[Secure-testing-team] Bug#833570: fontconfig: CVE-2016-5384: possible double free due to insufficiently validated cache files

[Salvatore Bonaccorso]

Source: fontconfig
Version: 2.11.0-6.3
Severity: grave
Tags: security upstream patch fixed-upstream

Hi,

the following vulnerability was published for fontconfig.

CVE-2016-5384[0]:
possible double free due to insufficiently validated cache files

If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2016-5384
[1] https://cgit.freedesktop.org/fontconfig/commit/?id=7a4a5bd7897d216f0794ca9dbce0a4a5c9d14940

Regards,
Salvatore