[Secure-testing-commits] r43802 - data/CVE

Sat Aug 6 08:14:17 UTC 2016

Author: carnil
Date: 2016-08-06 08:14:17 +0000 (Sat, 06 Aug 2016)
New Revision: 43802

Modified:
   data/CVE/list
Log:
Add CVE-2016-5384/fontconfig

Modified: data/CVE/list
===================================================================

--- data/CVE/list	2016-08-06 05:46:19 UTC (rev 43801)
+++ data/CVE/list	2016-08-06 08:14:17 UTC (rev 43802)
@@ -3692,8 +3692,11 @@
 	- php5 5.6.24+dfsg-1
 	NOTE: PHP Bug: https://bugs.php.net/bug.php?id=72573
 	NOTE: Fixed in 7.0.9, 5.6.24, 5.5.38
-CVE-2016-5384
+CVE-2016-5384 [possible double free due to insufficiently validated cache files]
 	RESERVED
+	- fontconfig <unfixed>
+	NOTE: https://lists.freedesktop.org/archives/fontconfig/2016-August/005792.html
+	NOTE: Fixed by: https://cgit.freedesktop.org/fontconfig/commit/?id=7a4a5bd7897d216f0794ca9dbce0a4a5c9d14940 (2.12.1)
 CVE-2016-5383
 	RESERVED
 CVE-2016-5382


