Sinopsis

Moderate: freetype security update

Tipo/Gravedad

Security Advisory: Moderate

Tema:

Updated freetype packages that fix a security flaw are now available for Red
Hat Enterprise Linux 2.1, 3, 4, and 5.

This update has been rated as having moderate security impact by the Red
Hat Security Response Team.

Descripción

FreeType is a free, high-quality, portable font engine.

An integer overflow flaw was found in the way the FreeType font engine
processed TTF font files. If a user loaded a carefully crafted font file
with a program linked against FreeType, it could cause the application to
crash or execute arbitrary code. While it is uncommon for a user to
explicitly load a font file, there are several application file formats
which contain embedded fonts that are parsed by FreeType. (CVE-2007-2754)

Users of FreeType should upgrade to these updated packages, which contain
a backported patch to correct this issue.

Solución

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use
the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/FAQ_58_10188

Productos afectados

• Red Hat Enterprise Linux Server 5 x86_64
• Red Hat Enterprise Linux Server 5 ia64
• Red Hat Enterprise Linux Server 5 i386
• Red Hat Enterprise Linux Server 4 x86_64
• Red Hat Enterprise Linux Server 4 ia64
• Red Hat Enterprise Linux Server 4 i386
• Red Hat Enterprise Linux Server 3 x86_64
• Red Hat Enterprise Linux Server 3 ia64
• Red Hat Enterprise Linux Server 3 i386
• Red Hat Enterprise Linux Server - Extended Update Support 4.5 x86_64
• Red Hat Enterprise Linux Server - Extended Update Support 4.5 ia64
• Red Hat Enterprise Linux Server - Extended Update Support 4.5 i386
• Red Hat Enterprise Linux Workstation 5 x86_64
• Red Hat Enterprise Linux Workstation 5 i386
• Red Hat Enterprise Linux Workstation 4 x86_64
• Red Hat Enterprise Linux Workstation 4 ia64
• Red Hat Enterprise Linux Workstation 4 i386
• Red Hat Enterprise Linux Workstation 3 x86_64
• Red Hat Enterprise Linux Workstation 3 ia64
• Red Hat Enterprise Linux Workstation 3 i386
• Red Hat Enterprise Linux Desktop 5 x86_64
• Red Hat Enterprise Linux Desktop 5 i386
• Red Hat Enterprise Linux Desktop 4 x86_64
• Red Hat Enterprise Linux Desktop 4 i386
• Red Hat Enterprise Linux Desktop 3 x86_64
• Red Hat Enterprise Linux Desktop 3 i386
• Red Hat Enterprise Linux for IBM z Systems 5 s390x
• Red Hat Enterprise Linux for IBM z Systems 4 s390x
• Red Hat Enterprise Linux for IBM z Systems 4 s390
• Red Hat Enterprise Linux for IBM z Systems 3 s390x
• Red Hat Enterprise Linux for IBM z Systems 3 s390
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 4.5 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 4.5 s390
• Red Hat Enterprise Linux for Power, big endian 5 ppc
• Red Hat Enterprise Linux for Power, big endian 4 ppc
• Red Hat Enterprise Linux for Power, big endian 3 ppc
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 4.5 ppc
• Red Hat Enterprise Linux Server from RHUI 5 x86_64
• Red Hat Enterprise Linux Server from RHUI 5 i386

Correcciones

• BZ - 240200 - CVE-2007-2754 freetype integer overflow

CVE

• CVE-2007-2754

Referencias

• http://www.redhat.com/security/updates/classification/#moderate

Red Hat Enterprise Linux for Power, big endian 4

SRPM
ppc
freetype-2.1.9-6.el4.ppc.rpm	SHA-256: 1dfbea52ef99b7cfb0d6e027993f7389beebf28a371292620c0f41a95bcb9d1f
freetype-2.1.9-6.el4.ppc64.rpm	SHA-256: 38eacd1e1b4aa2e04df3be57f1f068ad8b446521e17994fdd8fb0669976e6665
freetype-demos-2.1.9-6.el4.ppc.rpm	SHA-256: d9540e89aea9e9138c28c9342d95701147bdf26763b5304b50a2064469dfa13f
freetype-devel-2.1.9-6.el4.ppc.rpm	SHA-256: 4704a3429c0bb85013d606d2d727c2798cd4e54fc43d6f9cf6f3d4a452f2056b
freetype-utils-2.1.9-6.el4.ppc.rpm	SHA-256: f5805aece8c77d3d199ab698c761249d0eaa14847eb8e3471754e08e6bd79ee4

Red Hat Enterprise Linux for Power, big endian - Extended Update Support 4.5

SRPM
ppc
freetype-2.1.9-6.el4.ppc.rpm	SHA-256: 1dfbea52ef99b7cfb0d6e027993f7389beebf28a371292620c0f41a95bcb9d1f
freetype-2.1.9-6.el4.ppc64.rpm	SHA-256: 38eacd1e1b4aa2e04df3be57f1f068ad8b446521e17994fdd8fb0669976e6665
freetype-demos-2.1.9-6.el4.ppc.rpm	SHA-256: d9540e89aea9e9138c28c9342d95701147bdf26763b5304b50a2064469dfa13f
freetype-devel-2.1.9-6.el4.ppc.rpm	SHA-256: 4704a3429c0bb85013d606d2d727c2798cd4e54fc43d6f9cf6f3d4a452f2056b
freetype-utils-2.1.9-6.el4.ppc.rpm	SHA-256: f5805aece8c77d3d199ab698c761249d0eaa14847eb8e3471754e08e6bd79ee4