Alerts This Week
Warning Icon 1 659
Alerts This Week
Warning Icon 1 659

Stay Secure with the Latest Linux Advisories

Debianlts Large Esm H800
Debian LTS

Debian Dovecot High Severity Service Disruption Info Leak Flaw DLA-4617-1

Calendar White Jun 05, 2026
Important
Debianlts Large Esm H900
Debian LTS

Debian 11 gsasl Critical DoS Threat Advisory DLA-4618-1 CVE-2026-48829

Calendar White Jun 05, 2026
Critical
Suse Large Esm H900
SuSE

SUSE MozillaThunderbird Important Memory Safety Fix Advisory 2026-2271-1

Calendar White Jun 05, 2026
Important
Suse Large Esm H800
SuSE

SUSE Linux Micro 6.0 Ignition Key HTTP Transport Loop Patch 2026-21987-1

Calendar White Jun 05, 2026
Important
Suse Large Esm H900
SuSE

SUSE Linux Micro 6.0 Important Libzypp Libsolv Security Update 2026-21988-1

Calendar White Jun 05, 2026
Important
Suse Large Esm H900
SuSE

SUSE Google-Guest-Agent Important Security Update 2026-21989-1

Calendar White Jun 05, 2026
Important
Suse Large Esm H800
SuSE

SUSE Linux Micro Important Salt Multi-Linux Manager Vuln 2026-21990-1

Calendar White Jun 05, 2026
Important
Suse Large Esm H900
SuSE

SUSE Linux Micro Critical Ignition Patch CVE-2026-33814

Calendar White Jun 05, 2026
Important
Suse Large Esm H900
SuSE

SUSE Linux Micro 6.1 Security Update for libzypp libsolv Key 2026-21992-1

Calendar White Jun 05, 2026
Important
Filter Icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found 2 articles for you...
89
Ls Advisories Fedora Esm H240
Price Tag 1security advisoryfedorasoftware update

Fedora 44 FreeType Update 2026-a5b86bbf99 Addresses Critical Bug Fix

Update of FreeType to 2.14.3.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-a5b86bbf99 2026-04-25 01:21:36.172866+00:00 -------------------------------------------------------------------------------- Name : freetype Product : Fedora 44 Version : 2.14.3 Release : 1.fc44 URL : http://www.freetype.org Summary : A free and portable font rendering engine Description : The FreeType engine is a free and portable font rendering engine, developed to provide advanced font support for a variety of platforms and environments. FreeType is a library which can open and manages font files as well as efficiently load, hint and render individual glyphs. FreeType is not a font server or a complete text-rendering library. -------------------------------------------------------------------------------- Update Information: Update of FreeType to 2.14.3. -------------------------------------------------------------------------------- ChangeLog: * Mon Apr 13 2026 Marek Kasik - 2.14.3-1 - Update to 2.14.3 - Resolves: #2443653 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2443653 - freetype-2.14.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=2443653 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-a5b86bbf99' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new . Update notice for FreeType 2.14.3 in Fedora 44, addressing bug #2443653 with installation advice.. Fedora Update, FreeType 2.14.3, Software Patching, Font Rendering. . LinuxSecurity.com Team

Calendar 2 Apr 25, 2026 Fedora
89
Ls Advisories Fedora Esm H240
Price Tag 1security advisoryfedoracritical

