Red Hat Security AdvisoryRHSA-2007:0403
freetype security update
Released 2007-06-11 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 freetype-2.1.4-7.el3, freetype-2.1.4-7.el3.i386, freetype-devel-2.1.4-7.el3 +1
- Red Hat Enterprise Linux (v. 5 server) freetype-2.2.1-19.el5, freetype-2.2.1-19.el5.i386, freetype-2.2.1-19.el5.ia64 +9
- Red Hat Enterprise Linux AS (Advanced Server) version 2.1 freetype-2.0.3-10.el21, freetype-2.0.3-10.el21.i386, freetype-2.0.3-10.el21.ia64 +4
- Red Hat Enterprise Linux AS version 3 freetype-2.1.4-7.el3, freetype-2.1.4-7.el3.i386, freetype-2.1.4-7.el3.ia64 +5
- Red Hat Enterprise Linux AS version 4 freetype-2.1.9-6.el4, freetype-2.1.9-6.el4.i386, freetype-2.1.9-6.el4.ia64 +13
- Red Hat Enterprise Linux Desktop (v. 5 client) freetype-2.2.1-19.el5, freetype-2.2.1-19.el5.i386
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) freetype-2.2.1-19.el5, freetype-demos-2.2.1-19.el5, freetype-demos-2.2.1-19.el5.i386 +2
- Red Hat Enterprise Linux Desktop version 4 freetype-2.1.9-6.el4, freetype-2.1.9-6.el4.i386, freetype-demos-2.1.9-6.el4 +5
- Red Hat Enterprise Linux ES version 2.1 freetype-2.0.3-10.el21, freetype-2.0.3-10.el21.i386, freetype-devel-2.0.3-10.el21.i386 +1
- Red Hat Enterprise Linux ES version 3 freetype-2.1.4-7.el3, freetype-2.1.4-7.el3.i386, freetype-2.1.4-7.el3.ia64 +3
- Red Hat Enterprise Linux ES version 4 freetype-2.1.9-6.el4, freetype-2.1.9-6.el4.i386, freetype-2.1.9-6.el4.ia64 +9
- Red Hat Enterprise Linux WS version 2.1 freetype-2.0.3-10.el21, freetype-2.0.3-10.el21.i386, freetype-devel-2.0.3-10.el21.i386 +1
- Red Hat Enterprise Linux WS version 3 freetype-2.1.4-7.el3, freetype-2.1.4-7.el3.i386, freetype-2.1.4-7.el3.ia64 +3
- Red Hat Enterprise Linux WS version 4 freetype-2.1.9-6.el4, freetype-2.1.9-6.el4.i386, freetype-2.1.9-6.el4.ia64 +9
- Red Hat Linux Advanced Workstation 2.1 freetype-2.0.3-10.el21, freetype-2.0.3-10.el21.ia64, freetype-devel-2.0.3-10.el21.ia64 +1
Fixes 1 record
Priority LOW 39
Integer signedness error in truetype/ttgload.c in Freetype 2.3.4 and earlier might allow remote attackers to execute arbitrary code via a crafted TTF image with a negative n_points value, which leads to an integer overfl…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.05786 · Published 2007-05-17 · Fixed
