[gentoo-announce] [ GLSA 201706-21 ] nettle: Information disclosure

[news 28]

-----BEGIN PGP SIGNED MESSAGE-----

Hash: SHA256

 

- -------------------------------------------------------------------------

Debian Security Advisory DSA-3894-1 security ( -at -) debian.org

https://www.debian.org/security/ Moritz Muehlenhoff

June 22, 2017 https://www.debian.org/security/faq

- -------------------------------------------------------------------------

 

Package : graphite2

CVE ID : CVE-2017-7771 CVE-2017-7772 CVE-2017-7773 CVE-2017-7774

CVE-2017-7775 CVE-2017-7776 CVE-2017-7777 CVE-2017-7778

 

Multiple vulnerabilities have been found in the Graphite font rendering

engine which might result in denial of service or the execution of

arbitrary code if a malformed font file is processed.

 

For the oldstable distribution (jessie), these problems have been fixed

in version 1.3.10-1~deb8u1.

 

For the stable distribution (stretch), these problems have been fixed

prior to the initial release.

 

We recommend that you upgrade your graphite2 packages.

 

Further information about Debian Security Advisories, how to apply

these updates to your system and frequently asked questions can be

found at: https://www.debian.org/security/