Nom du paquet
freetype2
Date
2009-09-22
Advisory ID
MDVSA-2009:243-1
Affected versions
2009.1 i586 , 2009.1 x86_64

Problem description

Multiple integer overflows in FreeType 2.3.9 and earlier allow remote
attackers to execute arbitrary code via vectors related to large
values in certain inputs in (1) smooth/ftsmooth.c, (2) sfnt/ttcmap.c,
and (3) cff/cffload.c.

This update corrects the problem.

Update:

Correct a problem in the 2009.1 update of the lzw handling code.

Updated packages

2009.1 i586

 f108254fbde4df7a0b36ca1985a9fb33  2009.1/i586/libfreetype6-2.3.9-1.2mdv2009.1.i586.rpm
 035e670c22b49b87695c9f05acb8934a  2009.1/i586/libfreetype6-devel-2.3.9-1.2mdv2009.1.i586.rpm
 71c14147686855d6bfd784b13620253f  2009.1/i586/libfreetype6-static-devel-2.3.9-1.2mdv2009.1.i586.rpm 
 222b4d88df142524f60b5bbb91854f8d  2009.1/SRPMS/freetype2-2.3.9-1.2mdv2009.1.src.rpm

2009.1 x86_64

 01af6de5f9ea9efe4791468762b17177  2009.1/x86_64/lib64freetype6-2.3.9-1.2mdv2009.1.x86_64.rpm
 2612b961ba878228925cc79b40134f95  2009.1/x86_64/lib64freetype6-devel-2.3.9-1.2mdv2009.1.x86_64.rpm
 1fe30e15897c5e6a3004a29106ac3f8c  2009.1/x86_64/lib64freetype6-static-devel-2.3.9-1.2mdv2009.1.x86_64.rpm 
 222b4d88df142524f60b5bbb91854f8d  2009.1/SRPMS/freetype2-2.3.9-1.2mdv2009.1.src.rpm

References