ELSA-2010-0737

ELSA-2010-0737 - freetype security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2010-10-04

Description

[2.2.1-28]
- Modify freetype-2.2.1-CVE-2010-3054.patch
- Resolves: #638142

[2.2.1-27]
- Add freetype-2.2.1-CVE-2010-2806.patch
(Protect against negative string_size. Fix comparison.)
- Add freetype-2.2.1-CVE-2010-3311.patch
(Don't seek behind end of stream.)
- Add freetype-2.2.1-CVE-2010-3054.patch
(Protect against nested 'seac' calls.)
- Add freetype-2.2.1-CVE-2010-2808.patch
(Check the total length of collected POST segments.)
- Resolves: #638142

Related CVEs

CVE-2010-2806

CVE-2010-2808

CVE-2010-3054

CVE-2010-3311

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 4 (i386)	freetype-2.1.9-17.el4.8.src.rpm	ef255f287f6aa63ae02ee7edddb6f06322ae14f8bffd5dd275c638bd6bdde280	ELSA-2011-1455	el4_i386_latest
	freetype-2.1.9-17.el4.8.src.rpm	ef255f287f6aa63ae02ee7edddb6f06322ae14f8bffd5dd275c638bd6bdde280	ELSA-2011-1455	el4_u8_i386_patch
	freetype-2.1.9-17.el4.8.i386.rpm	fc8965d93bf1c84453a003ff080d260c82b35641497f3ed6716815a9adf0d4ec	ELSA-2011-1455	el4_i386_latest
	freetype-2.1.9-17.el4.8.i386.rpm	fc8965d93bf1c84453a003ff080d260c82b35641497f3ed6716815a9adf0d4ec	ELSA-2011-1455	el4_u8_i386_patch
	freetype-demos-2.1.9-17.el4.8.i386.rpm	9d960fd31c7b508bab38cdb8eb1f2c43af952069d7e8c8bdc55d280325b4dd05	ELSA-2011-1455	el4_i386_latest
	freetype-demos-2.1.9-17.el4.8.i386.rpm	9d960fd31c7b508bab38cdb8eb1f2c43af952069d7e8c8bdc55d280325b4dd05	ELSA-2011-1455	el4_u8_i386_patch
	freetype-devel-2.1.9-17.el4.8.i386.rpm	0b631d7f1d8c8200a1a01938201f27864c6a426a89d00e324c9acc49ed4aefed	ELSA-2011-1455	el4_i386_latest
	freetype-devel-2.1.9-17.el4.8.i386.rpm	0b631d7f1d8c8200a1a01938201f27864c6a426a89d00e324c9acc49ed4aefed	ELSA-2011-1455	el4_u8_i386_patch
	freetype-utils-2.1.9-17.el4.8.i386.rpm	1442bb6b2b2312002cd5ae24cd625c2c206bd168f1f6217a3bc758f0420a763e	ELSA-2011-1455	el4_i386_latest
	freetype-utils-2.1.9-17.el4.8.i386.rpm	1442bb6b2b2312002cd5ae24cd625c2c206bd168f1f6217a3bc758f0420a763e	ELSA-2011-1455	el4_u8_i386_patch
Oracle Linux 4 (ia64)	freetype-2.1.9-17.el4.8.src.rpm	ef255f287f6aa63ae02ee7edddb6f06322ae14f8bffd5dd275c638bd6bdde280	ELSA-2011-1455	el4_ia64_latest
	freetype-2.1.9-17.el4.8.src.rpm	ef255f287f6aa63ae02ee7edddb6f06322ae14f8bffd5dd275c638bd6bdde280	ELSA-2011-1455	el4_u8_ia64_patch
	freetype-2.1.9-17.el4.8.i386.rpm	fc8965d93bf1c84453a003ff080d260c82b35641497f3ed6716815a9adf0d4ec	ELSA-2011-1455	el4_ia64_latest
	freetype-2.1.9-17.el4.8.i386.rpm	fc8965d93bf1c84453a003ff080d260c82b35641497f3ed6716815a9adf0d4ec	ELSA-2011-1455	el4_u8_ia64_patch
	freetype-2.1.9-17.el4.8.ia64.rpm	485dabc72e71a5d3b67a13a85228bb176ff8f06d019673b7abaa10da7844a8de	ELSA-2011-1455	el4_ia64_latest