Fedora 38: FEDORA-2023-a48406ecd2 Critical: freetype Denial of Service

Security fix for CVE-2023-25193 Update of HarfBuzz to 7.0.1 version (#2169172) Update of freetype to 2.13.0 version (#2168496) ---- Security fix for CVE-2023-25193, Update to 7.0.1 version (#2169172). --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2023-a48406ecd2 2023-03-14 03:31:10.484456 --------------------------------------------------------------------------------Name : freetype Product : Fedora 38 Version : 2.13.0 Release : 2.fc38 URL : https://freetype.org/ Summary : A free and portable font rendering engine Description : The FreeType engine is a free and portable font rendering engine, developed to provide advanced font support for a variety of platforms and environments. FreeType is a library which can open and manages font files as well as efficiently load, hint and render individual glyphs. FreeType is not a font server or a complete text-rendering library. --------------------------------------------------------------------------------Update Information: Security fix for CVE-2023-25193 Update of HarfBuzz to 7.0.1 version (#2169172) Update of freetype to 2.13.0 version (#2168496) ---- Security fix for CVE-2023-25193, Update to 7.0.1 version (#2169172) --------------------------------------------------------------------------------ChangeLog: * Sun Feb 26 2023 Marek Kasik - 2.13.0-2 - Rebuild in side-tag - Resolves: #2168496 * Sun Feb 26 2023 Marek Kasik - 2.13.0-1 - Update to 2.13.0 - Resolves: #2168496 --------------------------------------------------------------------------------References: [ 1 ] Bug #2167254 - CVE-2023-25193 harfbuzz: allows attackers to trigger O(n^2) growth via consecutive marks https://bugzilla.redhat.com/show_bug.cgi?id=2167254 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2023-a48406ecd2' atthe command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ Do not reply to spam, report it: . Fedora 38 release tackles CVE-2023-25195 in libc, bringing critical improvements with enhanced memory safety features. Upgrade using DNF for vital updates.. freetype update, Fedora 38, harfbuzz patch, security advisory. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Mar 14, 2023 •Critical Fedora
Banner 4 1028x280 1708121825 1771600306
89
Ls Advisories Fedora Esm H240
Price Tag 1security advisorybuffer overflowcritical

Fedora 36: 2022-7ece4f6d74 Critical: Freetype Segmentation Faults

Update to 2.12.1. ---- Backport fixes for CVE-2022-27404, CVE-2022-27405, CVE-2022-27406. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2022-7ece4f6d74 2022-05-11 01:16:35.951570 --------------------------------------------------------------------------------Name : mingw-freetype Product : Fedora 36 Version : 2.12.1 Release : 1.fc36 URL : https://freetype.org/ Summary : Free and portable font rendering engine Description : MinGW Windows Freetype library. --------------------------------------------------------------------------------Update Information: Update to 2.12.1. ---- Backport fixes for CVE-2022-27404, CVE-2022-27405, CVE-2022-27406 --------------------------------------------------------------------------------ChangeLog: * Tue May 3 2022 Sandro Mani - 2.12.1-1 - Update to 2.12.1 * Tue Apr 26 2022 Sandro Mani - 2.12.0-1 - Update to 2.12.0 * Fri Mar 25 2022 Sandro Mani - 2.11.1-3 - Rebuild with mingw-gcc-12 --------------------------------------------------------------------------------References: [ 1 ] Bug #2079182 - CVE-2022-27406 mingw-freetype: Freetype: Segmentation violation [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2079182 [ 2 ] Bug #2079204 - CVE-2022-27404 mingw-freetype: FreeType: Buffer Overflow [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2079204 [ 3 ] Bug #2079256 - CVE-2022-27405 mingw-freetype: FreeType: Segementation Fault [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2079256 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2022-7ece4f6d74' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. Moredetails on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure . Fedora 36 has received an update to Mingw-freetype 2.12.1, addressing several key issues. Essential for ensuring the stability of the system.. Mingw-freetype Update, Fedora Security, Font Issues Fixes, Critical Update. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 May 10, 2022 •Critical Fedora
89
Ls Advisories Fedora Esm H240
Price Tag 1security advisorycriticalFedora

