An update for graphite2 is now available for Red Hat Enterprise Linux 7.Red Hat Product Security has rated this update as having a security impact ofImportant.

A Common Vulnerability Scoring System (CVSS) base score, which givesa detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section.
Graphite2 is a project within SIL’s Non-Roman Script Initiative and LanguageSoftware Development groups to provide rendering capabilities for complexnon-Roman writing systems.

Graphite can be used to create “smart fonts” capableof displaying writing systems with various complex behaviors. With respect tothe Text Encoding Model, Graphite handles the “Rendering” aspect of writingsystem implementation.The following packages have been upgraded to a newer upstream version: graphite2(1.3.6).Security Fix(es):* Various vulnerabilities have been discovered in Graphite2.

An attacker able totrick an unsuspecting user into opening specially crafted font files in anapplication using Graphite2 could exploit these flaws to cause the applicationto crash or, potentially, execute arbitrary code with the privileges of theapplication. (CVE-2016-1521, CVE-2016-1522, CVE-2016-1523, CVE-2016-1526)
Red Hat Enterprise Linux Desktop (v. 7)

SRPMS:
graphite2-1.3.6-1.el7_2.src.rpm
    MD5: c2c58705a15df04121227d0533e495f6SHA-256: a52937d56c08a18d80a3ea7037ea542b8b593454b69929b94d1d9bbb415fd26c
 
x86_64:
graphite2-1.3.6-1.el7_2.i686.rpm
    MD5: b830f3bf6bb55c1129f5f827a629f5d4SHA-256: 6bd05ef9c68a323450ad093215ed088624072f523a8658f4f2f209df1b2b84a8
graphite2-1.3.6-1.el7_2.x86_64.rpm
    MD5: c11ebb4a95df94019fcf2d08200a6764SHA-256: e540125ac77758247a4e7016b6e8e438eb7f06c976b0991809db23410e6a2f03
graphite2-debuginfo-1.3.6-1.el7_2.i686.rpm
    MD5: 93e258ea1e516c3b63c0b2d370d3364aSHA-256: df35f4af004743bc7e894ce6f93a37e8c040d95ad48f3f79de01965692f24c40
graphite2-debuginfo-1.3.6-1.el7_2.x86_64.rpm
    MD5: 48dc6058bf04fc625d9dc86c48491938SHA-256: bd48a451a581f14b24dcb5ec0b08e7bf4e7af8e601cf3bad5b3c85569c94714d
graphite2-devel-1.3.6-1.el7_2.i686.rpm
    MD5: 305b0320587d47b5e9c5316a74879c43SHA-256: 5fd5a789700076ba208d45cbdccd591ff43e182d48a4985d00b96711ec736d6c
graphite2-devel-1.3.6-1.el7_2.x86_64.rpm
    MD5: 9f74807dd9b3677aa882ec2ddadc6717SHA-256: 1f930a4b06ffa10c43dab9d7409b9b5df8c05effdccaa02e8cb26f6266bce662
 
Red Hat Enterprise Linux HPC Node (v. 7)

SRPMS:
graphite2-1.3.6-1.el7_2.src.rpm
    MD5: c2c58705a15df04121227d0533e495f6SHA-256: a52937d56c08a18d80a3ea7037ea542b8b593454b69929b94d1d9bbb415fd26c
 
x86_64:
graphite2-1.3.6-1.el7_2.i686.rpm
    MD5: b830f3bf6bb55c1129f5f827a629f5d4SHA-256: 6bd05ef9c68a323450ad093215ed088624072f523a8658f4f2f209df1b2b84a8
graphite2-1.3.6-1.el7_2.x86_64.rpm
    MD5: c11ebb4a95df94019fcf2d08200a6764SHA-256: e540125ac77758247a4e7016b6e8e438eb7f06c976b0991809db23410e6a2f03
graphite2-debuginfo-1.3.6-1.el7_2.i686.rpm
    MD5: 93e258ea1e516c3b63c0b2d370d3364aSHA-256: df35f4af004743bc7e894ce6f93a37e8c040d95ad48f3f79de01965692f24c40
graphite2-debuginfo-1.3.6-1.el7_2.x86_64.rpm
    MD5: 48dc6058bf04fc625d9dc86c48491938SHA-256: bd48a451a581f14b24dcb5ec0b08e7bf4e7af8e601cf3bad5b3c85569c94714d
graphite2-devel-1.3.6-1.el7_2.i686.rpm
    MD5: 305b0320587d47b5e9c5316a74879c43SHA-256: 5fd5a789700076ba208d45cbdccd591ff43e182d48a4985d00b96711ec736d6c
graphite2-devel-1.3.6-1.el7_2.x86_64.rpm
    MD5: 9f74807dd9b3677aa882ec2ddadc6717SHA-256: 1f930a4b06ffa10c43dab9d7409b9b5df8c05effdccaa02e8cb26f6266bce662
 
