diff options
| author | Gustavo Zacarias <gustavo@zacarias.com.ar> | 2016-02-15 13:45:49 -0300 |
|---|---|---|
| committer | Thomas Petazzoni <thomas.petazzoni@free-electrons.com> | 2016-02-15 22:30:24 +0100 |
| commit | 36bdaa2e5d94aa7d7f6d49edde17d5b737048ad4 (patch) | |
| tree | b5bab040dab7b52808e67b7d3dbff7012bab67d4 /package/graphite2/graphite2.hash | |
| parent | d2c8d0efbfea1fc5d482a89b8108217de4105d61 (diff) | |
| download | buildroot-36bdaa2e5d94aa7d7f6d49edde17d5b737048ad4.tar.gz buildroot-36bdaa2e5d94aa7d7f6d49edde17d5b737048ad4.zip | |
graphite2: security bump to version 1.3.5
Fixes:
CVE-2016-1521 - An exploitable out-of-bounds read vulnerability exists
in the opcode handling functionality of Libgraphite. A specially crafted
font can cause an out-of-bounds read resulting in arbitrary code
execution. An attacker can provide a malicious font to trigger this
vulnerability.
CVE-2016-1522 - An exploitable NULL pointer dereference exists in the
bidirectional font handling functionality of Libgraphite. A specially
crafted font can cause a NULL pointer dereference resulting in a crash.
An attacker can provide a malicious font to trigger this vulnerability.
CVE-2016-1523 - An exploitable heap-based buffer overflow exists in the
context item handling functionality of Libgraphite. A specially crafted
font can cause a buffer overflow resulting in potential code execution.
An attacker can provide a malicious font to trigger this vulnerability.
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Diffstat (limited to 'package/graphite2/graphite2.hash')
| -rw-r--r-- | package/graphite2/graphite2.hash | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/package/graphite2/graphite2.hash b/package/graphite2/graphite2.hash index 1e8a54bfd3..07102cfcd2 100644 --- a/package/graphite2/graphite2.hash +++ b/package/graphite2/graphite2.hash @@ -1,3 +1,3 @@ # From http://sourceforge.net/projects/silgraphite/files/graphite2 -md5 7cda6fc6bc197b216777b15ce52c38a8 graphite2-1.3.3.tgz -sha1 54b04c283bab4695de63ae2dd6cff392dd49d7f0 graphite2-1.3.3.tgz +md5 5b8d22a8bbf031838e31432868c0109c graphite2-1.3.5.tgz +sha1 044f65d5b4ade3169f5fcd75a25f047c81f5d33e graphite2-1.3.5.tgz |