Fedora 22: FEDORA-2016-338a7e9925 Critical: Graphite2 Font Render Threat

Unspecified security fixes ---- Security fix for CVE-2016-1521, CVE-2016-1522, CVE-2016-1523 and CVE-2016-1526. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2016-338a7e9925 2016-05-10 11:43:00.964898 -------------------------------------------------------------------------------- Name : graphite2 Product : Fedora 22 Version : 1.3.6 Release : 1.fc22 URL : https://sourceforge.net/projects/silgraphite/ Summary : Font rendering capabilities for complex non-Roman writing systems Description : Graphite2 is a project within SIL’s Non-Roman Script Initiative and Language Software Development groups to provide rendering capabilities for complex non-Roman writing systems. Graphite can be used to create “smart fonts” capable of displaying writing systems with various complex behaviors. With respect to the Text Encoding Model, Graphite handles the "Rendering" aspect of writing system implementation. -------------------------------------------------------------------------------- Update Information: Unspecified security fixes ---- Security fix for CVE-2016-1521, CVE-2016-1522, CVE-2016-1523 and CVE-2016-1526 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1305806 - CVE-2016-1521 graphite2: Two out-of-bound read vulnerabilities triggered by crafted fonts [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1305806 [ 2 ] Bug #1308591 - CVE-2016-1526 graphite2: Out-of-bounds read vulnerability in TfUtil:LocaLookup [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1308591 [ 3 ] Bug #1305814 - CVE-2016-1523 graphite2: Heap-based buffer overflow in context item handling functionality [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1305814 [ 4 ] Bug #1305811 - CVE-2016-1522 graphite2: Null pointer dereference and out-of-bounds access vulnerabilities [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1305811 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update graphite2' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- . Essential improvements for graphite2 in Fedora responding to various CVE vulnerabilities aimed at bolstering system safety and reliability.. graphite2 fixes,Fedora security updates,software vulnerabilities,font rendering security. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 May 10, 2016 •Critical Fedora
Banner 4 1028x280 1708121825 1771600306
172
Ls Advisories Ubuntu Esm H240
Price Tag 1security advisorydenial of servicecritical

Ubuntu 15.10 USN-2927-1 Critical: Graphite2 Denial Of Service

graphite2 could be made to crash or run programs as your login if it opened a specially crafted font.. =========================================================================Ubuntu Security Notice USN-2927-1 March 14, 2016 graphite2 vulnerabilities ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 15.10 - Ubuntu 14.04 LTS Summary: graphite2 could be made to crash or run programs as your login if it opened a specially crafted font. Software Description: - graphite2: Font rendering engine for Complex Scripts Details: It was discovered that graphite2 incorrectly handled certain malformed fonts. If a user or automated system were tricked into opening a specially-crafted font file, a remote attacker could use this issue to cause graphite2 to crash, resulting in a denial of service, or possibly execute arbitrary code. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 15.10: libgraphite2-3 1.3.6-1ubuntu0.15.10.1 Ubuntu 14.04 LTS: libgraphite2-3 1.3.6-1ubuntu0.14.04.1 This update uses a new upstream release, which includes additional bug fixes. After a standard system update you need to restart applications using graphite2, such as LibreOffice, to make all the necessary changes. References: https://ubuntu.com/security/notices/USN-2927-1 CVE-2016-1977, CVE-2016-2790, CVE-2016-2791, CVE-2016-2792, CVE-2016-2793, CVE-2016-2794, CVE-2016-2795, CVE-2016-2796, CVE-2016-2797, CVE-2016-2798, CVE-2016-2799, CVE-2016-2800, CVE-2016-2801, CVE-2016-2802 Package Information: https://launchpad.net/ubuntu/+source/graphite2/1.3.6-1ubuntu0.15.10.1 https://launchpad.net/ubuntu/+source/graphite2/1.3.6-1ubuntu0.14.04.1 . Tackling weaknesses in graphite2 that may lead to system failures or permit unauthorized code execution.. Graphite2Vulnerabilities, Ubuntu Security Update, Denial of Service, Critical Issues. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Mar 14, 2016 •Critical Ubuntu
87
Ls Advisories Debian Esm H240
Price Tag 1security advisorydenial of servicecritical

