Red Hat Security AdvisoryRHSA-2019:4254
freetype security update
Released 2019-12-17 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) freetype-2.3.11-19.el6_10
- Red Hat Enterprise Linux Desktop Optional (v. 6) freetype-demos-2.3.11-19.el6_10, freetype-devel-2.3.11-19.el6_10
- Red Hat Enterprise Linux HPC Node (v. 6) freetype-2.3.11-19.el6_10
- Red Hat Enterprise Linux HPC Node Optional (v. 6) freetype-demos-2.3.11-19.el6_10, freetype-devel-2.3.11-19.el6_10
- Red Hat Enterprise Linux Server (v. 6) freetype-2.3.11-19.el6_10, freetype-2.3.11-19.el6_10.ppc, freetype-devel-2.3.11-19.el6_10 +1
- Red Hat Enterprise Linux Server Optional (v. 6) freetype-demos-2.3.11-19.el6_10
- Red Hat Enterprise Linux Workstation (v. 6) freetype-2.3.11-19.el6_10, freetype-devel-2.3.11-19.el6_10
- Red Hat Enterprise Linux Workstation Optional (v. 6) freetype-demos-2.3.11-19.el6_10
Fixes 2 records
Priority MEDIUM 42
FreeType before 2.6.1 has a heap-based buffer over-read in T1_Get_Private_Dict in type1/t1parse.c.
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.01919 · Published 2019-09-03 · Partial fix CWE-125
Priority LOW 32
FreeType before 2.6.1 has a buffer over-read in skip_comment in psaux/psobjs.c because ps_parser_skip_PS_token is mishandled in an FT_New_Memory_Face operation.
CVSS 3.0MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.01701 · Published 2019-09-03 · Partial fix CWE-125