Red Hat Enterprise Linux HPC Node EUS (v. 7.2)

SRPMS:
graphite2-1.3.6-1.el7_2.src.rpm
    MD5: c2c58705a15df04121227d0533e495f6SHA-256: a52937d56c08a18d80a3ea7037ea542b8b593454b69929b94d1d9bbb415fd26c
 
x86_64:
graphite2-1.3.6-1.el7_2.i686.rpm
    MD5: b830f3bf6bb55c1129f5f827a629f5d4SHA-256: 6bd05ef9c68a323450ad093215ed088624072f523a8658f4f2f209df1b2b84a8
graphite2-1.3.6-1.el7_2.x86_64.rpm
    MD5: c11ebb4a95df94019fcf2d08200a6764SHA-256: e540125ac77758247a4e7016b6e8e438eb7f06c976b0991809db23410e6a2f03
graphite2-debuginfo-1.3.6-1.el7_2.i686.rpm
    MD5: 93e258ea1e516c3b63c0b2d370d3364aSHA-256: df35f4af004743bc7e894ce6f93a37e8c040d95ad48f3f79de01965692f24c40
graphite2-debuginfo-1.3.6-1.el7_2.x86_64.rpm
    MD5: 48dc6058bf04fc625d9dc86c48491938SHA-256: bd48a451a581f14b24dcb5ec0b08e7bf4e7af8e601cf3bad5b3c85569c94714d
graphite2-devel-1.3.6-1.el7_2.i686.rpm
    MD5: 305b0320587d47b5e9c5316a74879c43SHA-256: 5fd5a789700076ba208d45cbdccd591ff43e182d48a4985d00b96711ec736d6c
graphite2-devel-1.3.6-1.el7_2.x86_64.rpm
    MD5: 9f74807dd9b3677aa882ec2ddadc6717SHA-256: 1f930a4b06ffa10c43dab9d7409b9b5df8c05effdccaa02e8cb26f6266bce662
 
Red Hat Enterprise Linux Server (v. 7)

SRPMS:
graphite2-1.3.6-1.el7_2.src.rpm
    MD5: c2c58705a15df04121227d0533e495f6SHA-256: a52937d56c08a18d80a3ea7037ea542b8b593454b69929b94d1d9bbb415fd26c
 
PPC:
graphite2-1.3.6-1.el7_2.ppc.rpm
    MD5: 55c3c262e914ed0ea2fe0edd197fd117SHA-256: 7a0c1e9ee464bcd0baab62fcb527593f8030d27978cacf99b276894b57243d56
graphite2-1.3.6-1.el7_2.ppc64.rpm
    MD5: b7e3303df18a8b4a1094185b84f580c2SHA-256: 90d6b385d4408c4aee7241b433a49224199bb277e544627682398d49fef6a2c2
graphite2-debuginfo-1.3.6-1.el7_2.ppc.rpm
    MD5: 4674c131a8bae1bc4c1cd2c02f921d6eSHA-256: 70b15258ba7805a9ed1914af6436411beabaadce21bef12fea8f86edc5f91dcd
graphite2-debuginfo-1.3.6-1.el7_2.ppc64.rpm
    MD5: 18f425335b74023cfcd89ed01d6e4cb2SHA-256: df2966202a46c0bcd4e90b703853951c797b525bbb33afeec22d334941cae5eb
graphite2-devel-1.3.6-1.el7_2.ppc.rpm
    MD5: 0ef106f121aea09987aa4a0e200c4e63SHA-256: d66ed120feecb8312d1737764c5bb6fe47b9dd3ea18ad329f83a0659771ba5db
graphite2-devel-1.3.6-1.el7_2.ppc64.rpm
    MD5: ba27ab44da0a19e350c836bc73fb765eSHA-256: 05600e6a6aafcd16ceb8d5a4da2465ee51d201211971f074c3ac92dc65be0d74
 
