MGASA-2016-0077

Advisory lineage Upstream: 4 Downstream: 0
Published: 17 Feb 2016, 19:06
Last modified:16 Apr 2026, 06:25

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

17 Feb 2016, 19:06
Published
Vulnerability first disclosed
16 Apr 2026, 06:25
Last Modified
Vulnerability information updated

Description

Updated graphite2/firefox packages fix security vulnerability Multiple vulnerabilities in the graphite2 font library can result in information disclosure, denial-of-service (application crashes), or code execution via out-of-bounds reads, a NULL pointer dereference, and a heap-based buffer overflow (CVE-2016-1521, CVE-2016-1522, CVE-2016-1523, CVE-2016-1526). Firefox includes a bundled copy of the graphite2 library, which has been updated in Firefox ESR 38.6.1.

Affected Systems

  • mageia•firefox

    < 38.6.1-1.mga5

  • mageia•firefox-l10n

    < 38.6.1-1.mga5

  • mageia•graphite2

    < 1.3.5-1.mga5

References (11)