CVE ID:	CVE-2016-5384
Description:	fontconfig before 2.12.1 does not validate offsets, which allows local users to trigger arbitrary free calls and consequently conduct double free attacks and execute arbitrary code via a crafted cache file.
Test IDs:	1.3.6.1.4.1.25623.1.0.871704   1.3.6.1.4.1.25623.1.0.809130   1.3.6.1.4.1.25623.1.1.4.2016.2190.1   1.3.6.1.4.1.25623.1.0.842864   1.3.6.1.4.1.25623.1.1.1.2.2016.587   1.3.6.1.4.1.25623.1.0.808765   1.3.6.1.4.1.25623.1.0.703644   1.3.6.1.4.1.25623.1.1.4.2016.2186.1   1.3.6.1.4.1.25623.1.1.2.2016.1077   1.3.6.1.4.1.25623.1.1.10.2016.0287
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2016-5384 92339 http://www.securityfocus.com/bid/92339 DSA-3644 http://www.debian.org/security/2016/dsa-3644 FEDORA-2016-6802f2e52a https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6CJ45VRAMCIISHOVKFVOQYQUSTUJP7FC/ FEDORA-2016-e23ab56ce3 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GGOS4YYB7UYAWX5AEXJZHDIX4ZMSXSW5/ RHSA-2016:2601 http://rhn.redhat.com/errata/RHSA-2016-2601.html USN-3063-1 http://www.ubuntu.com/usn/USN-3063-1 [Fontconfig] 20160805 fontconfig: Branch 'master' - 3 commits https://lists.freedesktop.org/archives/fontconfig/2016-August/005792.html https://cgit.freedesktop.org/fontconfig/commit/?id=7a4a5bd7897d216f0794ca9dbce0a4a5c9d14940 https://cgit.freedesktop.org/fontconfig/commit/?id=7a4a5bd7897d216f0794ca9dbce0a4a5c9d14940