FreeType is a free, high-quality, and portable font engine.
Chris Evans discovered several integer underflow and overflow flaws in the
FreeType font engine. If a user loads a carefully crafted font file with a
program linked against FreeType, it could cause the application to crash or
execute arbitrary code as the user. While it is uncommon for a user to
explicitly load a font file, there are several application file formats
which contain embedded fonts that are parsed by FreeType. (CVE-2006-0747,
CVE-2006-1861, CVE-2006-3467)
A NULL pointer dereference flaw was found in the FreeType font engine. An
application linked against FreeType can crash upon loading a malformed font
file. (CVE-2006-2661)
Users of FreeType should upgrade to these updated packages, which contain
backported patches to correct these issues.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
RedHat | any | ia64 | freetype | < 2.0.3-8.rhel2_1.2 | freetype-2.0.3-8.rhel2_1.2.ia64.rpm |
RedHat | any | ia64 | freetype-devel | < 2.1.4-4.0.rhel3.2 | freetype-devel-2.1.4-4.0.rhel3.2.ia64.rpm |
RedHat | any | i386 | freetype-utils | < 2.1.9-1.rhel4.4 | freetype-utils-2.1.9-1.rhel4.4.i386.rpm |
RedHat | any | x86_64 | freetype-devel | < 2.1.4-4.0.rhel3.2 | freetype-devel-2.1.4-4.0.rhel3.2.x86_64.rpm |
RedHat | any | ppc | freetype-devel | < 2.1.9-1.rhel4.4 | freetype-devel-2.1.9-1.rhel4.4.ppc.rpm |
RedHat | any | s390 | freetype-demos | < 2.1.9-1.rhel4.4 | freetype-demos-2.1.9-1.rhel4.4.s390.rpm |
RedHat | any | s390x | freetype | < 2.1.9-1.rhel4.4 | freetype-2.1.9-1.rhel4.4.s390x.rpm |
RedHat | any | i386 | freetype | < 2.1.9-1.rhel4.4 | freetype-2.1.9-1.rhel4.4.i386.rpm |
RedHat | any | s390 | freetype-devel | < 2.1.4-4.0.rhel3.2 | freetype-devel-2.1.4-4.0.rhel3.2.s390.rpm |
RedHat | any | ppc64 | freetype | < 2.1.4-4.0.rhel3.2 | freetype-2.1.4-4.0.rhel3.2.ppc64.rpm |