Debian 1.3.5-1 DSA-3479-1 Critical: Graphite2 Code Execution Risk

Multiple vulnerabilities have been found in the Graphite font rendering engine which might result in denial of service or the execution of arbitrary code if a malformed font file is processed. . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3479-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/security/ Moritz Muehlenhoff February 15, 2016 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : graphite2 CVE ID : CVE-2016-1521 CVE-2016-1522 CVE-2016-1523 Multiple vulnerabilities have been found in the Graphite font rendering engine which might result in denial of service or the execution of arbitrary code if a malformed font file is processed. For the oldstable distribution (wheezy), these problems have been fixed in version 1.3.5-1~deb7u1. For the stable distribution (jessie), these problems have been fixed in version 1.3.5-1~deb8u1. For the testing distribution (stretch), these problems have been fixed in version 1.3.5-1. For the unstable distribution (sid), these problems have been fixed in version 1.3.5-1. We recommend that you upgrade your graphite2 packages. Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . Several security flaws in the Graphite typeface engine could result in service disruptions or the potential for executing unauthorized code; users are advised to update.. Graphite Font, Debian Security, Code Execution, Denial of Service, Security Advisory. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Feb 15, 2016 •Critical Debian
Banner 4 1028x280 1708121825 1771600306
98
Ls Advisories Redhat Esm H240
Price Tag 1security advisoryRed Hatupdate

