ELSA-2015-1708 — Important: libXfont security update (Oracle Linux 7)

Summary

[1.4.5-5]
- CVE-2015-1802: missing range check in bdfReadProperties (bug 1258892)
- CVE-2015-1803: crash on invalid read in bdfReadCharacters (bug 1258892)
- CVE-2015-1804: out-of-bounds memory access in bdfReadCharacters (bug 1258892)

Fixed packages 2

Release	Package	Fixed in
Oracle Linux · 7	libXfont	0:1.4.7-3.el7_1
Oracle Linux · 7	libXfont-devel	0:1.4.7-3.el7_1

Vulnerabilities 3

Unscored —

CVE-2015-1802

The bdfReadProperties function in bitmap/bdfread.c in X.Org libXfont before 1.4.9 and 1.5.x before 1.5.1 allows remote …

libxfont libxfont Debian Ubuntu

Mar 20, 2015
Unscored —

CVE-2015-1803

The bdfReadCharacters function in bitmap/bdfread.c in X.Org libXfont before 1.4.9 and 1.5.x before 1.5.1 does not prope…

libxfont libxfont Debian Ubuntu

Mar 20, 2015
Unscored —

CVE-2015-1804

The bdfReadCharacters function in bitmap/bdfread.c in X.Org libXfont before 1.4.9 and 1.5.x before 1.5.1 does not prope…

libxfont libxfont Debian Ubuntu

Mar 20, 2015

Important: libXfont security update (Oracle Linux 7)

Summary

Fixed packages 2

Vulnerabilities 3

The bdfReadProperties function in bitmap/bdfread.c in X.Org libXfont before 1.4.9 and 1.5.x before 1.5.1 allows remote …

The bdfReadCharacters function in bitmap/bdfread.c in X.Org libXfont before 1.4.9 and 1.5.x before 1.5.1 does not prope…

The bdfReadCharacters function in bitmap/bdfread.c in X.Org libXfont before 1.4.9 and 1.5.x before 1.5.1 does not prope…