ELSA-2010-0578

ELSA-2010-0578 - freetype security update

Type:	SECURITY
Severity:	IMPORTANT
Release Date:	2010-07-30

Description

[2.2.1-25]
- Add freetype-2.2.1-axis-name-overflow.patch
(Avoid overflow when dealing with names of axes)
- Resolves: #614012

[2.2.1-24]
- Modify freetype-2.2.1-CVE-2010-2519.patch (additional fix)
(If the type of the POST fragment is 0, the segment is completely ignored)
- Resolves: #614012

[2.2.1-23]
- Add freetype-2.2.1-CVE-2010-2527.patch
(Use precision for '%s' where appropriate to avoid buffer overflows)
- Resolves: #614012

[2.2.1-22]
- Add freetype-2.2.1-CVE-2010-2498.patch
(Assure that 'end_point' is not larger than 'glyph->num_points')
- Add freetype-2.2.1-CVE-2010-2499.patch
(Check the buffer size during gathering PFB fragments)
- Add freetype-2.2.1-CVE-2010-2500.patch
(Use smaller threshold values for 'width' and 'height')
- Add freetype-2.2.1-CVE-2010-2519.patch
(Check 'rlen' the length of fragment declared in the POST fragment header)
- Resolves: #614012

Related CVEs

CVE-2010-2498

CVE-2010-2499

CVE-2010-2500

CVE-2010-2519

CVE-2010-2527

CVE-2010-2541

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 4 (i386)	freetype-2.1.9-14.el4.8.src.rpm	d674a4d2527df3839ece639dc7537909	ELSA-2011-1455
	freetype-2.1.9-14.el4.8.i386.rpm	51891f91aff538dd36b3834773f9be42	ELSA-2011-1455
	freetype-demos-2.1.9-14.el4.8.i386.rpm	2f9db4096b3feb73e19e4114e54ee5a2	ELSA-2011-1455
	freetype-devel-2.1.9-14.el4.8.i386.rpm	d2b5cb7e0257628c1ab2c6a6cc7bcfe6	ELSA-2011-1455
	freetype-utils-2.1.9-14.el4.8.i386.rpm	2a2f5efeb3715e230729dc71415ee6ef	ELSA-2011-1455
Oracle Linux 4 (ia64)	freetype-2.1.9-14.el4.8.src.rpm	d674a4d2527df3839ece639dc7537909	ELSA-2011-1455
	freetype-2.1.9-14.el4.8.i386.rpm	51891f91aff538dd36b3834773f9be42	ELSA-2011-1455
	freetype-2.1.9-14.el4.8.ia64.rpm	be87610df0608ef05e40e34af8a2c01e	ELSA-2011-1455
	freetype-demos-2.1.9-14.el4.8.ia64.rpm	33e2d78552925da887805d017ed60c28	ELSA-2011-1455
	freetype-devel-2.1.9-14.el4.8.ia64.rpm	f5adaea3c06a21df8b29331234017a26	ELSA-2011-1455
	freetype-utils-2.1.9-14.el4.8.ia64.rpm	b22bb31fccbd88701fbafda3b30fea68	ELSA-2011-1455
Oracle Linux 4 (x86_64)	freetype-2.1.9-14.el4.8.src.rpm	d674a4d2527df3839ece639dc7537909	ELSA-2011-1455
	freetype-2.1.9-14.el4.8.i386.rpm	51891f91aff538dd36b3834773f9be42	ELSA-2011-1455
	freetype-2.1.9-14.el4.8.x86_64.rpm	56297a4a2ee7cd0225dd8bbb8a41dc1a	ELSA-2011-1455
	freetype-demos-2.1.9-14.el4.8.x86_64.rpm	f936a2fe1fbacf43045e5050b5905de2	ELSA-2011-1455
	freetype-devel-2.1.9-14.el4.8.x86_64.rpm	60c6e9d81ab8a1729306da2a36c6ffbe	ELSA-2011-1455
	freetype-utils-2.1.9-14.el4.8.x86_64.rpm	b6b1aafffd0b61b174a99bd6187e97e0	ELSA-2011-1455
Oracle Linux 5 (i386)	freetype-2.2.1-25.el5_5.src.rpm	76da7428e1d7759895ea4a91512e32ce	ELSA-2013-0216
	freetype-2.2.1-25.el5_5.i386.rpm	497b26710bd6a0fae8dbfd053d1a90b3	ELSA-2013-0216
	freetype-demos-2.2.1-25.el5_5.i386.rpm	faa7d79a6b13a99ef11ad0ab198f5cdb	ELSA-2013-0216
	freetype-devel-2.2.1-25.el5_5.i386.rpm	093e507f64e08edcb779f12ae59005f1	ELSA-2013-0216
Oracle Linux 5 (ia64)	freetype-2.2.1-25.el5_5.src.rpm	76da7428e1d7759895ea4a91512e32ce	ELSA-2013-0216
	freetype-2.2.1-25.el5_5.i386.rpm	497b26710bd6a0fae8dbfd053d1a90b3	ELSA-2013-0216
	freetype-2.2.1-25.el5_5.ia64.rpm	e44076bbcea039d798d0878151a18238	ELSA-2013-0216
	freetype-demos-2.2.1-25.el5_5.ia64.rpm	08ad711d45d33041b93635dbd390692b	ELSA-2013-0216
	freetype-devel-2.2.1-25.el5_5.ia64.rpm	713a7824285f16232c8144c0eb8e9dd4	ELSA-2013-0216
Oracle Linux 5 (x86_64)	freetype-2.2.1-25.el5_5.src.rpm	76da7428e1d7759895ea4a91512e32ce	ELSA-2013-0216
	freetype-2.2.1-25.el5_5.i386.rpm	497b26710bd6a0fae8dbfd053d1a90b3	ELSA-2013-0216
	freetype-2.2.1-25.el5_5.x86_64.rpm	447eeb6ebd9a8a10f3426c689ad640b9	ELSA-2013-0216
	freetype-demos-2.2.1-25.el5_5.x86_64.rpm	813df8fa5c8ffb642c461fcf10f7571d	ELSA-2013-0216
	freetype-devel-2.2.1-25.el5_5.i386.rpm	093e507f64e08edcb779f12ae59005f1	ELSA-2013-0216
	freetype-devel-2.2.1-25.el5_5.x86_64.rpm	49313507af70d1fd13c6321deb104ce3	ELSA-2013-0216

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team