Red Hat: 2011:1085-01 Important Freetype Crash Risk Advisory

Updated freetype packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having [More...]. ==================================================================== Red Hat Security Advisory Synopsis: Important: freetype security update Advisory ID: RHSA-2011:1085-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2011:1085.html Issue date: 2011-07-21 CVE Names: CVE-2011-0226 ==================================================================== 1. Summary: Updated freetype packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux Desktop (v. 6) - i386, x86_64 Red Hat Enterprise Linux Desktop Optional (v. 6) - i386, x86_64 Red Hat Enterprise Linux HPC Node (v. 6) - x86_64 Red Hat Enterprise Linux HPC Node Optional (v. 6) - x86_64 Red Hat Enterprise Linux Server (v. 6) - i386, ppc64, s390x, x86_64 Red Hat Enterprise Linux Server Optional (v. 6) - i386, ppc64, s390x, x86_64 Red Hat Enterprise Linux Workstation (v. 6) - i386, x86_64 Red Hat Enterprise Linux Workstation Optional (v. 6) - i386, x86_64 3. Description: FreeType is a free, high-quality, portable font engine that can open and manage font files. It also loads, hints, and renders individual glyphs efficiently. These packages provide the FreeType 2 font engine. A flaw was found in the way the FreeType font rendering engine processed certain PostScript Type 1 fonts. If a user loaded a specially-crafted font file with an application linked against FreeType, it could cause the application to crash or, possibly, execute arbitrary codewith the privileges of the user running the application. (CVE-2011-0226) Users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue. The X server must be restarted (log out, then log back in) for this update to take effect. 4. Solution: Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/kb/docs/DOC-11259 5. Bugs fixed (http://bugzilla.redhat.com/): 722701 - CVE-2011-0226 freetype: postscript type1 font parsing vulnerability 6. Package List: Red Hat Enterprise Linux Desktop (v. 6): Source: i386: freetype-2.3.11-6.el6_1.6.i686.rpm freetype-debuginfo-2.3.11-6.el6_1.6.i686.rpm x86_64: freetype-2.3.11-6.el6_1.6.i686.rpm freetype-2.3.11-6.el6_1.6.x86_64.rpm freetype-debuginfo-2.3.11-6.el6_1.6.i686.rpm freetype-debuginfo-2.3.11-6.el6_1.6.x86_64.rpm Red Hat Enterprise Linux Desktop Optional (v. 6): Source: i386: freetype-debuginfo-2.3.11-6.el6_1.6.i686.rpm freetype-demos-2.3.11-6.el6_1.6.i686.rpm freetype-devel-2.3.11-6.el6_1.6.i686.rpm x86_64: freetype-debuginfo-2.3.11-6.el6_1.6.i686.rpm freetype-debuginfo-2.3.11-6.el6_1.6.x86_64.rpm freetype-demos-2.3.11-6.el6_1.6.x86_64.rpm freetype-devel-2.3.11-6.el6_1.6.i686.rpm freetype-devel-2.3.11-6.el6_1.6.x86_64.rpm Red Hat Enterprise Linux HPC Node (v. 6): Source: x86_64: freetype-2.3.11-6.el6_1.6.i686.rpm freetype-2.3.11-6.el6_1.6.x86_64.rpm freetype-debuginfo-2.3.11-6.el6_1.6.i686.rpm