Red Hat Security Advisory

RHSA-2010:0889

freetype security update

Released 2010-11-16 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux (v. 5 server) freetype-2.2.1-28.el5_5.1, freetype-2.2.1-28.el5_5.1.i386, freetype-2.2.1-28.el5_5.1.ia64 +9
Red Hat Enterprise Linux AS version 4 freetype-2.1.9-17.el4_8.1, freetype-2.1.9-17.el4_8.1.i386, freetype-2.1.9-17.el4_8.1.ia64 +13
Red Hat Enterprise Linux Desktop (v. 5 client) freetype-2.2.1-28.el5_5.1, freetype-2.2.1-28.el5_5.1.i386
Red Hat Enterprise Linux Desktop (v. 6) freetype-2.3.11-6.el6_0.2
Red Hat Enterprise Linux Desktop Optional (v. 6) freetype-2.3.11-6.el6_0.2, freetype-demos-2.3.11-6.el6_0.2, freetype-devel-2.3.11-6.el6_0.2
Red Hat Enterprise Linux Desktop Workstation (v. 5 client) freetype-2.2.1-28.el5_5.1, freetype-demos-2.2.1-28.el5_5.1, freetype-demos-2.2.1-28.el5_5.1.i386 +2
Red Hat Enterprise Linux Desktop version 4 freetype-2.1.9-17.el4_8.1, freetype-2.1.9-17.el4_8.1.i386, freetype-demos-2.1.9-17.el4_8.1 +5
Red Hat Enterprise Linux ES version 4 freetype-2.1.9-17.el4_8.1, freetype-2.1.9-17.el4_8.1.i386, freetype-2.1.9-17.el4_8.1.ia64 +9
Red Hat Enterprise Linux HPC Node (v. 6) freetype-2.3.11-6.el6_0.2
Red Hat Enterprise Linux HPC Node Optional (v. 6) freetype-2.3.11-6.el6_0.2, freetype-demos-2.3.11-6.el6_0.2, freetype-devel-2.3.11-6.el6_0.2
Red Hat Enterprise Linux Server (v. 6) freetype-2.3.11-6.el6_0.2, freetype-2.3.11-6.el6_0.2.ppc, freetype-devel-2.3.11-6.el6_0.2 +1
Red Hat Enterprise Linux Server Optional (v. 6) freetype-2.3.11-6.el6_0.2, freetype-demos-2.3.11-6.el6_0.2
Red Hat Enterprise Linux WS version 4 freetype-2.1.9-17.el4_8.1, freetype-2.1.9-17.el4_8.1.i386, freetype-2.1.9-17.el4_8.1.ia64 +9
Red Hat Enterprise Linux Workstation (v. 6) freetype-2.3.11-6.el6_0.2, freetype-devel-2.3.11-6.el6_0.2
Red Hat Enterprise Linux Workstation Optional (v. 6) freetype-2.3.11-6.el6_0.2, freetype-demos-2.3.11-6.el6_0.2

Fixes 1 record

TI-2010-03662 CVE-2010-3855 · GHSA-46rp-652m-9xgq

Buffer overflow in the ft_var_readpackedpoints function in truetype/ttgxvar.c in FreeType…

LOW 38

Buffer overflow in the ft_var_readpackedpoints function in truetype/ttgxvar.c in FreeType 2.4.3 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.05115 Published 2010-11-26 Fixed CWE-119