bugtraq - [SECURITY] [DSA 3461-1] freetype security update

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: Sun, 31 Jan 2016 08:11:20 +0000
From: Sebastien Delafond <seb@...ian.org>
To: bugtraq@...urityfocus.com
Subject: [SECURITY] [DSA 3461-1] freetype security update

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian Security Advisory DSA-3461-1                   security@...ian.org
https://www.debian.org/security/                       Sebastien Delafond
January 30, 2016                      https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : freetype
CVE ID         : CVE-2014-9674
Debian Bug     : 777656

Mateusz Jurczyk discovered multiple vulnerabilities in
Freetype. Opening malformed fonts may result in denial of service or
the execution of arbitrary code.

For the oldstable distribution (wheezy), this problem has been fixed
in version 2.4.9-1.1+deb7u3.

We recommend that you upgrade your freetype packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: debian-security-announce@...ts.debian.org
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iQEcBAEBCgAGBQJWrOhcAAoJEBC+iYPz1Z1kxa0H/jSrsNfv2lZ9QBNWt38WPPA6
HWb3zRecirBL3kkhDzQ9sjyXREpCq47jl0eWXR0aFm8Ah4F0K+ZCmiPPh2XK4g0H
ZXmaiDT65EokkkKJ6All3oMk3d3Cg80M0jAA0c1bMm478jOiprwTjSt0/jORNSXT
BmGE8a6X3CGdfgu9kpwtq2LtEfd/jHADwjxwvxIRiQbqqPYRLQh1ySfvFvDpP8Ko
YWkQfDJU0hj62py4WunWUX0kPSGR/RpAqFfZDxjRxPNPy4MwKwuYbChxSd2Nr8DF
t1uFjaQ3QFOCquKkiwqTDkM79Ekwlw802My/WCwbQ8OmUDWk4e5ZsHVKu2RySRs=
=ZkN4
-----END PGP SIGNATURE-----