freetype-debuginfo-2.3.11-6.el6_1.6.x86_64.rpm Red Hat Enterprise Linux HPC Node Optional (v. 6): Source: x86_64: freetype-debuginfo-2.3.11-6.el6_1.6.i686.rpm freetype-debuginfo-2.3.11-6.el6_1.6.x86_64.rpm freetype-demos-2.3.11-6.el6_1.6.x86_64.rpm freetype-devel-2.3.11-6.el6_1.6.i686.rpm freetype-devel-2.3.11-6.el6_1.6.x86_64.rpm Red Hat Enterprise Linux Server (v.6): Source: i386: freetype-2.3.11-6.el6_1.6.i686.rpm freetype-debuginfo-2.3.11-6.el6_1.6.i686.rpm freetype-devel-2.3.11-6.el6_1.6.i686.rpm ppc64: freetype-2.3.11-6.el6_1.6.ppc.rpm freetype-2.3.11-6.el6_1.6.ppc64.rpm freetype-debuginfo-2.3.11-6.el6_1.6.ppc.rpm freetype-debuginfo-2.3.11-6.el6_1.6.ppc64.rpm freetype-devel-2.3.11-6.el6_1.6.ppc.rpm freetype-devel-2.3.11-6.el6_1.6.ppc64.rpm s390x: freetype-2.3.11-6.el6_1.6.s390.rpm freetype-2.3.11-6.el6_1.6.s390x.rpm freetype-debuginfo-2.3.11-6.el6_1.6.s390.rpm freetype-debuginfo-2.3.11-6.el6_1.6.s390x.rpm freetype-devel-2.3.11-6.el6_1.6.s390.rpm freetype-devel-2.3.11-6.el6_1.6.s390x.rpm x86_64: freetype-2.3.11-6.el6_1.6.i686.rpm freetype-2.3.11-6.el6_1.6.x86_64.rpm freetype-debuginfo-2.3.11-6.el6_1.6.i686.rpm freetype-debuginfo-2.3.11-6.el6_1.6.x86_64.rpm freetype-devel-2.3.11-6.el6_1.6.i686.rpm freetype-devel-2.3.11-6.el6_1.6.x86_64.rpm Red Hat Enterprise Linux Server Optional (v. 6): Source: i386: freetype-debuginfo-2.3.11-6.el6_1.6.i686.rpm freetype-demos-2.3.11-6.el6_1.6.i686.rpm ppc64: freetype-debuginfo-2.3.11-6.el6_1.6.ppc64.rpm freetype-demos-2.3.11-6.el6_1.6.ppc64.rpm s390x: freetype-debuginfo-2.3.11-6.el6_1.6.s390x.rpm freetype-demos-2.3.11-6.el6_1.6.s390x.rpm x86_64: freetype-debuginfo-2.3.11-6.el6_1.6.x86_64.rpm freetype-demos-2.3.11-6.el6_1.6.x86_64.rpm Red Hat Enterprise Linux Workstation (v. 6): Source: i386: freetype-2.3.11-6.el6_1.6.i686.rpm freetype-debuginfo-2.3.11-6.el6_1.6.i686.rpm freetype-devel-2.3.11-6.el6_1.6.i686.rpm x86_64: freetype-2.3.11-6.el6_1.6.i686.rpm freetype-2.3.11-6.el6_1.6.x86_64.rpm freetype-debuginfo-2.3.11-6.el6_1.6.i686.rpm freetype-debuginfo-2.3.11-6.el6_1.6.x86_64.rpm freetype-devel-2.3.11-6.el6_1.6.i686.rpm freetype-devel-2.3.11-6.el6_1.6.x86_64.rpm Red Hat Enterprise Linux Workstation Optional (v. 6): Source: i386: freetype-debuginfo-2.3.11-6.el6_1.6.i686.rpm freetype-demos-2.3.11-6.el6_1.6.i686.rpm x86_64: freetype-debuginfo-2.3.11-6.el6_1.6.x86_64.rpm freetype-demos-2.3.11-6.el6_1.6.x86_64.rpm Thesepackages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key#package 7. References: https://access.redhat.com/security/cve/CVE-2011-0226 https://access.redhat.com/security/updates/classification#important 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2011 Red Hat, Inc. . Enhance freetype installations on Red Hat Enterprise Linux to mitigate a severe security vulnerability impacting font display functionality.. freetype update, red hat advisory, important security fix. . Severity: Important. LinuxSecurity.com Team

