High ELSA-2016-0594 4 CVEs

Important: graphite2 security, bug fix, and enhancement update (Oracle Linux 7)

Published Apr 5, 2016 · Updated Apr 5, 2016

Ecosystem: Oracle Linux

Summary

[1.3.6-1]
- Related: rhbz#1309052 CVE-2016-1521 CVE-2016-1522 CVE-2016-1523 CVE-2016-1526

[1.3.5-1]
- Resolves: rhbz#1309052 CVE-2016-1521 CVE-2016-1522 CVE-2016-1523 CVE-2016-1526

[1.2.4-6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[1.2.4-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[1.2.4-4]
- Rebuilt for Fedora 23 Change
https://fedoraproject.org/wiki/Changes/Harden_all_packages_with_position-independent_code

[1.2.4-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild

[1.2.4-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

[1.2.4-1]
- New upstream release

Fixed packages 2

Release	Package	Fixed in
Oracle Linux · 7	graphite2	0:1.3.6-1.el7_2
Oracle Linux · 7	graphite2-devel	0:1.3.6-1.el7_2

Vulnerabilities 4

Unscored —

CVE-2016-1521

The directrun function in directmachine.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 …

graphite2 graphite2 Debian Ubuntu

Feb 13, 2016
Unscored —

CVE-2016-1522

Code.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.6.1,…

graphite2 graphite2 Debian Ubuntu

Feb 13, 2016
Unscored —

CVE-2016-1523

The SillMap::readFace function in FeatureMap.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before …

thunderbird graphite2 graphite2 Debian Ubuntu

Feb 13, 2016
Unscored —

CVE-2016-1526

The TtfUtil:LocaLookup function in TtfUtil.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43…

graphite2 graphite2 Debian Ubuntu

Feb 13, 2016