Red Hat Security AdvisoryRHSA-2013:0216
freetype security update
Released 2013-01-31 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) freetype-2.2.1-32.el5_9.1, freetype-2.2.1-32.el5_9.1.i386, freetype-2.2.1-32.el5_9.1.ia64 +9
- Red Hat Enterprise Linux Desktop (v. 6) freetype-2.3.11-14.el6_3.1
- Red Hat Enterprise Linux Desktop Optional (v. 6) freetype-2.3.11-14.el6_3.1, freetype-demos-2.3.11-14.el6_3.1, freetype-devel-2.3.11-14.el6_3.1
- Red Hat Enterprise Linux HPC Node (v. 6) freetype-2.3.11-14.el6_3.1
- Red Hat Enterprise Linux HPC Node Optional (v. 6) freetype-2.3.11-14.el6_3.1, freetype-demos-2.3.11-14.el6_3.1, freetype-devel-2.3.11-14.el6_3.1
- Red Hat Enterprise Linux Server (v. 6) freetype-2.3.11-14.el6_3.1, freetype-2.3.11-14.el6_3.1.ppc, freetype-devel-2.3.11-14.el6_3.1 +1
- Red Hat Enterprise Linux Server Optional (v. 6) freetype-2.3.11-14.el6_3.1, freetype-demos-2.3.11-14.el6_3.1
- Red Hat Enterprise Linux Workstation (v. 6) freetype-2.3.11-14.el6_3.1, freetype-devel-2.3.11-14.el6_3.1
- Red Hat Enterprise Linux Workstation Optional (v. 6) freetype-2.3.11-14.el6_3.1, freetype-demos-2.3.11-14.el6_3.1
Fixes 1 record
Priority LOW 27
The _bdf_parse_glyphs function in FreeType before 2.4.11 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to BDF fonts and an incorrect calcu…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.03857 · Published 2013-01-24 · Fixed CWE-119
