graphite2-1.3.6-1.el7

Graphite2 is a project within SIL’s Non-Roman Script Initiative and Language
Software Development groups to provide rendering capabilities for complex
non-Roman writing systems. Graphite can be used to create “smart fonts” capable
of displaying writing systems with various complex behaviors. With respect to
the Text Encoding Model, Graphite handles the "Rendering" aspect of writing
system implementation.

Security issues fixed with this release:

CVE-2016-1521
The directrun function in directmachine.cpp in Libgraphite in Graphite
2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox ESR 38.x
before 38.6.1, does not validate a certain skip operation, which
allows remote attackers to execute arbitrary code, obtain sensitive
information, or cause a denial of service (out-of-bounds read and
application crash) via a crafted Graphite smart font.
CVE-2016-1522
Code.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla
Firefox before 43.0 and Firefox ESR 38.x before 38.6.1, does not
consider recursive load calls during a size check, which allows remote
attackers to cause a denial of service (heap-based buffer overflow) or
possibly execute arbitrary code via a crafted Graphite smart font.
CVE-2016-1523
The SillMap::readFace function in FeatureMap.cpp in Libgraphite in
Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox
ESR 38.x before 38.6.1, mishandles a return value, which allows remote
attackers to cause a denial of service (missing initialization, NULL
pointer dereference, and application crash) via a crafted Graphite
smart font.
CVE-2016-1526
The TtfUtil:LocaLookup function in TtfUtil.cpp in Libgraphite in
Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox
ESR 38.x before 38.6.1, incorrectly validates a size value, which
allows remote attackers to obtain sensitive information or cause a
denial of service (out-of-bounds read and application crash) via a
crafted Graphite smart font.

The following packages have been upgraded to a newer upstream version: graphite2 (1.3.6).