	freetype-2.1.9-17.el4.8.ia64.rpm	485dabc72e71a5d3b67a13a85228bb176ff8f06d019673b7abaa10da7844a8de	ELSA-2011-1455	el4_u8_ia64_patch
	freetype-demos-2.1.9-17.el4.8.ia64.rpm	9062ebdbdb6b33082e83b0a2f6492fa1a66f8d1c43e0fc87fce0667a440f8b92	ELSA-2011-1455	el4_ia64_latest
	freetype-demos-2.1.9-17.el4.8.ia64.rpm	9062ebdbdb6b33082e83b0a2f6492fa1a66f8d1c43e0fc87fce0667a440f8b92	ELSA-2011-1455	el4_u8_ia64_patch
	freetype-devel-2.1.9-17.el4.8.ia64.rpm	2b5d3eb50d60cf8b4bf0aeb5344d0e9707bd332e87f7c057a53fa48ce21b0329	ELSA-2011-1455	el4_ia64_latest
	freetype-devel-2.1.9-17.el4.8.ia64.rpm	2b5d3eb50d60cf8b4bf0aeb5344d0e9707bd332e87f7c057a53fa48ce21b0329	ELSA-2011-1455	el4_u8_ia64_patch
	freetype-utils-2.1.9-17.el4.8.ia64.rpm	edcd16f91475e8ee01038fb7f8152518c3a020f98670776c44171b0b80e891fe	ELSA-2011-1455	el4_ia64_latest
	freetype-utils-2.1.9-17.el4.8.ia64.rpm	edcd16f91475e8ee01038fb7f8152518c3a020f98670776c44171b0b80e891fe	ELSA-2011-1455	el4_u8_ia64_patch
Oracle Linux 4 (x86_64)	freetype-2.1.9-17.el4.8.src.rpm	ef255f287f6aa63ae02ee7edddb6f06322ae14f8bffd5dd275c638bd6bdde280	ELSA-2011-1455	el4_u8_x86_64_patch
	freetype-2.1.9-17.el4.8.src.rpm	ef255f287f6aa63ae02ee7edddb6f06322ae14f8bffd5dd275c638bd6bdde280	ELSA-2011-1455	el4_x86_64_latest
	freetype-2.1.9-17.el4.8.i386.rpm	fc8965d93bf1c84453a003ff080d260c82b35641497f3ed6716815a9adf0d4ec	ELSA-2011-1455	el4_u8_x86_64_patch
	freetype-2.1.9-17.el4.8.i386.rpm	fc8965d93bf1c84453a003ff080d260c82b35641497f3ed6716815a9adf0d4ec	ELSA-2011-1455	el4_x86_64_latest
	freetype-2.1.9-17.el4.8.x86_64.rpm	f9fecaed2e94b738f05d5a07d80eb500c552714afb4670139ecc5adca97f86f8	ELSA-2011-1455	el4_u8_x86_64_patch
	freetype-2.1.9-17.el4.8.x86_64.rpm	f9fecaed2e94b738f05d5a07d80eb500c552714afb4670139ecc5adca97f86f8	ELSA-2011-1455	el4_x86_64_latest
	freetype-demos-2.1.9-17.el4.8.x86_64.rpm	0889260e0942cc0229cc62222855d1453b1be97c74d77764446dc015947a731f	ELSA-2011-1455	el4_u8_x86_64_patch
	freetype-demos-2.1.9-17.el4.8.x86_64.rpm	0889260e0942cc0229cc62222855d1453b1be97c74d77764446dc015947a731f	ELSA-2011-1455	el4_x86_64_latest
	freetype-devel-2.1.9-17.el4.8.x86_64.rpm	e42e548a268af40957eb7dfda1aa0c5a49a9a28cb15efafee16730fda2d3d738	ELSA-2011-1455	el4_u8_x86_64_patch
	freetype-devel-2.1.9-17.el4.8.x86_64.rpm	e42e548a268af40957eb7dfda1aa0c5a49a9a28cb15efafee16730fda2d3d738	ELSA-2011-1455	el4_x86_64_latest
	freetype-utils-2.1.9-17.el4.8.x86_64.rpm	7d9daf826aafe84287451397e207f6fd46573fae60d2c3295bbfd63d56289eda	ELSA-2011-1455	el4_u8_x86_64_patch
	freetype-utils-2.1.9-17.el4.8.x86_64.rpm	7d9daf826aafe84287451397e207f6fd46573fae60d2c3295bbfd63d56289eda	ELSA-2011-1455	el4_x86_64_latest
Oracle Linux 5 (i386)	freetype-2.2.1-28.el5_5.src.rpm	252d28893cbf27a1619833ed288b28e594ac1464cc1995318f11728f26f1f4a8	ELSA-2013-0216	el5_u5_i386_patch
