Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2016:2082-1

Опубликовано: 16 авг. 2016
Источник: suse-cvrf

Описание

Security update for harfbuzz

This update for harfbuzz fixes the following security issues:

  • CVE-2016-2052: harfbuzz: Multiple unspecified vulnerabilities in HarfBuzz before 1.0.6 (boo#963436)
  • CVE-2015-8947: harfbuzz: hb-ot-layout-gpos-table.hh buffer over-read (boo#989564)

Список пакетов

openSUSE Leap 42.1
harfbuzz-1.0.3-4.1
harfbuzz-devel-1.0.3-4.1
harfbuzz-tools-1.0.3-4.1
libharfbuzz-icu0-1.0.3-4.1
libharfbuzz-icu0-32bit-1.0.3-4.1
libharfbuzz0-1.0.3-4.1
libharfbuzz0-32bit-1.0.3-4.1

Ссылки

Описание

hb-ot-layout-gpos-table.hh in HarfBuzz before 1.0.5 allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via crafted data, a different vulnerability than CVE-2016-2052.

Затронутые продукты
openSUSE Leap 42.1:harfbuzz-1.0.3-4.1
openSUSE Leap 42.1:harfbuzz-devel-1.0.3-4.1
openSUSE Leap 42.1:harfbuzz-tools-1.0.3-4.1
openSUSE Leap 42.1:libharfbuzz-icu0-1.0.3-4.1
Ссылки

Описание

Multiple unspecified vulnerabilities in HarfBuzz before 1.0.6, as used in Google Chrome before 48.0.2564.82, allow attackers to cause a denial of service or possibly have other impact via crafted data, as demonstrated by a buffer over-read resulting from an inverted length check in hb-ot-font.cc, a different issue than CVE-2015-8947.

Затронутые продукты
openSUSE Leap 42.1:harfbuzz-1.0.3-4.1
openSUSE Leap 42.1:harfbuzz-devel-1.0.3-4.1
openSUSE Leap 42.1:harfbuzz-tools-1.0.3-4.1
openSUSE Leap 42.1:libharfbuzz-icu0-1.0.3-4.1
Ссылки