freetype - multiple vulnerabilities

Several local vulnerabilities have been discovered in freetype,
a FreeType 2 font engine, which could allow the execution of arbitrary
code.

The Common Vulnerabilities and Exposures project identifies the
following problems:

• CVE-2008-1806
  An integer overflow allows context-dependent attackers to execute
  arbitrary code via a crafted set of values within the Private
  dictionary table in a Printer Font Binary (PFB) file.
• CVE-2008-1807
  The handling of an invalid number of axes field in the PFB file could
  trigger the freeing of arbitrary memory locations, leading to
  memory corruption.
• CVE-2008-1808
  Multiple off-by-one errors allowed the execution of arbitrary code
  via malformed tables in PFB files, or invalid SHC instructions in
  TTF files.

For the stable distribution (etch), these problems have been fixed in version
2.2.1-5+etch3.

For the unstable distribution (sid), these problems have been fixed in
version 2.3.6-1.

We recommend that you upgrade your freetype package.