(RHSA-2016:22711) Important: graphite2 security, bug fix, and enhancement update

Graphite2 is a project within SIL’s Non-Roman Script Initiative and
Language Software Development groups to provide rendering capabilities for
complex non-Roman writing systems. Graphite can be used to create “smart
fonts” capable of displaying writing systems with various complex
behaviors. With respect to the Text Encoding Model, Graphite handles the
“Rendering” aspect of writing system implementation.

Various vulnerabilities have been discovered in Graphite2. An attacker able
to trick an unsuspecting user into opening specially crafted font files in
an application using Graphite2 could exploit these flaws to cause the
application to crash or, potentially, execute arbitrary code with the
privileges of the application. (CVE-2016-1521, CVE-2016-1522,
CVE-2016-1523, CVE-2016-1526)

The graphite2 packages have been upgraded to upstream version 1.3.6, which
provides a number of bug fixes and enhancements over the previous version.

All graphite2 users are advised to upgrade to these updated packages, which
correct these issues and add these enhancements. For the update to take
effect, all applications linked to Graphite2 must be restarted.