OVMSA-2015-0036 - freetype security update
| Type: | SECURITY |
| Impact: | IMPORTANT |
| Release Date: | 2015-03-18 |
Description
[2.3.11-15.el6_6.1]
- Fixes CVE-2014-9657
- Check minimum size of record_size.
- Fixes CVE-2014-9658
- Use correct value for minimum table length test.
- Fixes CVE-2014-9675
- New macro that checks one character more than strncmp.
- Fixes CVE-2014-9660
- Check _BDF_GLYPH_BITS.
- Fixes CVE-2014-9661
- Initialize face->ttf_size.
- Always set face->ttf_size directly.
- Exclusively use the truetype font driver for loading
the font contained in the sfnts array.
- Fixes CVE-2014-9663
- Fix order of validity tests.
- Fixes CVE-2014-9664
- Add another boundary testing.
- Fix boundary testing.
- Fixes CVE-2014-9667
- Protect against addition overflow.
- Fixes CVE-2014-9669
- Protect against overflow in additions and multiplications.
- Fixes CVE-2014-9670
- Add sanity checks for row and column values.
- Fixes CVE-2014-9671
- Check size and offset values.
- Fixes CVE-2014-9673
- Fix integer overflow by a broken POST table in resource-fork.
- Fixes CVE-2014-9674
- Fix integer overflow by a broken POST table in resource-fork.
- Additional overflow check in the summation of POST fragment lengths.
- Work around behaviour of X11s pcfWriteFont and pcfReadFont functions
- Resolves: #1197737
[2.3.11-15]
- Fix CVE-2012-5669
(Use correct array size for checking glyph_enc)
- Resolves: #903543
Related CVEs
Updated Packages
| Release/Architecture | Filename | sha256 | Superseded By Advisory | Channel Label |
|
| Oracle VM 3.3 (x86_64) | freetype-2.3.11-15.el6_6.1.src.rpm | 7aacd63b60047b3ea24657f240604aa1958a83abf40196f35055b332376dcf8e | OVMSA-2020-0001 | ovm3_x86_64_3.3_patch |
| freetype-2.3.11-15.el6_6.1.x86_64.rpm | 10034fe5123c5cfdb4fd62de557de6824370e3a1009a7d559a4d81ace33b31b2 | OVMSA-2020-0001 | ovm3_x86_64_3.3_patch |
|
| Oracle VM 3.4 (x86_64) | freetype-2.3.11-15.el6_6.1.src.rpm | 7aacd63b60047b3ea24657f240604aa1958a83abf40196f35055b332376dcf8e | OVMSA-2020-0001 | ovm34_x86_64_latest |
| freetype-2.3.11-15.el6_6.1.x86_64.rpm | 10034fe5123c5cfdb4fd62de557de6824370e3a1009a7d559a4d81ace33b31b2 | OVMSA-2020-0001 | ovm34_x86_64_latest |
This page is generated automatically and has not been checked for errors or omissions. For clarification
or corrections please contact the Oracle Linux ULN team
