fontconfig-2.10.95-10.el7

エラータID: AXSA:2016-1121:01

Release date: 
Tuesday, November 29, 2016 - 11:45
Subject: 
fontconfig-2.10.95-10.el7
Affected Channels: 
Asianux Server 7 for x86_64
Severity: 
Moderate
Description: 

Fontconfig is designed to locate fonts within the
system and select them according to requirements specified by
applications.

Security issues fixed with this release:

CVE-2016-5384
fontconfig before 2.12.1 does not validate offsets, which allows local
users to trigger arbitrary free calls and consequently conduct double
free attacks and execute arbitrary code via a crafted cache file.

Additional Changes:

Solution: 

Update packages.

CVEs: 
CVE-2016-5384
fontconfig before 2.12.1 does not validate offsets, which allows local users to trigger arbitrary free calls and consequently conduct double free attacks and execute arbitrary code via a crafted cache file.
Additional Info: 

N/A

Download: 

SRPMS
  1. fontconfig-2.10.95-10.el7.src.rpm
    MD5: 1581d62ac5144baf75fd8e30b41bf2b2
    SHA-256: 9195d85e11637297a5b269642b5862f0708b929c2d4196ca50bbf9c9bb2400d0
    Size: 1.50 MB

Asianux Server 7 for x86_64
  1. fontconfig-2.10.95-10.el7.x86_64.rpm
    MD5: dd6e82dd1aa96187acc6ddeeec007673
    SHA-256: f5b0c9dadf36d9f541cc18bbc6d7e55ca20a3fbc9371389dccb3603891c1b7b6
    Size: 228.21 kB
  2. fontconfig-devel-2.10.95-10.el7.x86_64.rpm
    MD5: d8ed30757aa33177e8a60cc5094e4edb
    SHA-256: 66b5ca2b9834cca2786941420168dfdf98e826118a164aae8ba647bb564a1cfb
    Size: 127.33 kB
  3. fontconfig-2.10.95-10.el7.i686.rpm
    MD5: fe95b9b3e7439103f839b1b4f0d48e05
    SHA-256: d8faab9b912fd050e3e2501402cd74f576f5b5097cc90b1165ef595d318acc19
    Size: 229.38 kB
  4. fontconfig-devel-2.10.95-10.el7.i686.rpm
    MD5: c5b3a7f07ecf54047cda90221f863c9c
    SHA-256: 624e136987141cc3b1255cd898f9c6be648641e4c59d121833ff5307896d1c37
    Size: 127.36 kB