ELSA-2007-0150

ELSA-2007-0150 - Moderate: freetype security update

Type:	SECURITY
Severity:	MODERATE
Release Date:	2007-04-16

Description

[2.1.9-5]
- Add freetype-2.2.1-bdf-overflow.patch
- Resolves: #234228

[2.1.9-4.el4]
- assume any allocation over 32bits is an overflow, even
on 64-bit platforms
- remove memory debugging disabling patch

[2.1.9-3.rhel4]
- add null check to prevent crasher on one of the test files

[2.1.9-3]
- add patch from Behdad Esfahbod to
correct freetype crasher issues (bugs 200033, 199397, 200179,
200377)

[2.1.9-2.rhel4.4]
- Fix error handling in utility functions used by pango

[2.1.9-1.rhel4.4]
- Yet more fixes for CVE-2006-1861.

[2.1.9-1.rhel4.3]
- Fixed another uninitialized pointer, this one in FT_Realloc().

[2.1.9-1.rhel4.2]
- Fixed an uninitialized pointer in FT_QRealloc().

[2.1.9-1.rhel4.1]
- Fixes for CVE-2006-1861 and CVE-2006-0747

Related CVEs

CVE-2007-1351

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 3 (i386)	freetype-2.1.4-6.el3.i386.rpm	d30be3a72f999bc26ef3bb7dc5ab3187	ELSA-2010-0736
	freetype-devel-2.1.4-6.el3.i386.rpm	3661eae3fd58ca254b90b4097ef97af9	ELSA-2010-0736
Oracle Linux 3 (x86_64)	freetype-2.1.4-6.el3.i386.rpm	d30be3a72f999bc26ef3bb7dc5ab3187	ELSA-2010-0736
	freetype-2.1.4-6.el3.x86_64.rpm	0a7f0b97adef47788cbbb77e853e1171	ELSA-2010-0736
	freetype-devel-2.1.4-6.el3.x86_64.rpm	e606e8b0122f03c03606752497d251a8	ELSA-2010-0736
Oracle Linux 4 (i386)	freetype-2.1.9-5.el4.i386.rpm	7fb7a59e5b826b9c31df1d2e37831036	ELSA-2011-1455
	freetype-demos-2.1.9-5.el4.i386.rpm	7d99a4154cb30d8d0960c25894e938a8	ELSA-2011-1455
	freetype-devel-2.1.9-5.el4.i386.rpm	33ccd774fd14665c9b0426dd5c2f719e	ELSA-2011-1455
	freetype-utils-2.1.9-5.el4.i386.rpm	96d4701622bb1314c64239ec5d7946fb	ELSA-2011-1455
Oracle Linux 4 (x86_64)	freetype-2.1.9-5.el4.i386.rpm	7fb7a59e5b826b9c31df1d2e37831036	ELSA-2011-1455
	freetype-2.1.9-5.el4.x86_64.rpm	fb131687a5c074da3bdb0381b64bdfae	ELSA-2011-1455
	freetype-demos-2.1.9-5.el4.x86_64.rpm	52a0c2f5d56384e959f131ee9cdc08a9	ELSA-2011-1455
	freetype-devel-2.1.9-5.el4.x86_64.rpm	5ebe19b11a6f3c0d0f437311b1651c0f	ELSA-2011-1455
	freetype-utils-2.1.9-5.el4.x86_64.rpm	7569a294215a7acce0a4feca22637536	ELSA-2011-1455

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team