Summary
[2.10.95-10]
- Fix a regression in the previous change. (#1355930)
[2.10.95-9]
- CVE-2016-5384: Validate offsets in cache files properly. (#1355930)
[2.10.95-8]
- Update 45-latin.conf to add some hints to fall back for Windows fonts (#1073460)
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | fontconfig | 0:2.10.95-10.el7 |
| Oracle Linux · 7 | fontconfig-devel | 0:2.10.95-10.el7 |
| Oracle Linux · 7 | fontconfig-devel-doc | 0:2.10.95-10.el7 |
Vulnerabilities 1
-
Unscored —
fontconfig before 2.12.1 does not validate offsets, which allows local users to trigger arbitrary free calls and conseq…