[SECURITY] [DSA 3461-1] freetype security update

2016-01-3108:11:20

lists.debian.org

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

JSON

Debian Security Advisory DSA-3461-1 [email protected]
https://www.debian.org/security/ Sebastien Delafond
January 30, 2016 https://www.debian.org/security/faq

Package : freetype
CVE ID : CVE-2014-9674
Debian Bug : 777656

Mateusz Jurczyk discovered multiple vulnerabilities in
Freetype. Opening malformed fonts may result in denial of service or
the execution of arbitrary code.

For the oldstable distribution (wheezy), this problem has been fixed
in version 2.4.9-1.1+deb7u3.

We recommend that you upgrade your freetype packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: [email protected]

OSVersionArchitecturePackageVersionFilename
Debian7armhflibfreetype6< 2.4.9-1.1+deb7u3libfreetype6_2.4.9-1.1+deb7u3_armhf.deb
Debian7sparclibfreetype6< 2.4.9-1.1+deb7u3libfreetype6_2.4.9-1.1+deb7u3_sparc.deb
Debian7mipslibfreetype6< 2.4.9-1.1+deb7u3libfreetype6_2.4.9-1.1+deb7u3_mips.deb
Debian7i386libfreetype6-udeb< 2.4.9-1.1+deb7u3libfreetype6-udeb_2.4.9-1.1+deb7u3_i386.deb
Debian6i386libfreetype6-udeb< 2.4.2-2.1+squeeze5libfreetype6-udeb_2.4.2-2.1+squeeze5_i386.deb
Debian7sparcfreetype2-demos< 2.4.9-1.1+deb7u3freetype2-demos_2.4.9-1.1+deb7u3_sparc.deb
Debian7s390libfreetype6-dev< 2.4.9-1.1+deb7u3libfreetype6-dev_2.4.9-1.1+deb7u3_s390.deb
Debian7ia64libfreetype6-udeb< 2.4.9-1.1+deb7u3libfreetype6-udeb_2.4.9-1.1+deb7u3_ia64.deb
Debian7powerpclibfreetype6< 2.4.9-1.1+deb7u3libfreetype6_2.4.9-1.1+deb7u3_powerpc.deb
Debian7mipsellibfreetype6-udeb< 2.4.9-1.1+deb7u3libfreetype6-udeb_2.4.9-1.1+deb7u3_mipsel.deb

OS	Version	Architecture	Package	Version	Filename
Debian	7	armhf	libfreetype6	< 2.4.9-1.1+deb7u3	libfreetype6_2.4.9-1.1+deb7u3_armhf.deb
Debian	7	sparc	libfreetype6	< 2.4.9-1.1+deb7u3	libfreetype6_2.4.9-1.1+deb7u3_sparc.deb
Debian	7	mips	libfreetype6	< 2.4.9-1.1+deb7u3	libfreetype6_2.4.9-1.1+deb7u3_mips.deb
Debian	7	i386	libfreetype6-udeb	< 2.4.9-1.1+deb7u3	libfreetype6-udeb_2.4.9-1.1+deb7u3_i386.deb
Debian	6	i386	libfreetype6-udeb	< 2.4.2-2.1+squeeze5	libfreetype6-udeb_2.4.2-2.1+squeeze5_i386.deb
Debian	7	sparc	freetype2-demos	< 2.4.9-1.1+deb7u3	freetype2-demos_2.4.9-1.1+deb7u3_sparc.deb
Debian	7	s390	libfreetype6-dev	< 2.4.9-1.1+deb7u3	libfreetype6-dev_2.4.9-1.1+deb7u3_s390.deb
Debian	7	ia64	libfreetype6-udeb	< 2.4.9-1.1+deb7u3	libfreetype6-udeb_2.4.9-1.1+deb7u3_ia64.deb
Debian	7	powerpc	libfreetype6	< 2.4.9-1.1+deb7u3	libfreetype6_2.4.9-1.1+deb7u3_powerpc.deb
Debian	7	mipsel	libfreetype6-udeb	< 2.4.9-1.1+deb7u3	libfreetype6-udeb_2.4.9-1.1+deb7u3_mipsel.deb