Branch t7 update bulletin.

Package thunderbird updated to version 38.6.0-alt0.M70P.1 for branch t7 in task 159928.

Published: 2016-02-13

BDU:2016-00573

Уязвимость браузеров Firefox ESR и Firefox, программного средства рендеринга Graphite 2, почтового клиента Thunderbird, позволяющая нарушителю вызвать отказ в обслуживании, получить конфиденциальную информацию или выполнить произвольный код

Severity: CRITICAL (9.3)

References:

CVE-2016-1521

Published: 2016-02-13

BDU:2016-00574

Уязвимость браузера Firefox ESR, программного средства рендеринга Graphite 2, почтового клиента Thunderbird, позволяющая нарушителю вызвать отказ в обслуживании или выполнить произвольный код

Severity: CRITICAL (9.3)

References:

CVE-2016-1522

Published: 2016-02-13

BDU:2016-00575

Уязвимость браузера Firefox ESR, программного средства рендеринга Graphite 2, почтового клиента Thunderbird, позволяющая нарушителю вызвать отказ в обслуживании

Severity: MEDIUM (4.3)

References:

CVE-2016-1523

Published: 2016-02-13

BDU:2016-00576

Уязвимость браузера Firefox ESR, программного средства рендеринга Graphite 2, почтового клиента Thunderbird, позволяющая нарушителю вызвать отказ в обслуживании или получить конфиденциальную информацию

Severity: MEDIUM (5.8)

References:

CVE-2016-1526

Published: 2016-02-13
Modified: 2024-11-21

CVE-2016-1521

The directrun function in directmachine.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.6.1, does not validate a certain skip operation, which allows remote attackers to execute arbitrary code, obtain sensitive information, or cause a denial of service (out-of-bounds read and application crash) via a crafted Graphite smart font.

Severity: HIGH (8.8) Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References:

Published: 2016-02-13
Modified: 2024-11-21

CVE-2016-1522

Code.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.6.1, does not consider recursive load calls during a size check, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly execute arbitrary code via a crafted Graphite smart font.

Severity: HIGH (8.8) Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References:

Published: 2016-02-13
Modified: 2024-11-21

CVE-2016-1523

The SillMap::readFace function in FeatureMap.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.6.1, mishandles a return value, which allows remote attackers to cause a denial of service (missing initialization, NULL pointer dereference, and application crash) via a crafted Graphite smart font.

Severity: MEDIUM (6.5) Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

References:

Published: 2016-02-13
Modified: 2024-11-21

CVE-2016-1526

The TtfUtil:LocaLookup function in TtfUtil.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.6.1, incorrectly validates a size value, which allows remote attackers to obtain sensitive information or cause a denial of service (out-of-bounds read and application crash) via a crafted Graphite smart font.

Severity: HIGH (8.1) Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H

References:

No data currently available.

Package xorg-drv-vmware updated to version 13.1.0-alt1.M70P.1 for branch t7 in task 159928.

xorg-drv-vmware broken

Version: 2.1.0

Branch t7 update on 2016-02-25

ALT-BU-2016-2606-1

ALT-PU-2016-1146-1

Closed vulnerabilities

BDU:2016-00573

BDU:2016-00574

BDU:2016-00575

BDU:2016-00576

CVE-2016-1521

CVE-2016-1522

CVE-2016-1523

CVE-2016-1526

MFSA 2015-15

MFSA 2016-01

MFSA 2016-03

MFSA 2016-14

ALT-PU-2016-1147-1

Closed bugs

Bug #31830