Security update for libXfont SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2015:0702-1 Final 1 1 2015-03-20T15:39:51Z current 2015-03-20T15:39:51Z 2015-03-20T15:39:51Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for libXfont LibXFont was updated to fix security problems. Following security issues were fixed: - CVE-2015-1802: The bdf parser reads a count for the number of properties defined in a font from the font file, and allocates arrays with entries for each property based on that count. It never checked to see if that count was negative, or large enough to overflow when multiplied by the size of the structures being allocated, and could thus allocate the wrong buffer size, leading to out of bounds writes. - CVE-2015-1803: If the bdf parser failed to parse the data for the bitmap for any character, it would proceed with an invalid pointer to the bitmap data and later crash when trying to read the bitmap from that pointer. - CVE-2015-1804: The bdf parser read metrics values as 32-bit integers, but stored them into 16-bit integers. Overflows could occur in various operations leading to out-of-bounds memory access. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-SLE-DESKTOP-12-2015-161,SUSE-SLE-SDK-12-2015-161,SUSE-SLE-SERVER-12-2015-161 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2015/suse-su-20150702-1/ Link for SUSE-SU-2015:0702-1 https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00005.html E-Mail link for SUSE-SU-2015:0702-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/921978 SUSE Bug 921978 https://www.suse.com/security/cve/CVE-2015-1802/ SUSE CVE CVE-2015-1802 page https://www.suse.com/security/cve/CVE-2015-1803/ SUSE CVE CVE-2015-1803 page https://www.suse.com/security/cve/CVE-2015-1804/ SUSE CVE CVE-2015-1804 page SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server for SAP Applications 12 SUSE Linux Enterprise Software Development Kit 12 libXfont1-1.4.7-4.1 libXfont-devel-1.4.7-4.1 libXfont1-1.4.7-4.1 as a component of SUSE Linux Enterprise Desktop 12 libXfont1-1.4.7-4.1 as a component of SUSE Linux Enterprise Server 12 libXfont1-1.4.7-4.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 libXfont-devel-1.4.7-4.1 as a component of SUSE Linux Enterprise Software Development Kit 12 The bdfReadProperties function in bitmap/bdfread.c in X.Org libXfont before 1.4.9 and 1.5.x before 1.5.1 allows remote authenticated users to cause a denial of service (out-of-bounds write and crash) or possibly execute arbitrary code via a (1) negative or (2) large property count in a BDF font file. CVE-2015-1802 SUSE Linux Enterprise Desktop 12:libXfont1-1.4.7-4.1 SUSE Linux Enterprise Server 12:libXfont1-1.4.7-4.1 SUSE Linux Enterprise Server for SAP Applications 12:libXfont1-1.4.7-4.1 SUSE Linux Enterprise Software Development Kit 12:libXfont-devel-1.4.7-4.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20150702-1/ https://www.suse.com/security/cve/CVE-2015-1802.html CVE-2015-1802 https://bugzilla.suse.com/921978 SUSE Bug 921978 The bdfReadCharacters function in bitmap/bdfread.c in X.Org libXfont before 1.4.9 and 1.5.x before 1.5.1 does not properly handle character bitmaps it cannot read, which allows remote authenticated users to cause a denial of service (NULL pointer dereference and crash) and possibly execute arbitrary code via a crafted BDF font file. CVE-2015-1803 SUSE Linux Enterprise Desktop 12:libXfont1-1.4.7-4.1 SUSE Linux Enterprise Server 12:libXfont1-1.4.7-4.1 SUSE Linux Enterprise Server for SAP Applications 12:libXfont1-1.4.7-4.1 SUSE Linux Enterprise Software Development Kit 12:libXfont-devel-1.4.7-4.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20150702-1/ https://www.suse.com/security/cve/CVE-2015-1803.html CVE-2015-1803 https://bugzilla.suse.com/921978 SUSE Bug 921978 The bdfReadCharacters function in bitmap/bdfread.c in X.Org libXfont before 1.4.9 and 1.5.x before 1.5.1 does not properly perform type conversion for metrics values, which allows remote authenticated users to cause a denial of service (out-of-bounds memory access) and possibly execute arbitrary code via a crafted BDF font file. CVE-2015-1804 SUSE Linux Enterprise Desktop 12:libXfont1-1.4.7-4.1 SUSE Linux Enterprise Server 12:libXfont1-1.4.7-4.1 SUSE Linux Enterprise Server for SAP Applications 12:libXfont1-1.4.7-4.1 SUSE Linux Enterprise Software Development Kit 12:libXfont-devel-1.4.7-4.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20150702-1/ https://www.suse.com/security/cve/CVE-2015-1804.html CVE-2015-1804 https://bugzilla.suse.com/921978 SUSE Bug 921978