PPC64LE:
graphite2-1.3.6-1.el7_2.ppc64le.rpm
    MD5: 275421928030dd34c4abb575632f2c6eSHA-256: 6fdd285fda6ead999994324754b58d90fe0fbd4a8e7d41924d2421eba36b23b1
graphite2-debuginfo-1.3.6-1.el7_2.ppc64le.rpm
    MD5: 81e14ac9bbd7c0f0ebf679b9b2f54401SHA-256: 1e35e58fa17d942397836eb26d8e4f09ba7207426bf66fa384b86c04738474be
graphite2-devel-1.3.6-1.el7_2.ppc64le.rpm
    MD5: 2f64faf4787c6d0a83aaf68474b2757fSHA-256: e332ed12277fc714158edd3a76008b7081a2a65da1d0247f6f72514fffeef7cf
 
s390x:
graphite2-1.3.6-1.el7_2.s390.rpm
    MD5: ee02d979f823d7f89224de79970b3130SHA-256: f1f3178a2cbbc9ae59e18a3689acf9427941685dc97051da5bfd4e121a60b2ad
graphite2-1.3.6-1.el7_2.s390x.rpm
    MD5: 48788d430c18a7853aa3bb98e9d6e937SHA-256: 7f9b7aff8d950b071c8c017d7a7c71067a9814818e46f79b4997cce734c3b6ea
graphite2-debuginfo-1.3.6-1.el7_2.s390.rpm
    MD5: 33d3307d983ef3160aaf492e17a7a3ecSHA-256: 230bc88f48bf2d11d9cbc236cffe49ef2317e9d2fe577668dab5ef4ca96f3665
graphite2-debuginfo-1.3.6-1.el7_2.s390x.rpm
    MD5: 88abc836d6fce6fc9610d9fb01dd624cSHA-256: 29a2797c575eee28cc22440640950407a9e600d39b1d718fd541f793de20609c
graphite2-devel-1.3.6-1.el7_2.s390.rpm
    MD5: abcca179e1beb3f4fa9d9aee002605a1SHA-256: 7253a0c69b5a93817c0f0424f113e8888da34e80c262d5643e8a2ea0c6918c16
graphite2-devel-1.3.6-1.el7_2.s390x.rpm
    MD5: 0e19dafa3e003e27dcac83d7269e501dSHA-256: 9518c79b9b132499b814a0596c44f2616b5f071d8d0818b90d8d603e61d6ee22
 
x86_64:
graphite2-1.3.6-1.el7_2.i686.rpm
    MD5: b830f3bf6bb55c1129f5f827a629f5d4SHA-256: 6bd05ef9c68a323450ad093215ed088624072f523a8658f4f2f209df1b2b84a8
graphite2-1.3.6-1.el7_2.x86_64.rpm
    MD5: c11ebb4a95df94019fcf2d08200a6764SHA-256: e540125ac77758247a4e7016b6e8e438eb7f06c976b0991809db23410e6a2f03
graphite2-debuginfo-1.3.6-1.el7_2.i686.rpm
    MD5: 93e258ea1e516c3b63c0b2d370d3364aSHA-256: df35f4af004743bc7e894ce6f93a37e8c040d95ad48f3f79de01965692f24c40
graphite2-debuginfo-1.3.6-1.el7_2.x86_64.rpm
    MD5: 48dc6058bf04fc625d9dc86c48491938SHA-256: bd48a451a581f14b24dcb5ec0b08e7bf4e7af8e601cf3bad5b3c85569c94714d
graphite2-devel-1.3.6-1.el7_2.i686.rpm
    MD5: 305b0320587d47b5e9c5316a74879c43SHA-256: 5fd5a789700076ba208d45cbdccd591ff43e182d48a4985d00b96711ec736d6c
graphite2-devel-1.3.6-1.el7_2.x86_64.rpm
    MD5: 9f74807dd9b3677aa882ec2ddadc6717SHA-256: 1f930a4b06ffa10c43dab9d7409b9b5df8c05effdccaa02e8cb26f6266bce662
 
Red Hat Enterprise Linux Server AUS (v. 7.2)

SRPMS:
graphite2-1.3.6-1.el7_2.src.rpm
    MD5: c2c58705a15df04121227d0533e495f6SHA-256: a52937d56c08a18d80a3ea7037ea542b8b593454b69929b94d1d9bbb415fd26c
 
