><td class='form'><form class='right' method='get' action='/guix/log/gnu/packages/mp3.scm'>
<input type='hidden' name='id' value='8540c2d86ca535ceb188c838cf1885de6f65c94f'/><select name='qt'>
<option value='grep'>log msg</option>
<option value='author'>author</option>
<option value='committer'>committer</option>
<option value='range'>range</option>
</select>
<input class='txt' type='search' size='10' name='q' value=''/>
<input type='submit' value='search'/>
</form>
</td></tr></table>
<div class='path'>path: <a href='/guix/log/?id=8540c2d86ca535ceb188c838cf1885de6f65c94f'>root</a>/<a href='/guix/log/gnu?id=8540c2d86ca535ceb188c838cf1885de6f65c94f'>gnu</a>/<a href='/guix/log/gnu/packages?id=8540c2d86ca535ceb188c838cf1885de6f65c94f'>packages</a>/<a href='/guix/log/gnu/packages/mp3.scm?id=8540c2d86ca535ceb188c838cf1885de6f65c94f'>mp3.scm</a></div><div class='content'><table class='list nowrap'><tr class='nohover'><th class='left'>Age</th><th class='left'>Commit message (<a href='/guix/log/gnu/packages/mp3.scm?id=8540c2d86ca535ceb188c838cf1885de6f65c94f&amp;showmsg=1'>Expand</a>)</th><th class='left'>Author</th></tr>
<tr><td><span title='2022-04-04 19:57:12 -0400'>2022-04-04</span></td><td><a href='/guix/commit/gnu/packages/mp3.scm?id=20303c0b1c75bc4770cdfa8b8c6b33fd6e77c168'>gnu: eyeD3: Update to 0.9.6.</a><span class='msg-avail'>...<span class='msg-tooltip'>* gnu/packages/mp3.scm (eyed3): Update to 0.9.6.
[propagated-inputs]: Add python-deprecation and python-filetype.
</span></span></td><td>Leo Famulari</td></tr>
<tr><td><span title='2022-01-16 01:00:00 +0100'>2022-01-16</span></td><td><a href='/guix/commit/gnu/packages/mp3.scm?id=06bf24dcb9843c1885f892624b8a19046b9d2ca2'>gnu: chromaprint: Update to 1.5.1.</a><span class='msg-avail'>...<span class='msg-tooltip'>* gnu/packages/mp3.scm (chromaprint): Update to 1.5.1.
</span></span></td><td>Tobias Geerinckx-Rice</td></tr>
<tr><td><span title='2021-12-13 17:48:25 +0100'>2021-12-13</span></td><td><a href='/guix/commit/gnu/packages/mp3.scm?id=8394619baceb118df92e355377fd543bb1aa501a'>gnu: Simplify package inputs.</a><span class='msg-avail'>...<span class='msg-tooltip'>This commit was obtained by running:

  ./pre-inst-env guix style

without any additional argument.
</span></span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2021-09-18 15:31:18 +0200'>2021-09-18</span></td><td><a href='/guix/commit/gnu/packages/mp3.scm?id=19c9c266ae1de85e9d731e3ad829c8273b641c83'>gnu: mpg321: Fix compiling with gcc 10.</a><span class='msg-avail'>...<span class='msg-tooltip'>* gnu/packages/patches/mpg321-gcc-10.patch: New file.
* gnu/local.mk (dist_patch_DATA): Add it.
* gnu/packages/mp3.scm (mpg321)[source]: Use it.
</span></span></td><td>Guillaume Le Vaillant</td></tr>
<tr><td><span title='2021-09-11 18:14:06 +0200'>2021-09-11</span></td><td><a href='/guix/commit/gnu/packages/mp3.scm?id=83168079ac176563ed2b448bb1b2fd0e5d4a5dc3'>gnu: mpc123: Allow compilation with GCC 10.</a><span class='msg-avail'>...<span class='msg-tooltip'>* gnu/packages/mp3.scm (mpc123)[arguments]: In 'configure' phase, call
'setenv'.
</span></span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2021-09-07 14:19:08 +0200'>2021-09-07</span></td><td><a href='/guix/commit/gnu/packages/mp3.scm?id=d9dfbf886ddbb92dfdaa118bb9765e78aad5c53a'>Merge branch 'master' into core-updates-frozen</a></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2021-09-04 14:53:34 +0200'>2021-09-04</span></td><td><a href='/guix/commit/gnu/packages/mp3.scm?id=9f543674ff0f2f178b656597fef24e834635d60b'>gnu: python-pyacoustid: Update to 1.2.2.</a><span class='msg-avail'>...<span class='msg-tooltip'>* gnu/packages/mp3.scm (python-pyacoustid) [version]: Update to 1.2.2.
[arguments]: Add phase 'chromaprint-path.
[inputs]: Add chromaprint.
[home-page]: Update.
</span></span></td><td>Lars-Dominik Braun</td></tr>
<tr><td><span title='2021-08-12 00:30:27 +0200'>2021-08-12</span></td><td><a href='/guix/commit/gnu/packages/mp3.scm?id=c4133c43c7cfe2476ebfae87f9e4d10d96de9bc7'>Merge branch 'master' into core-updates-frozen</a><span class='msg-avail'>...<span class='msg-tooltip'> Conflicts:
	gnu/packages/algebra.scm
	gnu/packages/games.scm
	gnu/packages/golang.scm
	gnu/packages/kerberos.scm
	gnu/packages/mail.scm
	gnu/packages/python.scm
	gnu/packages/ruby.scm
	gnu/packages/scheme.scm
	gnu/packages/tex.scm
	gnu/packages/tls.scm
	gnu/packages/version-control.scm
</span></span></td><td>Marius Bakke</td></tr>
<tr><td><span title='2021-08-04 16:34:31 +0300'>2021-08-04</span></td><td><a href='/guix/commit/gnu/packages/mp3.scm?id=bc38598c8eb8b7df125c16a38ae4c1180e1f6979'>gnu: mpg123: Update to 1.28.2.</a><span class='msg-avail'>...<span class='msg-tooltip'>* gnu/packages/mp3.scm (mpg123): Update to 1.28.2.
</span></span></td><td>Efraim Flashner</td></tr>
<tr><td><span title='2021-07-25 17:52:36 +0200'>2021-07-25</span></td><td><a href='/guix/commit/gnu/packages/mp3.scm?id=a682fea916b9f3ff101a76273aa754e11d53244d'>gnu: gs-font: Rename to 'font-ghostscript'.</a><span class='msg-avail'>...<span class='msg-tooltip'>According to (guix)Fonts, font package names must be prefixed
with 'font-'.  Adjust 'gs-fonts' to follow this convention.

* gnu/packages/fontutils.scm
  (gs-fonts)[name]: Set to "font-ghostscript".
  (gs-fonts): Rename variable to 'font-ghostscript'.
  (gs-fonts): Add deprecated package.
* gnu/packages/ghostscript.scm
  (ghostscript)[arguments]&lt;#:configure-flags&gt;: Replace 'gs-fonts'
  with 'font-ghostscript'.
  (ghostscript)[inputs]: Likewise.
* gnu/packages/fontutils.scm (fontconfig)[inputs]: Likewise.
* gnu/packages/gtk.scm
  (pango-1.42)[arguments]{disable-layout-test}: Likewise.
* gnu/packages/imagemagick.scm
  (graphicsmagick)[arguments]{configure-flags}: Likewise.
  (graphicsmagick)[inputs]: Likewise.
* gnu/packages/mp3.scm (ripperx)[propagated-inputs]: Likewise.
* doc/guix.texi (X11 Fonts): Likewise.

Signed-off-by: Mathieu Othacehe &lt;othacehe@gnu.org&gt;
</span></span></td><td>Maxime Devos</td></tr>