Linux Security
    Linux Security
    Linux Security

    Debian: New freetype packages fix arbitary code execution

    Date 18 Jul 2007
    Posted By LinuxSecurity Advisories
    A problem was discovered with freetype, a FreeType2 font engine, which could allow the execution of arbitary code via an integer overflow in specially crafted TTF files.
    - ------------------------------------------------------------------------
    Debian Security Advisory DSA-1334                    This email address is being protected from spambots. You need JavaScript enabled to view it.                               Steve Kemp
    July 18th, 2007
    - ------------------------------------------------------------------------
    Package        : freetype
    Vulnerability  : integer overflow
    Problem type   : local
    Debian-specific: no
    CVE Id(s)      : CVE-2007-2754
    Debian Bug     : 425625
    A problem was discovered with freetype, a FreeType2 font engine, which
    could allow the execution of arbitary code via an integer overflow in
    specially crafted TTF files.
    For the old stable distribution (sarge), this problem has been fixed in
    version 2.1.7-8.
    We recommend that you upgrade your freetype package.
    Upgrade instructions
    - --------------------
    wget url
            will fetch the file for you
    dpkg -i file.deb
            will install the referenced file.
    If you are using the apt-get package manager, use the line for
    sources.list as given below:
    apt-get update
            will update the internal database
    apt-get upgrade
            will install corrected packages
    You may use an automated update by adding the resources from the
    footer to the proper configuration.
    Debian GNU/Linux 3.1 alias sarge
    - --------------------------------
    Oldstable updates are available for alpha, amd64, arm, hppa, i386, ia64, m68k, mips, mipsel, powerpc, s390 and sparc.
    Source archives:
        Size/MD5 checksum:    57953 d94a3a7e7575ab5c5aa67d5fc630077d
        Size/MD5 checksum:      754 f04967ca8fffb4340fd8ef716d8fbfb5
        Size/MD5 checksum:  1245623 991ff86e88b075ba363e876f4ea58680
    amd64 architecture (AMD x86_64 (AMD64))
        Size/MD5 checksum:    76244 53d4356cfbea6313e1ee0990d2d83b49
        Size/MD5 checksum:   238290 afadfd7dd3c2a2063826e1116740f04e
        Size/MD5 checksum:   390326 6ed30e4b053950c321e4c2010a8265cc
        Size/MD5 checksum:   723758 231145ee63a527899fea4d049e95b58d
    arm architecture (ARM)
        Size/MD5 checksum:   714504 dbe9287cce58eea37c754e8d0a3e7e41
        Size/MD5 checksum:   201950 a7811a90eefb9d9e468ab7e93327bcc2
        Size/MD5 checksum:   352948 b3a8d18cde53bee6b5b6840541b999f4
        Size/MD5 checksum:    58750 9bea9b63383a79219152946274113d80
    hppa architecture (HP PA RISC)
        Size/MD5 checksum:    80764 f2233eae737a535cbd3a30093d89bde6
        Size/MD5 checksum:   256256 45ad964f89b8d1d51e5bca8a446e40c1
        Size/MD5 checksum:   734426 9a831f2c775dd9dae5a237681dedfffb
        Size/MD5 checksum:   407518 659cedf86f7e23bbc492bab1049783a3
    i386 architecture (Intel ia32)
        Size/MD5 checksum:   212968 df44023a71960bb13e8cbc868a99805c
        Size/MD5 checksum:   695068 7e558fc40413ac96d54a6e187619923a
        Size/MD5 checksum:   364974 7abd8cdd3d0b864b0f593eb391e95dc8
        Size/MD5 checksum:    63184 e6c2ceadaa8a74247d1fe3eb4eead534
    ia64 architecture (Intel ia64)
        Size/MD5 checksum:   493880 945ff8b8ae11ce35e6dbf53c0068eec7
        Size/MD5 checksum:   843972 e7838653f9bbc9cf243e00f26d435ff6
        Size/MD5 checksum:   341116 12676831a0ccabb37e6346b8aa063d0a
        Size/MD5 checksum:   102618 86014510edee689b0d570c83a94dea30
    m68k architecture (Motorola Mc680x0)
        Size/MD5 checksum:   359844 b90a83af3e723062b5f9ab590c67ecda
        Size/MD5 checksum:   208454 86533c9cd2e94209d04e938042ff25e9
        Size/MD5 checksum:    43856 f00cf40416546eccb2b4d8a1d14b94ff
        Size/MD5 checksum:   678792 1e51d7c3ace5e00736dfe1082665a0aa
    mipsel architecture (MIPS (Little Endian))
        Size/MD5 checksum:   735756 60e2a76fe143e22ec18e968407efff2b
        Size/MD5 checksum:   376574 465eeacb3d5069ce4011afe790eec611
        Size/MD5 checksum:   224484 747637f4000b1255ed79165f31306e26
        Size/MD5 checksum:    91516 861bc134ad1e3b8f636c7cb04f920146
    powerpc architecture (PowerPC)
        Size/MD5 checksum:    81972 21c655f4a0f23ac0156a4e647eef3c6b
        Size/MD5 checksum:   227788 471baf7fc8deab7573a3874d69eb7fc4
        Size/MD5 checksum:   379710 6d2395c5493b22950e03ed7076f06053
        Size/MD5 checksum:   730048 ce12974d2c15211717e33f259baf80de
    s390 architecture (IBM S/390)
        Size/MD5 checksum:   752418 b760ce325b6248fe570ccf8308e96988
        Size/MD5 checksum:   400292 5acc947b96fb8cf2a2b938c9755a9b0a
        Size/MD5 checksum:   248410 b5adecd81d13a3a783d75c3b0e8766ef
        Size/MD5 checksum:    76220 a7d6d405020b46a63962f52e1b6eb220
    sparc architecture (Sun SPARC/UltraSPARC)
        Size/MD5 checksum:   699932 1547efb201ad609d8bc63bcdb344913e
        Size/MD5 checksum:    68420 39bc0471fa54e84d3aec973146b15019
        Size/MD5 checksum:   212702 1bc5e538b41f82dc55185d8a25d3199f
        Size/MD5 checksum:   364122 420a5cf5e3886648551f47c6a132971e
      These files will probably be moved into the stable distribution on
      its next update.
    - ---------------------------------------------------------------------------------
    For apt-get: deb stable/updates main
    For dpkg-ftp: dists/stable/updates/main
    Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it.

    LinuxSecurity Poll

    'Tis the season of giving! How have you given back to the open-source community?

    No answer selected. Please try again.
    Please select either existing option or enter your own, however not both.
    Please select minimum 0 answer(s) and maximum 3 answer(s).
    [{"id":"171","title":"I've contributed to the development of an open-source project.","votes":"8","type":"x","order":"1","pct":27.59,"resources":[]},{"id":"172","title":"I've reviewed open-source code for security bugs.","votes":"6","type":"x","order":"2","pct":20.69,"resources":[]},{"id":"173","title":"I've made a donation to an open-source project.","votes":"15","type":"x","order":"3","pct":51.72,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350

    Please vote first in order to view vote results.


    bottom 200

    Please enable / Bitte aktiviere JavaScript!
    Veuillez activer / Por favor activa el Javascript![ ? ]

    We use cookies to provide and improve our services. By using our site, you consent to our Cookie Policy.