x86_64:
graphite2-1.3.6-1.el7_2.i686.rpm
    MD5: b830f3bf6bb55c1129f5f827a629f5d4SHA-256: 6bd05ef9c68a323450ad093215ed088624072f523a8658f4f2f209df1b2b84a8
graphite2-1.3.6-1.el7_2.x86_64.rpm
    MD5: c11ebb4a95df94019fcf2d08200a6764SHA-256: e540125ac77758247a4e7016b6e8e438eb7f06c976b0991809db23410e6a2f03
graphite2-debuginfo-1.3.6-1.el7_2.i686.rpm
    MD5: 93e258ea1e516c3b63c0b2d370d3364aSHA-256: df35f4af004743bc7e894ce6f93a37e8c040d95ad48f3f79de01965692f24c40
graphite2-debuginfo-1.3.6-1.el7_2.x86_64.rpm
    MD5: 48dc6058bf04fc625d9dc86c48491938SHA-256: bd48a451a581f14b24dcb5ec0b08e7bf4e7af8e601cf3bad5b3c85569c94714d
graphite2-devel-1.3.6-1.el7_2.i686.rpm
    MD5: 305b0320587d47b5e9c5316a74879c43SHA-256: 5fd5a789700076ba208d45cbdccd591ff43e182d48a4985d00b96711ec736d6c
graphite2-devel-1.3.6-1.el7_2.x86_64.rpm
    MD5: 9f74807dd9b3677aa882ec2ddadc6717SHA-256: 1f930a4b06ffa10c43dab9d7409b9b5df8c05effdccaa02e8cb26f6266bce662
 
Red Hat Enterprise Linux Server EUS (v. 7.2)

SRPMS:
graphite2-1.3.6-1.el7_2.src.rpm
    MD5: c2c58705a15df04121227d0533e495f6SHA-256: a52937d56c08a18d80a3ea7037ea542b8b593454b69929b94d1d9bbb415fd26c
 
PPC:
graphite2-1.3.6-1.el7_2.ppc.rpm
    MD5: 55c3c262e914ed0ea2fe0edd197fd117SHA-256: 7a0c1e9ee464bcd0baab62fcb527593f8030d27978cacf99b276894b57243d56
graphite2-1.3.6-1.el7_2.ppc64.rpm
    MD5: b7e3303df18a8b4a1094185b84f580c2SHA-256: 90d6b385d4408c4aee7241b433a49224199bb277e544627682398d49fef6a2c2
graphite2-debuginfo-1.3.6-1.el7_2.ppc.rpm
    MD5: 4674c131a8bae1bc4c1cd2c02f921d6eSHA-256: 70b15258ba7805a9ed1914af6436411beabaadce21bef12fea8f86edc5f91dcd
graphite2-debuginfo-1.3.6-1.el7_2.ppc64.rpm
    MD5: 18f425335b74023cfcd89ed01d6e4cb2SHA-256: df2966202a46c0bcd4e90b703853951c797b525bbb33afeec22d334941cae5eb
graphite2-devel-1.3.6-1.el7_2.ppc.rpm
    MD5: 0ef106f121aea09987aa4a0e200c4e63SHA-256: d66ed120feecb8312d1737764c5bb6fe47b9dd3ea18ad329f83a0659771ba5db
graphite2-devel-1.3.6-1.el7_2.ppc64.rpm
    MD5: ba27ab44da0a19e350c836bc73fb765eSHA-256: 05600e6a6aafcd16ceb8d5a4da2465ee51d201211971f074c3ac92dc65be0d74
 
PPC64LE:
graphite2-1.3.6-1.el7_2.ppc64le.rpm
    MD5: 275421928030dd34c4abb575632f2c6eSHA-256: 6fdd285fda6ead999994324754b58d90fe0fbd4a8e7d41924d2421eba36b23b1
graphite2-debuginfo-1.3.6-1.el7_2.ppc64le.rpm
    MD5: 81e14ac9bbd7c0f0ebf679b9b2f54401SHA-256: 1e35e58fa17d942397836eb26d8e4f09ba7207426bf66fa384b86c04738474be
graphite2-devel-1.3.6-1.el7_2.ppc64le.rpm
    MD5: 2f64faf4787c6d0a83aaf68474b2757fSHA-256: e332ed12277fc714158edd3a76008b7081a2a65da1d0247f6f72514fffeef7cf
 