Calendar 2 Jul 21, 2011 •Important Red Hat
98
Ls Advisories Redhat Esm H240
Price Tag 1security advisoryRed Hatbuffer overflow

Red Hat: RHSA-2010:0737-01 Important: Freetype Buffer Overflow Threat

Updated freetype packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having [More...]. ==================================================================== Red Hat Security Advisory Synopsis: Important: freetype security update Advisory ID: RHSA-2010:0737-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2010:0737.html Issue date: 2010-10-04 CVE Names: CVE-2010-2806 CVE-2010-2808 CVE-2010-3054 CVE-2010-3311 ==================================================================== 1. Summary: Updated freetype packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section. 2. Relevant releases/architectures: RHEL Desktop Workstation (v. 5 client) - i386, x86_64 Red Hat Enterprise Linux (v. 5 server) - i386, ia64, ppc, s390x, x86_64 Red Hat Enterprise Linux AS version 4 - i386, ia64, ppc, s390, s390x, x86_64 Red Hat Enterprise Linux Desktop (v. 5 client) - i386, x86_64 Red Hat Enterprise Linux Desktop version 4 - i386, x86_64 Red Hat Enterprise Linux ES version 4 - i386, ia64, x86_64 Red Hat Enterprise Linux WS version 4 - i386, ia64, x86_64 3. Description: FreeType is a free, high-quality, portable font engine that can open and manage font files. It also loads, hints, and renders individual glyphs efficiently. The freetype packages for Red Hat Enterprise Linux 4 provide both the FreeType 1 and FreeType 2 font engines. The freetype packages for Red Hat Enterprise Linux 5 provide only the FreeType 2 font engine. It was discovered that the FreeType font rendering engineimproperly validated certain position values when processing input streams. If a user loaded a specially-crafted font file with an application linked against FreeType, and the relevant font glyphs were subsequently rendered with the X FreeType library (libXft), it could trigger a heap-based buffer overflow in the libXft library, causing the application to crash or, possibly, execute arbitrary code with the privileges of the user running the application. (CVE-2010-3311) A stack-based buffer overflow flaw was found in the way the FreeType font rendering engine processed some PostScript Type 1 fonts. If a user loaded a specially-crafted font file with an application linked against FreeType, it could cause the application to crash or, possibly, execute arbitrary code with the privileges of the user running the application. (CVE-2010-2808) An array index error was found in the way the FreeType font rendering engine processed certain PostScript Type 42 font files. If a user loaded a specially-crafted font file with an application linked against FreeType, it could cause the application to crash or, possibly, execute arbitrary code with the privileges of the user running the application. (CVE-2010-2806) A stack overflow flaw was found in the way the FreeType font rendering engine processed PostScript Type 1 font files that contain nested Standard Encoding Accented Character (seac) calls. If a user loaded a specially-crafted font file with an application linked against FreeType, it could cause the application to crash. (CVE-2010-3054) Note: All of the issues in this erratum only affect the FreeType 2 font engine. Users are advised to upgrade to these updated packages, which contain backported patches to correct these issues. The X server must be restarted (log out, then log back in) for this update to take effect. 