Paketname
freetype2
Datum
2008-10-31
Advisory ID
MDVSA-2008:121-1
Betroffene Versionen
CS3.0 i586 , CS4.0 x86_64 , MNF2.0 i586 , CS3.0 x86_64 , CS4.0 i586

Problembeschreibung

Multiple vulnerabilities were discovered in FreeType's Printer
Font Binary (PFB) font-file format parser. If a user were to load a
carefully crafted font file with a program linked against FreeType, it
could cause the application to crash or potentially execute arbitrary
code (CVE-2008-1806, CVE-2008-1807, CVE-2008-1808).

The updated packages have been patched to prevent this issue.

Update:

The patches used to correct the problem on Corporate Server 4.0 and
Corporate 3.0 contained a problem where certain fonts would not be
displayed and would cause applications, such as drakfont, to crash.
This update corrects the regression.

Aktualisierte Pakete

CS3.0 i586

 10bc65d19c7ffb41cc0a942743f2024f  corporate/3.0/i586/libfreetype6-2.1.7-4.7.C30mdk.i586.rpm
 9f001f0e2f90e8ce736f1c9394c880dc  corporate/3.0/i586/libfreetype6-devel-2.1.7-4.7.C30mdk.i586.rpm
 547f573b07d7c440523d3e0b9b80862f  corporate/3.0/i586/libfreetype6-static-devel-2.1.7-4.7.C30mdk.i586.rpm 
 6145881addf92048de2d974499dfa744  corporate/3.0/SRPMS/freetype2-2.1.7-4.7.C30mdk.src.rpm

CS4.0 x86_64

 73f26c9a34918a8bf0f401a2cc10b791  corporate/4.0/x86_64/lib64freetype6-2.1.10-9.8.20060mlcs4.x86_64.rpm
 147185a6093063ec016bd7415c24c68c  corporate/4.0/x86_64/lib64freetype6-devel-2.1.10-9.8.20060mlcs4.x86_64.rpm
 8d4565b5c527bc168e7261845d707b38  corporate/4.0/x86_64/lib64freetype6-static-devel-2.1.10-9.8.20060mlcs4.x86_64.rpm 
 6bf2a907f843cf288527fc9119e9278c  corporate/4.0/SRPMS/freetype2-2.1.10-9.8.20060mlcs4.src.rpm

MNF2.0 i586

 10bc65d19c7ffb41cc0a942743f2024f  mnf/2.0/i586/libfreetype6-2.1.7-4.7.C30mdk.i586.rpm 
 6145881addf92048de2d974499dfa744  mnf/2.0/SRPMS/freetype2-2.1.7-4.7.C30mdk.src.rpm

CS3.0 x86_64

 1fd7ce0fc7ecaae5372d0c48d571c4c3  corporate/3.0/x86_64/lib64freetype6-2.1.7-4.7.C30mdk.x86_64.rpm
 536cf56aa4d1cda0ba57efc20f1d6d82  corporate/3.0/x86_64/lib64freetype6-devel-2.1.7-4.7.C30mdk.x86_64.rpm
 3ae4115db4b418291a4847efa2981225  corporate/3.0/x86_64/lib64freetype6-static-devel-2.1.7-4.7.C30mdk.x86_64.rpm 
 6145881addf92048de2d974499dfa744  corporate/3.0/SRPMS/freetype2-2.1.7-4.7.C30mdk.src.rpm

CS4.0 i586

 31c49be01e2eea8244eae4713af3e655  corporate/4.0/i586/libfreetype6-2.1.10-9.8.20060mlcs4.i586.rpm
 b173159062c74e26ba2ad9c1e4c61cd9  corporate/4.0/i586/libfreetype6-devel-2.1.10-9.8.20060mlcs4.i586.rpm
 e5a90208d2a5643f3884d1b3f0fa15ec  corporate/4.0/i586/libfreetype6-static-devel-2.1.10-9.8.20060mlcs4.i586.rpm 
 6bf2a907f843cf288527fc9119e9278c  corporate/4.0/SRPMS/freetype2-2.1.10-9.8.20060mlcs4.src.rpm

Referenzen