ELSA-2015-1708

ELSA-2015-1708 - libXfont security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2015-09-03

Description

[1.4.5-5]
- CVE-2015-1802: missing range check in bdfReadProperties (bug 1258892)
- CVE-2015-1803: crash on invalid read in bdfReadCharacters (bug 1258892)
- CVE-2015-1804: out-of-bounds memory access in bdfReadCharacters (bug 1258892)

Related CVEs

CVE-2015-1803

CVE-2015-1804

CVE-2015-1802

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 6 (i386)	libXfont-1.4.5-5.el6_7.src.rpm	474d046da5debbb3d96ddb70a71409e5e65503d39c81621e33d9f20bd9fb2a38	ELBA-2016-0736	ol6_i386_latest_archive
	libXfont-1.4.5-5.el6_7.src.rpm	474d046da5debbb3d96ddb70a71409e5e65503d39c81621e33d9f20bd9fb2a38	ELBA-2016-0736	ol6_u7_i386_patch
	libXfont-1.4.5-5.el6_7.i686.rpm	dbff071178d768383298843593ffc6962e5fd41f013d646fd477efd2d47aa2c3	ELBA-2016-0736	ol6_i386_latest_archive
	libXfont-1.4.5-5.el6_7.i686.rpm	dbff071178d768383298843593ffc6962e5fd41f013d646fd477efd2d47aa2c3	ELBA-2016-0736	ol6_u7_i386_patch
	libXfont-devel-1.4.5-5.el6_7.i686.rpm	1708284d8ff80b81bd745b7acb2863fccc4a331a4c1aafd5fb59cc8133ece2a7	ELBA-2016-0736	ol6_i386_latest_archive
	libXfont-devel-1.4.5-5.el6_7.i686.rpm	1708284d8ff80b81bd745b7acb2863fccc4a331a4c1aafd5fb59cc8133ece2a7	ELBA-2016-0736	ol6_u7_i386_patch
Oracle Linux 6 (x86_64)	libXfont-1.4.5-5.el6_7.src.rpm	474d046da5debbb3d96ddb70a71409e5e65503d39c81621e33d9f20bd9fb2a38	ELBA-2016-0736	ol6_u7_x86_64_patch
	libXfont-1.4.5-5.el6_7.src.rpm	474d046da5debbb3d96ddb70a71409e5e65503d39c81621e33d9f20bd9fb2a38	ELBA-2016-0736	ol6_x86_64_latest_archive
	libXfont-1.4.5-5.el6_7.i686.rpm	dbff071178d768383298843593ffc6962e5fd41f013d646fd477efd2d47aa2c3	ELBA-2016-0736	ol6_u7_x86_64_patch
	libXfont-1.4.5-5.el6_7.i686.rpm	dbff071178d768383298843593ffc6962e5fd41f013d646fd477efd2d47aa2c3	ELBA-2016-0736	ol6_x86_64_latest_archive
	libXfont-1.4.5-5.el6_7.x86_64.rpm	121fbd9593e494c3f535a2c4ca74a5ed67662891287ef3ed4defec9c2aeeb0e8	ELBA-2016-0736	ol6_u7_x86_64_patch
	libXfont-1.4.5-5.el6_7.x86_64.rpm	121fbd9593e494c3f535a2c4ca74a5ed67662891287ef3ed4defec9c2aeeb0e8	ELBA-2016-0736	ol6_x86_64_latest_archive
	libXfont-devel-1.4.5-5.el6_7.i686.rpm	1708284d8ff80b81bd745b7acb2863fccc4a331a4c1aafd5fb59cc8133ece2a7	ELBA-2016-0736	ol6_u7_x86_64_patch
	libXfont-devel-1.4.5-5.el6_7.i686.rpm	1708284d8ff80b81bd745b7acb2863fccc4a331a4c1aafd5fb59cc8133ece2a7	ELBA-2016-0736	ol6_x86_64_latest_archive
	libXfont-devel-1.4.5-5.el6_7.x86_64.rpm	82892572e4b40c8b0a55a921d2550bdf33faecebb9e1f1038948328a5c3c4958	ELBA-2016-0736	ol6_u7_x86_64_patch
	libXfont-devel-1.4.5-5.el6_7.x86_64.rpm	82892572e4b40c8b0a55a921d2550bdf33faecebb9e1f1038948328a5c3c4958	ELBA-2016-0736	ol6_x86_64_latest_archive
Oracle Linux 7 (x86_64)	libXfont-1.4.7-3.el7_1.src.rpm	7ecda930af8ff86c8a1a8352c20c0db644a81305f1c4041d859ea9956f5f67df	ELSA-2018-3059	ol7_x86_64_latest_archive
	libXfont-1.4.7-3.el7_1.src.rpm	7ecda930af8ff86c8a1a8352c20c0db644a81305f1c4041d859ea9956f5f67df	ELSA-2018-3059	ol7_x86_64_optional_archive
	libXfont-1.4.7-3.el7_1.src.rpm	7ecda930af8ff86c8a1a8352c20c0db644a81305f1c4041d859ea9956f5f67df	ELSA-2018-3059	ol7_x86_64_u1_patch
	libXfont-1.4.7-3.el7_1.i686.rpm	7359da181c4bbb4db51a8776b59843c6f7705bd626580be95eccd6d5a833af8a	ELSA-2018-3059	ol7_x86_64_latest_archive
	libXfont-1.4.7-3.el7_1.i686.rpm	7359da181c4bbb4db51a8776b59843c6f7705bd626580be95eccd6d5a833af8a	ELSA-2018-3059	ol7_x86_64_u1_patch
	libXfont-1.4.7-3.el7_1.x86_64.rpm	32c95f79e20575c950802e6adf24d0b552740daed08da8961e2042c83013442a	ELSA-2018-3059	ol7_x86_64_latest_archive
	libXfont-1.4.7-3.el7_1.x86_64.rpm	32c95f79e20575c950802e6adf24d0b552740daed08da8961e2042c83013442a	ELSA-2018-3059	ol7_x86_64_u1_patch
	libXfont-devel-1.4.7-3.el7_1.i686.rpm	08747dc2dd6a3f83e4e6d123f3d2c401f524d607972c087dd719396ed716b150	ELSA-2018-3059	ol7_x86_64_optional_archive
	libXfont-devel-1.4.7-3.el7_1.x86_64.rpm	ed8d5b313b1e89cdce506b9ed2f2f8abfb20322a369c137f13a3263f50688217	ELSA-2018-3059	ol7_x86_64_optional_archive

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team