	freetype-2.2.1-28.el5_5.i386.rpm	db809320248669e400697d0fa0339be14d5ba5863c1fe7c21dbe8ad069020468	ELSA-2013-0216	el5_u5_i386_patch
	freetype-demos-2.2.1-28.el5_5.i386.rpm	f9813e7c4b302ae5794ee28f3105d7df5386828994617227d99647439960913b	ELSA-2013-0216	el5_u5_i386_patch
	freetype-devel-2.2.1-28.el5_5.i386.rpm	7fba555c2e2fd79b8af03db4f8ec54040eeb227508b2062f916c6b0567b41e81	ELSA-2013-0216	el5_u5_i386_patch
Oracle Linux 5 (ia64)	freetype-2.2.1-28.el5_5.src.rpm	252d28893cbf27a1619833ed288b28e594ac1464cc1995318f11728f26f1f4a8	ELSA-2013-0216	el5_u5_ia64_patch
	freetype-2.2.1-28.el5_5.src.rpm	252d28893cbf27a1619833ed288b28e594ac1464cc1995318f11728f26f1f4a8	ELSA-2013-0216	ol5_ia64_latest
	freetype-2.2.1-28.el5_5.i386.rpm	db809320248669e400697d0fa0339be14d5ba5863c1fe7c21dbe8ad069020468	ELSA-2013-0216	el5_u5_ia64_patch
	freetype-2.2.1-28.el5_5.i386.rpm	db809320248669e400697d0fa0339be14d5ba5863c1fe7c21dbe8ad069020468	ELSA-2013-0216	ol5_ia64_latest
	freetype-2.2.1-28.el5_5.ia64.rpm	96a556ebbbfc0a47486c85cbb8810167a5dbf7983d6a4db85584163ef499aaa5	ELSA-2013-0216	el5_u5_ia64_patch
	freetype-2.2.1-28.el5_5.ia64.rpm	96a556ebbbfc0a47486c85cbb8810167a5dbf7983d6a4db85584163ef499aaa5	ELSA-2013-0216	ol5_ia64_latest
	freetype-demos-2.2.1-28.el5_5.ia64.rpm	dd263c07d112b036fad52c06fb9dab1e5f1a4d23dfe69adc34b5f0fd668119ec	ELSA-2013-0216	el5_u5_ia64_patch
	freetype-demos-2.2.1-28.el5_5.ia64.rpm	dd263c07d112b036fad52c06fb9dab1e5f1a4d23dfe69adc34b5f0fd668119ec	ELSA-2013-0216	ol5_ia64_latest
	freetype-devel-2.2.1-28.el5_5.ia64.rpm	ebeb6cba32ec9d88869ab5d5a5e744df1b9441d4f84d23e5f842607c1de2ab27	ELSA-2013-0216	el5_u5_ia64_patch
	freetype-devel-2.2.1-28.el5_5.ia64.rpm	ebeb6cba32ec9d88869ab5d5a5e744df1b9441d4f84d23e5f842607c1de2ab27	ELSA-2013-0216	ol5_ia64_latest
Oracle Linux 5 (x86_64)	freetype-2.2.1-28.el5_5.src.rpm	252d28893cbf27a1619833ed288b28e594ac1464cc1995318f11728f26f1f4a8	ELSA-2013-0216	el5_u5_x86_64_patch
	freetype-2.2.1-28.el5_5.i386.rpm	db809320248669e400697d0fa0339be14d5ba5863c1fe7c21dbe8ad069020468	ELSA-2013-0216	el5_u5_x86_64_patch
	freetype-2.2.1-28.el5_5.x86_64.rpm	932c72360e66a4bfe30df096e596d9cda5517621f17e437f650bcd4edc51973d	ELSA-2013-0216	el5_u5_x86_64_patch
	freetype-demos-2.2.1-28.el5_5.x86_64.rpm	0cdc18c9ec23a166bb1b5e0d2859ef86ae768c16a2383c286993f30fd0edb422	ELSA-2013-0216	el5_u5_x86_64_patch
	freetype-devel-2.2.1-28.el5_5.i386.rpm	7fba555c2e2fd79b8af03db4f8ec54040eeb227508b2062f916c6b0567b41e81	ELSA-2013-0216	el5_u5_x86_64_patch
	freetype-devel-2.2.1-28.el5_5.x86_64.rpm	eac352e00f96eb48a8753d437e78ba9fe817044da329ed5707ce0d677b36a840	ELSA-2013-0216	el5_u5_x86_64_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team