ELSA-2013-0216

ELSA-2013-0216 - freetype security update

Type:	SECURITY
Severity:	IMPORTANT
Release Date:	2013-01-31

Description

[2.3.11-14.el6_3.1]
- Fix CVE-2012-5669
(Use correct array size for checking 'glyph_enc')
- Resolves: #903542

[2.3.11-14]
- A little change in configure part
- Related: #723468

[2.3.11-13]
- Fix CVE-2012-{1126, 1127, 1130, 1131, 1132, 1134, 1136,
1137, 1139, 1140, 1141, 1142, 1143, 1144}
- Properly initialize array 'result' in
FT_Outline_Get_Orientation()
- Check bytes per row for overflow in _bdf_parse_glyphs()
- Resolves: #806269

[2.3.11-12]
- Add freetype-2.3.11-CVE-2011-3439.patch
(Various loading fixes.)
- Resolves: #754012

[2.3.11-11]
- Add freetype-2.3.11-CVE-2011-3256.patch
(Handle some border cases.)
- Resolves: #747084

[2.3.11-10]
- Use -fno-strict-aliasing instead of __attribute__((__may_alias__))
- Resolves: #723468

[2.3.11-9]
- Allow FT_Glyph to alias (to pass Rpmdiff)
- Resolves: #723468

[2.3.11-8]
- Add freetype-2.3.11-CVE-2011-0226.patch
(Add better argument check for 'callothersubr'.)
- based on patches by Werner Lemberg,
Alexei Podtelezhnikov and Matthias Drochner
- Resolves: #723468

[2.3.11-7]
- Add freetype-2.3.11-CVE-2010-3855.patch
(Protect against invalid 'runcnt' values.)
- Resolves: #651762

Related CVEs

CVE-2012-5669

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 5 (i386)	freetype-2.2.1-32.el5_9.1.src.rpm	1ee7ae6fb5eb3191884072a73f2e299b	-
	freetype-2.2.1-32.el5_9.1.i386.rpm	51330ac53d2d5e32bcc136c3a556a195	-
	freetype-demos-2.2.1-32.el5_9.1.i386.rpm	e65bad33204c485116c8cb350b3df43d	-
	freetype-devel-2.2.1-32.el5_9.1.i386.rpm	ba3bb34ee528d3be994494f9646c9707	-
Oracle Linux 5 (ia64)	freetype-2.2.1-32.el5_9.1.src.rpm	1ee7ae6fb5eb3191884072a73f2e299b	-
	freetype-2.2.1-32.el5_9.1.i386.rpm	51330ac53d2d5e32bcc136c3a556a195	-
	freetype-2.2.1-32.el5_9.1.ia64.rpm	32e8d9925c719051d35313a018804f5c	-
	freetype-demos-2.2.1-32.el5_9.1.ia64.rpm	b23850cd78065a3331fdc5dfd59d7343	-
	freetype-devel-2.2.1-32.el5_9.1.ia64.rpm	ce4d5326147ad302b880aaedef485491	-
Oracle Linux 5 (x86_64)	freetype-2.2.1-32.el5_9.1.src.rpm	1ee7ae6fb5eb3191884072a73f2e299b	-
	freetype-2.2.1-32.el5_9.1.i386.rpm	51330ac53d2d5e32bcc136c3a556a195	-
	freetype-2.2.1-32.el5_9.1.x86_64.rpm	a6f699d19b41ece2f6e206d4cab7370a	-
	freetype-demos-2.2.1-32.el5_9.1.x86_64.rpm	ec1239c5f73d75f65a09aca9515392d8	-
	freetype-devel-2.2.1-32.el5_9.1.i386.rpm	ba3bb34ee528d3be994494f9646c9707	-
	freetype-devel-2.2.1-32.el5_9.1.x86_64.rpm	fb77f8d5ee8730fd37c3f164c822a9cd	-
Oracle Linux 6 (i386)	freetype-2.3.11-14.el6_3.1.src.rpm	dc086f01cee0d406ab63a9a212d37e35	ELSA-2019-4254
	freetype-2.3.11-14.el6_3.1.i686.rpm	1af7a087a6852c18cd17835a238764ab	ELSA-2019-4254
	freetype-demos-2.3.11-14.el6_3.1.i686.rpm	19b86222a220ccba2b559d12c353b529	ELSA-2019-4254
	freetype-devel-2.3.11-14.el6_3.1.i686.rpm	a6cbfaf62343dd988b147a6fa66b73f6	ELSA-2019-4254
Oracle Linux 6 (x86_64)	freetype-2.3.11-14.el6_3.1.src.rpm	dc086f01cee0d406ab63a9a212d37e35	ELSA-2019-4254
	freetype-2.3.11-14.el6_3.1.i686.rpm	1af7a087a6852c18cd17835a238764ab	ELSA-2019-4254
	freetype-2.3.11-14.el6_3.1.x86_64.rpm	e7c2349724f507e56ff9561865c2816b	ELSA-2019-4254
	freetype-demos-2.3.11-14.el6_3.1.x86_64.rpm	7d6e0d39dbdede3459fe214912c41977	ELSA-2019-4254
	freetype-devel-2.3.11-14.el6_3.1.i686.rpm	a6cbfaf62343dd988b147a6fa66b73f6	ELSA-2019-4254
	freetype-devel-2.3.11-14.el6_3.1.x86_64.rpm	115881ba6d5b1f76c63cd3def347a8b4	ELSA-2019-4254

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team