Summary
This update for libXfont fixes the following issues:
- The original fix for CVE-2015-1804 prevented DWIDTH to be negative. However, the
spec states that 'DWIDTH [...] is a vector indicating the position of the next
glyph's origin relative to the origin of this glyph'. Consequently, negative
DWIDTH values should be allowed. (bsc#958383)
Fixed packages 8
| Release | Package | Fixed in |
|---|---|---|
| SUSE · SLES 12 Linux Enterprise Desktop 12 | libXfont | 1.4.7-7.1 |
| SUSE · SLES 12 SP1 Linux Enterprise Desktop 12 SP1 | libXfont | 1.4.7-7.1 |
| SUSE · SLES 12 Linux Enterprise Server 12 | libXfont | 1.4.7-7.1 |
| SUSE · SLES 12 SP1 Linux Enterprise Server 12 SP1 | libXfont | 1.4.7-7.1 |
| SUSE · SLES for SAP 12 Linux Enterprise Server for SAP Applications 12 | libXfont | 1.4.7-7.1 |
| SUSE · SLES for SAP 12 SP1 Linux Enterprise Server for SAP Applications 12 SP1 | libXfont | 1.4.7-7.1 |
| SUSE · SLES 12 Linux Enterprise Software Development Kit 12 | libXfont | 1.4.7-7.1 |
| SUSE · SLES 12 SP1 Linux Enterprise Software Development Kit 12 SP1 | libXfont | 1.4.7-7.1 |
Vulnerabilities 1
-
Unscored —
The bdfReadCharacters function in bitmap/bdfread.c in X.Org libXfont before 1.4.9 and 1.5.x before 1.5.1 does not prope…