Fixed packages 16
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 7 enterprise_linux:7::client | fontconfig | 0:2.10.95-10.el7 |
| Red Hat · RHEL 7 enterprise_linux:7::client | fontconfig-debuginfo | 0:2.10.95-10.el7 |
| Red Hat · RHEL 7 enterprise_linux:7::client | fontconfig-devel | 0:2.10.95-10.el7 |
| Red Hat · RHEL 7 enterprise_linux:7::client | fontconfig-devel-doc | 0:2.10.95-10.el7 |
| Red Hat · RHEL 7 enterprise_linux:7::computenode | fontconfig | 0:2.10.95-10.el7 |
| Red Hat · RHEL 7 enterprise_linux:7::computenode | fontconfig-debuginfo | 0:2.10.95-10.el7 |
| Red Hat · RHEL 7 enterprise_linux:7::computenode | fontconfig-devel | 0:2.10.95-10.el7 |
| Red Hat · RHEL 7 enterprise_linux:7::computenode | fontconfig-devel-doc | 0:2.10.95-10.el7 |
| Red Hat · RHEL 7 enterprise_linux:7::server | fontconfig | 0:2.10.95-10.el7 |
| Red Hat · RHEL 7 enterprise_linux:7::server | fontconfig-debuginfo | 0:2.10.95-10.el7 |
| Red Hat · RHEL 7 enterprise_linux:7::server | fontconfig-devel | 0:2.10.95-10.el7 |
| Red Hat · RHEL 7 enterprise_linux:7::server | fontconfig-devel-doc | 0:2.10.95-10.el7 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | fontconfig | 0:2.10.95-10.el7 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | fontconfig-debuginfo | 0:2.10.95-10.el7 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | fontconfig-devel | 0:2.10.95-10.el7 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | fontconfig-devel-doc | 0:2.10.95-10.el7 |
Vulnerabilities 1
-
Unscored —
fontconfig before 2.12.1 does not validate offsets, which allows local users to trigger arbitrary free calls and conseq…
References
-
article
https://access.redhat.com/security/updates/classification/#moderate
-
article
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/7.3_Release_Notes/index.html
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1073460
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1350891
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_2601.json
-
report
https://access.redhat.com/security/cve/CVE-2016-5384
-
advisory
https://www.cve.org/CVERecord?id=CVE-2016-5384
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2016-5384