s390x:
graphite2-1.3.6-1.el7_2.s390.rpm
    MD5: ee02d979f823d7f89224de79970b3130SHA-256: f1f3178a2cbbc9ae59e18a3689acf9427941685dc97051da5bfd4e121a60b2ad
graphite2-1.3.6-1.el7_2.s390x.rpm
    MD5: 48788d430c18a7853aa3bb98e9d6e937SHA-256: 7f9b7aff8d950b071c8c017d7a7c71067a9814818e46f79b4997cce734c3b6ea
graphite2-debuginfo-1.3.6-1.el7_2.s390.rpm
    MD5: 33d3307d983ef3160aaf492e17a7a3ecSHA-256: 230bc88f48bf2d11d9cbc236cffe49ef2317e9d2fe577668dab5ef4ca96f3665
graphite2-debuginfo-1.3.6-1.el7_2.s390x.rpm
    MD5: 88abc836d6fce6fc9610d9fb01dd624cSHA-256: 29a2797c575eee28cc22440640950407a9e600d39b1d718fd541f793de20609c
graphite2-devel-1.3.6-1.el7_2.s390.rpm
    MD5: abcca179e1beb3f4fa9d9aee002605a1SHA-256: 7253a0c69b5a93817c0f0424f113e8888da34e80c262d5643e8a2ea0c6918c16
graphite2-devel-1.3.6-1.el7_2.s390x.rpm
    MD5: 0e19dafa3e003e27dcac83d7269e501dSHA-256: 9518c79b9b132499b814a0596c44f2616b5f071d8d0818b90d8d603e61d6ee22
 
x86_64:
graphite2-1.3.6-1.el7_2.i686.rpm
    MD5: b830f3bf6bb55c1129f5f827a629f5d4SHA-256: 6bd05ef9c68a323450ad093215ed088624072f523a8658f4f2f209df1b2b84a8
graphite2-1.3.6-1.el7_2.x86_64.rpm
    MD5: c11ebb4a95df94019fcf2d08200a6764SHA-256: e540125ac77758247a4e7016b6e8e438eb7f06c976b0991809db23410e6a2f03
graphite2-debuginfo-1.3.6-1.el7_2.i686.rpm
    MD5: 93e258ea1e516c3b63c0b2d370d3364aSHA-256: df35f4af004743bc7e894ce6f93a37e8c040d95ad48f3f79de01965692f24c40
graphite2-debuginfo-1.3.6-1.el7_2.x86_64.rpm
    MD5: 48dc6058bf04fc625d9dc86c48491938SHA-256: bd48a451a581f14b24dcb5ec0b08e7bf4e7af8e601cf3bad5b3c85569c94714d
graphite2-devel-1.3.6-1.el7_2.i686.rpm
    MD5: 305b0320587d47b5e9c5316a74879c43SHA-256: 5fd5a789700076ba208d45cbdccd591ff43e182d48a4985d00b96711ec736d6c
graphite2-devel-1.3.6-1.el7_2.x86_64.rpm
    MD5: 9f74807dd9b3677aa882ec2ddadc6717SHA-256: 1f930a4b06ffa10c43dab9d7409b9b5df8c05effdccaa02e8cb26f6266bce662
 
Red Hat Enterprise Linux Workstation (v. 7)

SRPMS:
graphite2-1.3.6-1.el7_2.src.rpm
    MD5: c2c58705a15df04121227d0533e495f6SHA-256: a52937d56c08a18d80a3ea7037ea542b8b593454b69929b94d1d9bbb415fd26c
 
x86_64:
graphite2-1.3.6-1.el7_2.i686.rpm
    MD5: b830f3bf6bb55c1129f5f827a629f5d4SHA-256: 6bd05ef9c68a323450ad093215ed088624072f523a8658f4f2f209df1b2b84a8
graphite2-1.3.6-1.el7_2.x86_64.rpm
    MD5: c11ebb4a95df94019fcf2d08200a6764SHA-256: e540125ac77758247a4e7016b6e8e438eb7f06c976b0991809db23410e6a2f03
graphite2-debuginfo-1.3.6-1.el7_2.i686.rpm
    MD5: 93e258ea1e516c3b63c0b2d370d3364aSHA-256: df35f4af004743bc7e894ce6f93a37e8c040d95ad48f3f79de01965692f24c40
graphite2-debuginfo-1.3.6-1.el7_2.x86_64.rpm
    MD5: 48dc6058bf04fc625d9dc86c48491938SHA-256: bd48a451a581f14b24dcb5ec0b08e7bf4e7af8e601cf3bad5b3c85569c94714d
graphite2-devel-1.3.6-1.el7_2.i686.rpm
    MD5: 305b0320587d47b5e9c5316a74879c43SHA-256: 5fd5a789700076ba208d45cbdccd591ff43e182d48a4985d00b96711ec736d6c
graphite2-devel-1.3.6-1.el7_2.x86_64.rpm
    MD5: 9f74807dd9b3677aa882ec2ddadc6717SHA-256: 1f930a4b06ffa10c43dab9d7409b9b5df8c05effdccaa02e8cb26f6266bce662
 
(The unlinked packages above are only available from the Red Hat Network)

These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from: