Alerts This Week
Warning Icon 1 923
Alerts This Week
Warning Icon 1 923

Mageia 8: MGASA-2023-0199 High: Freetype Buffer Overflow Vulnerability

mageia
Calendar Grey May 21, 2023
Dist Mageia Esm H88
Mageia 2023-0183 addresses a critical memory vulnerability in libjpeg. Essential information and patches have been thoroughly examined.
An integer overflow vulnerability was discovered in Freetype in tt_hvadvance_adjust() function in src/truetype/ttgxvar.c

Summary

An integer overflow vulnerability was discovered in Freetype in tt_hvadvance_adjust() function in src/truetype/ttgxvar.c. (CVE-2023-2004)

References

- https://bugs.mageia.org/show_bug.cgi?id=31887

- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/KDNGTGQAUZJ6YQDI2AVGYIFFPUMMZLKS/

- https://ubuntu.com/security/notices/USN-6062-1

- https://www.cve.org/CVERecord?id=CVE-2023-2004

Topics%20covered

Topics Covered

security advisory critical issue integer overflow freetype mageia

Resolution

SRPMS

- 8/core/freetype2-2.10.4-2.3.mga8

- 8/tainted/freetype2-2.10.4-2.3.mga8.tainted

Severity
important
Lowest
Low
Medium
High
Critical

Publication date: 21 May 2023
URL: https://advisories.mageia.org/MGASA-2023-0182.html
Type: security
CVE: CVE-2023-2004

Topics%20covered

Topics Covered

security advisory critical issue integer overflow freetype mageia

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here