Red Hat Security AdvisoryRHSA-2010:0607
freetype security update
Released 2010-08-05 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 freetype-2.1.4-16.el3, freetype-2.1.4-16.el3.i386, freetype-devel-2.1.4-16.el3 +1
- Red Hat Enterprise Linux (v. 5 server) freetype-2.2.1-26.el5_5, freetype-2.2.1-26.el5_5.i386, freetype-2.2.1-26.el5_5.ia64 +9
- Red Hat Enterprise Linux AS version 3 freetype-2.1.4-16.el3, freetype-2.1.4-16.el3.i386, freetype-2.1.4-16.el3.ia64 +5
- Red Hat Enterprise Linux AS version 4 freetype-2.1.9-15.el4.8, freetype-2.1.9-15.el4.8.i386, freetype-2.1.9-15.el4.8.ia64 +13
- Red Hat Enterprise Linux Desktop (v. 5 client) freetype-2.2.1-26.el5_5, freetype-2.2.1-26.el5_5.i386
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) freetype-2.2.1-26.el5_5, freetype-demos-2.2.1-26.el5_5, freetype-demos-2.2.1-26.el5_5.i386 +2
- Red Hat Enterprise Linux Desktop version 4 freetype-2.1.9-15.el4.8, freetype-2.1.9-15.el4.8.i386, freetype-demos-2.1.9-15.el4.8 +5
- Red Hat Enterprise Linux ES version 3 freetype-2.1.4-16.el3, freetype-2.1.4-16.el3.i386, freetype-2.1.4-16.el3.ia64 +3
- Red Hat Enterprise Linux ES version 4 freetype-2.1.9-15.el4.8, freetype-2.1.9-15.el4.8.i386, freetype-2.1.9-15.el4.8.ia64 +9
- Red Hat Enterprise Linux WS version 3 freetype-2.1.4-16.el3, freetype-2.1.4-16.el3.i386, freetype-2.1.4-16.el3.ia64 +3
- Red Hat Enterprise Linux WS version 4 freetype-2.1.9-15.el4.8, freetype-2.1.9-15.el4.8.i386, freetype-2.1.9-15.el4.8.ia64 +9
Fixes 1 record
Priority HIGH 65
Multiple stack-based buffer overflows in the cff_decoder_parse_charstrings function in the CFF Type2 CharStrings interpreter in cff/cffgload.c in FreeType before 2.4.2, as used in Apple iOS before 4.0.2 on the iPhone and…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.3393 · Published 2010-08-16 · Fixed CWE-119
