Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2016:0875-1

Опубликовано: 24 мар. 2016
Источник: suse-cvrf

Описание

Security update for graphite2

This update for graphite2 fixes the following issues:

  • CVE-2016-1521: The directrun function in directmachine.cpp in Libgraphite did not validate a certain skip operation, which allowed remote attackers to execute arbitrary code, obtain sensitive information, or cause a denial of service (out-of-bounds read and application crash) via a crafted Graphite smart font.

  • CVE-2016-1523: The SillMap::readFace function in FeatureMap.cpp in Libgraphite mishandled a return value, which allowed remote attackers to cause a denial of service (missing initialization, NULL pointer dereference, and application crash) via a crafted Graphite smart font.

  • CVE-2016-1526: The TtfUtil:LocaLookup function in TtfUtil.cpp in Libgraphite incorrectly validated a size value, which allowed remote attackers to obtain sensitive information or cause a denial of service (out-of-bounds read and application crash) via a crafted Graphite smart font.

This update was imported from the SUSE:SLE-12:Update project.

Список пакетов

openSUSE Leap 42.1
graphite2-1.3.1-3.1
graphite2-devel-1.3.1-3.1
libgraphite2-3-1.3.1-3.1
libgraphite2-3-32bit-1.3.1-3.1

Ссылки

Описание

The directrun function in directmachine.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.6.1, does not validate a certain skip operation, which allows remote attackers to execute arbitrary code, obtain sensitive information, or cause a denial of service (out-of-bounds read and application crash) via a crafted Graphite smart font.

Затронутые продукты
openSUSE Leap 42.1:graphite2-1.3.1-3.1
openSUSE Leap 42.1:graphite2-devel-1.3.1-3.1
openSUSE Leap 42.1:libgraphite2-3-1.3.1-3.1
openSUSE Leap 42.1:libgraphite2-3-32bit-1.3.1-3.1
Ссылки

Описание

The SillMap::readFace function in FeatureMap.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.6.1, mishandles a return value, which allows remote attackers to cause a denial of service (missing initialization, NULL pointer dereference, and application crash) via a crafted Graphite smart font.

Затронутые продукты
openSUSE Leap 42.1:graphite2-1.3.1-3.1
openSUSE Leap 42.1:graphite2-devel-1.3.1-3.1
openSUSE Leap 42.1:libgraphite2-3-1.3.1-3.1
openSUSE Leap 42.1:libgraphite2-3-32bit-1.3.1-3.1
Ссылки

Описание

The TtfUtil:LocaLookup function in TtfUtil.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.6.1, incorrectly validates a size value, which allows remote attackers to obtain sensitive information or cause a denial of service (out-of-bounds read and application crash) via a crafted Graphite smart font.

Затронутые продукты
openSUSE Leap 42.1:graphite2-1.3.1-3.1
openSUSE Leap 42.1:graphite2-devel-1.3.1-3.1
openSUSE Leap 42.1:libgraphite2-3-1.3.1-3.1
openSUSE Leap 42.1:libgraphite2-3-32bit-1.3.1-3.1
Ссылки