DLA-587-1 fontconfig - security update

Bulletin has no description...

DSA-3644-1 fontconfig - security update

Bulletin has no description...

PT-2016-6398 · Fontconfig +5 · Fontconfig +5

Name of the Vulnerable Software and Affected Versions: fontconfig versions prior to 2.12.1 Description: The issue allows local users to trigger arbitrary free calls and conduct double free attacks, potentially leading to the execution of arbitrary code. This can be achieved via a crafted cache...

Debian: Security Advisory (DSA-3644-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

fontconfig -- insufficiently cache file validation

Debian security team reports: Tobias Stoeckmann discovered that cache files are insufficiently validated in fontconfig, a generic font configuration library. An attacker can trigger arbitrary free calls, which in turn allows double free attacks and therefore arbitrary code execution. In combinati...

SUSE-RU-2015:1239-1 Recommended update for freetype2

This update of freetype2 fixes a regression introduced by the security fix for CVE-2014-9671. This is not itself a security issue, it just improves on a previous one. This update is needed for LSB 5 fontconfig usage...

Oracle Linux 5 : java-1.7.0-openjdk (ELSA-2013-0752)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-0752 advisory. 1.7.0.19-2.3.9.1.0.1.el59 - Add oracle-enterprise.patch - Fix DISTRONAME to Enterprise Linux 1.7.0.19-2.3.9.1.el5 - updated to updated IcedTea 2.3.9 wi...

Fedora 17 : gimp-2.8.4-1.fc17 (2013-2000)

Among other things this update fixes a vulnerability with corrupt XWD files and a crash with newer versions of fontconfig when gimp is quit. Overview of Changes from GIMP 2.8.2 to GIMP 2.8.4 ================================================= GUI : - Better names for the default filters in save and...

Slackware Advisory SSA:2006-207-02 x11

The remote host is missing an update as announced via advisory SSA:2006-207-02. OpenVAS Vulnerability Test $Id: esoftslkssa200620702.nasl 6598 2017-07-07 09:36:44Z cfischer $ Description: Auto-generated from the corresponding slackware advisory Authors: Thomas Reinke Copyright: Copyright c 2012...

Slackware Advisory SSA:2007-110-01 Slackware 11.0 x11-6.9.0 patch fix

The remote host is missing an update as announced via advisory SSA:2007-110-01. OpenVAS Vulnerability Test $Id: esoftslkssa200711001.nasl 6598 2017-07-07 09:36:44Z cfischer $ Description: Auto-generated from the corresponding slackware advisory Authors: Thomas Reinke Copyright: Copyright c 2012...

Slackware Advisory SSA:2007-109-01 freetype

The remote host is missing an update as announced via advisory SSA:2007-109-01. OpenVAS Vulnerability Test $Id: esoftslkssa200710901.nasl 6598 2017-07-07 09:36:44Z cfischer $ Description: Auto-generated from the corresponding slackware advisory Authors: Thomas Reinke Copyright: Copyright c 2012...

Slackware: Security Advisory (SSA:2007-110-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Slackware: Security Advisory (SSA:2007-109-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Slackware: Security Advisory (SSA:2006-207-02)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MDVA-2009:255 : fontconfig

A bug in fontconfig language cache was generating invalid cache which would cause crashes or freeze when upgrading previous Mandriva Linux release to Mandriva Linux 2010 using live update feature. This updates fixes this issue. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as t...

Slackware 11.0 : Slackware 11.0 x11-6.9.0 patch fix (SSA:2007-110-01)

A new x11-6.9.0-i486-14slack11.0.tgz patch is available for Slackware 11.0 to fix the inadvertent inclusion of two old fontconfig binaries. Installing the original fontconfig patch followed by the original x11 patch would cause fc-cache and fc-list to be overwritten by old versions, breaking...

Slackware 10.1 / 10.2 / 11.0 / current : freetype (SSA:2007-109-01)

New x11 and/or freetype and fontconfig packages are available for Slackware 10.1, 10.2, 11.0, and -current to fix security issues in freetype. Freetype was packaged with X11 prior to Slackware version 11.0. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package chec...

[slackware-security] Slackware 11.0 x11-6.9.0 patch fix

A new x11-6.9.0-i486-14slack11.0.tgz patch is available for Slackware 11.0 to fix the inadvertent inclusion of two old fontconfig binaries. Installing the original fontconfig patch followed by the original x11 patch would cause fc-cache and fc-list to be overwritten by old versions, breaking...

[slackware-security] freetype

New x11 and/or freetype and fontconfig packages are available for Slackware 10.1, 10.2, 11.0, and -current to fix security issues in freetype. Freetype was packaged with X11 prior to Slackware version 11.0. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE...

Slackware 10.2 / current : x11 (SSA:2006-207-02)

New x11 packages are available for Slackware 10.2 and -current to fix security issues. In addition, fontconfig and freetype have been split out from the x11 packages in -current, so if you run -current you'll also need to install those new packages. %NASLMINLEVEL 70300 C Tenable Network Security,...