Ubuntu 12.10-12.04 LTS USN-1686-1 Critical: FreeType Crash Threat

ubuntu

January 14, 2013

FreeType could be made to crash or run programs as your login if it opened a specially crafted file.

Summary

FreeType could be made to crash or run programs as your login if it opened

a specially crafted file.

Software Description:

- freetype: FreeType 2 is a font engine library

Details:

Mateusz Jurczyk discovered that FreeType did not correctly handle certain

malformed BDF font files. If a user were tricked into using a specially

crafted font file, a remote attacker could cause FreeType to crash or

possibly execute arbitrary code with user privileges.

Topics Covered

security advisory critical arbitrary code ubuntu freetype crash malformed font

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 12.10:
  libfreetype6                    2.4.10-0ubuntu1.1

Ubuntu 12.04 LTS:
  libfreetype6                    2.4.8-1ubuntu2.1

Ubuntu 11.10:
  libfreetype6                    2.4.4-2ubuntu1.3

Ubuntu 10.04 LTS:
  libfreetype6                    2.3.11-1ubuntu2.7

Ubuntu 8.04 LTS:
  libfreetype6                    2.3.5-1ubuntu4.8.04.10

After a standard system update you need to restart your session to make all
the necessary changes.