freetype - integer overflows

Several problems have been discovered in the FreeType 2 font engine.
The Common vulnerabilities and Exposures project identifies the
following problems:

• CVE-2006-0747
  Several integer underflows have been discovered which could allow
  remote attackers to cause a denial of service.
• CVE-2006-1861
  Chris Evans discovered several integer overflows that lead to a
  denial of service or could possibly even lead to the execution of
  arbitrary code.
• CVE-2006-2493
  Several more integer overflows have been discovered which could
  possibly lead to the execution of arbitrary code.
• CVE-2006-2661
  A null pointer dereference could cause a denial of service.

For the old stable distribution (woody) these problems have been fixed in
version 2.0.9-1woody1.

For the stable distribution (sarge) these problems have been fixed in
version 2.1.7-2.5.

For the unstable distribution (sid) these problems will be fixed soon

We recommend that you upgrade your libfreetype packages.