Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 496
Alerts This Week
Warning Icon 1 496

Ubuntu 12.04 LTS USN-3282-2 Critical FreeType Denial Of Service

ubuntu
Calendar Grey May 18, 2017
Dist Ubuntu Esm H88
A security flaw has been discovered in Ubuntu 12.04 LTS due to issues in FreeType, which may result in denial of service or arbitrary code execution risks
FreeType could be made to crash or run programs if it opened a specially crafted font file.

Summary

FreeType could be made to crash or run programs if it opened a specially

crafted font file.

Software Description:

- freetype: FreeType 2 is a font engine library

Details:

It was discovered that FreeType did not correctly handle certain malformed

font files. If a user were tricked into using a specially crafted font

file, a remote attacker could cause FreeType to crash, resulting in a

denial of service, or possibly execute arbitrary code.

Topics%20covered

Topics Covered

security advisory denial of service critical arbitrary code execution ubuntu freetype

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 12.04 LTS:
  libfreetype6                    2.4.8-1ubuntu2.6

After a standard system update you need to restart your session to make
all the necessary changes.

References

  https://ubuntu.com/security/notices/USN-3282-2

  https://ubuntu.com/security/notices/USN-3282-1

  CVE-2017-8105, CVE-2017-8287

Severity
critical
Lowest
Low
Medium
High
Critical

May 16, 2017

Topics%20covered

Topics Covered

security advisory denial of service critical arbitrary code execution ubuntu freetype

Package Information

  https://launchpad.net/ubuntu/+source/freetype/2.4.8-1ubuntu2.6

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.