Red Hat Security AdvisoryRHSA-2008:0556
freetype security update
Released 2008-06-20 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 freetype-2.1.4-10.el3, freetype-2.1.4-10.el3.i386, freetype-devel-2.1.4-10.el3 +1
- Red Hat Enterprise Linux (v. 5 server) freetype-2.2.1-20.el5_2, freetype-2.2.1-20.el5_2.i386, freetype-2.2.1-20.el5_2.ia64 +9
- Red Hat Enterprise Linux AS version 3 freetype-2.1.4-10.el3, freetype-2.1.4-10.el3.i386, freetype-2.1.4-10.el3.ia64 +5
- Red Hat Enterprise Linux AS version 4 freetype-2.1.9-8.el4.6, freetype-2.1.9-8.el4.6.i386, freetype-2.1.9-8.el4.6.ia64 +13
- Red Hat Enterprise Linux Desktop (v. 5 client) freetype-2.2.1-20.el5_2, freetype-2.2.1-20.el5_2.i386
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) freetype-2.2.1-20.el5_2, freetype-demos-2.2.1-20.el5_2, freetype-demos-2.2.1-20.el5_2.i386 +2
- Red Hat Enterprise Linux Desktop version 4 freetype-2.1.9-8.el4.6, freetype-2.1.9-8.el4.6.i386, freetype-demos-2.1.9-8.el4.6 +5
- Red Hat Enterprise Linux ES version 3 freetype-2.1.4-10.el3, freetype-2.1.4-10.el3.i386, freetype-2.1.4-10.el3.ia64 +3
- Red Hat Enterprise Linux ES version 4 freetype-2.1.9-8.el4.6, freetype-2.1.9-8.el4.6.i386, freetype-2.1.9-8.el4.6.ia64 +9
- Red Hat Enterprise Linux WS version 3 freetype-2.1.4-10.el3, freetype-2.1.4-10.el3.i386, freetype-2.1.4-10.el3.ia64 +3
- Red Hat Enterprise Linux WS version 4 freetype-2.1.9-8.el4.6, freetype-2.1.9-8.el4.6.i386, freetype-2.1.9-8.el4.6.ia64 +9
Fixes 3 records
Priority MEDIUM 40
Multiple off-by-one errors in FreeType2 before 2.3.6 allow context-dependent attackers to execute arbitrary code via (1) a crafted table in a Printer Font Binary (PFB) file or (2) a crafted SHC instruction in a TrueType…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.04217 · Published 2008-06-16 · Fixed CWE-189
Priority MEDIUM 40
Integer overflow in FreeType2 before 2.3.6 allows context-dependent attackers to execute arbitrary code via a crafted set of 16-bit length values within the Private dictionary table in a Printer Font Binary (PFB) file, w…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.0407 · Published 2008-06-16 · Fixed CWE-189
Priority LOW 39
FreeType2 before 2.3.6 allow context-dependent attackers to execute arbitrary code via an invalid "number of axes" field in a Printer Font Binary (PFB) file, which triggers a free of arbitrary memory locations, leading t…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.03585 · Published 2008-06-16 · Fixed CWE-189
THREATIST.IORead the docs