4. Solution: Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use theRed Hat Network to apply this update are available at 5. Bugs fixed (http://bugzilla.redhat.com/): 621907 - CVE-2010-2808 FreeType: Stack-based buffer overflow by processing certain LWFN fonts 621980 - CVE-2010-2806 FreeType: Heap-based buffer overflow by processing FontType42 fonts with negative length of SFNT strings (FT bug #30656) 623625 - CVE-2010-3311 freetype: Input stream position error by processing Compact Font Format (CFF) font files 625632 - CVE-2010-3054 freetype: DoS via nested "seac" calls 6. Package List: Red Hat Enterprise Linux AS version4: Source: i386: freetype-2.1.9-17.el4.8.i386.rpm freetype-debuginfo-2.1.9-17.el4.8.i386.rpm freetype-demos-2.1.9-17.el4.8.i386.rpm freetype-devel-2.1.9-17.el4.8.i386.rpm freetype-utils-2.1.9-17.el4.8.i386.rpm ia64: freetype-2.1.9-17.el4.8.i386.rpm freetype-2.1.9-17.el4.8.ia64.rpm freetype-debuginfo-2.1.9-17.el4.8.i386.rpm freetype-debuginfo-2.1.9-17.el4.8.ia64.rpm freetype-demos-2.1.9-17.el4.8.ia64.rpm freetype-devel-2.1.9-17.el4.8.ia64.rpm freetype-utils-2.1.9-17.el4.8.ia64.rpm ppc: freetype-2.1.9-17.el4.8.ppc.rpm freetype-2.1.9-17.el4.8.ppc64.rpm freetype-debuginfo-2.1.9-17.el4.8.ppc.rpm freetype-debuginfo-2.1.9-17.el4.8.ppc64.rpm freetype-demos-2.1.9-17.el4.8.ppc.rpm freetype-devel-2.1.9-17.el4.8.ppc.rpm freetype-utils-2.1.9-17.el4.8.ppc.rpm s390: freetype-2.1.9-17.el4.8.s390.rpm freetype-debuginfo-2.1.9-17.el4.8.s390.rpm freetype-demos-2.1.9-17.el4.8.s390.rpm freetype-devel-2.1.9-17.el4.8.s390.rpm freetype-utils-2.1.9-17.el4.8.s390.rpm s390x: freetype-2.1.9-17.el4.8.s390.rpm freetype-2.1.9-17.el4.8.s390x.rpm freetype-debuginfo-2.1.9-17.el4.8.s390.rpm freetype-debuginfo-2.1.9-17.el4.8.s390x.rpm freetype-demos-2.1.9-17.el4.8.s390x.rpm freetype-devel-2.1.9-17.el4.8.s390x.rpm freetype-utils-2.1.9-17.el4.8.s390x.rpm x86_64: freetype-2.1.9-17.el4.8.i386.rpm freetype-2.1.9-17.el4.8.x86_64.rpm freetype-debuginfo-2.1.9-17.el4.8.i386.rpm freetype-debuginfo-2.1.9-17.el4.8.x86_64.rpm freetype-demos-2.1.9-17.el4.8.x86_64.rpm freetype-devel-2.1.9-17.el4.8.x86_64.rpm freetype-utils-2.1.9-17.el4.8.x86_64.rpm Red Hat Enterprise Linux Desktop version4: Source: i386: freetype-2.1.9-17.el4.8.i386.rpm freetype-debuginfo-2.1.9-17.el4.8.i386.rpm freetype-demos-2.1.9-17.el4.8.i386.rpm freetype-devel-2.1.9-17.el4.8.i386.rpm freetype-utils-2.1.9-17.el4.8.i386.rpm x86_64: freetype-2.1.9-17.el4.8.i386.rpm freetype-2.1.9-17.el4.8.x86_64.rpm freetype-debuginfo-2.1.9-17.el4.8.i386.rpm freetype-debuginfo-2.1.9-17.el4.8.x86_64.rpm freetype-demos-2.1.9-17.el4.8.x86_64.rpm freetype-devel-2.1.9-17.el4.8.x86_64.rpm freetype-utils-2.1.9-17.el4.8.x86_64.rpm Red Hat Enterprise Linux ES version 4: Source: i386: freetype-2.1.9-17.el4.8.i386.rpm freetype-debuginfo-2.1.9-17.el4.8.i386.rpm freetype-demos-2.1.9-17.el4.8.i386.rpm freetype-devel-2.1.9-17.el4.8.i386.rpm freetype-utils-2.1.9-17.el4.8.i386.rpm ia64: freetype-2.1.9-17.el4.8.i386.rpm freetype-2.1.9-17.el4.8.ia64.rpm freetype-debuginfo-2.1.9-17.el4.8.i386.rpm freetype-debuginfo-2.1.9-17.el4.8.ia64.rpm freetype-demos-2.1.9-17.el4.8.ia64.rpm freetype-devel-2.1.9-17.el4.8.ia64.rpm freetype-utils-2.1.9-17.el4.8.ia64.rpm x86_64: freetype-2.1.9-17.el4.8.i386.rpm freetype-2.1.9-17.el4.8.x86_64.rpm freetype-debuginfo-2.1.9-17.el4.8.i386.rpm freetype-debuginfo-2.1.9-17.el4.8.x86_64.rpm freetype-demos-2.1.9-17.el4.8.x86_64.rpm freetype-devel-2.1.9-17.el4.8.x86_64.rpm freetype-utils-2.1.9-17.el4.8.x86_64.rpm Red Hat Enterprise Linux WS version4: Source: i386: freetype-2.1.9-17.el4.8.i386.rpm freetype-debuginfo-2.1.9-17.el4.8.i386.rpm freetype-demos-2.1.9-17.el4.8.i386.rpm freetype-devel-2.1.9-17.el4.8.i386.rpm freetype-utils-2.1.9-17.el4.8.i386.rpm ia64: freetype-2.1.9-17.el4.8.i386.rpm freetype-2.1.9-17.el4.8.ia64.rpm freetype-debuginfo-2.1.9-17.el4.8.i386.rpm freetype-debuginfo-2.1.9-17.el4.8.ia64.rpm freetype-demos-2.1.9-17.el4.8.ia64.rpm freetype-devel-2.1.9-17.el4.8.ia64.rpm freetype-utils-2.1.9-17.el4.8.ia64.rpm x86_64: freetype-2.1.9-17.el4.8.i386.rpm freetype-2.1.9-17.el4.8.x86_64.rpm freetype-debuginfo-2.1.9-17.el4.8.i386.rpm freetype-debuginfo-2.1.9-17.el4.8.x86_64.rpm freetype-demos-2.1.9-17.el4.8.x86_64.rpm freetype-devel-2.1.9-17.el4.8.x86_64.rpm freetype-utils-2.1.9-17.el4.8.x86_64.rpm Red Hat Enterprise Linux Desktop (v. 5 client): Source: i386: freetype-2.2.1-28.el5_5.i386.rpm freetype-debuginfo-2.2.1-28.el5_5.i386.rpm x86_64: freetype-2.2.1-28.el5_5.i386.rpm freetype-2.2.1-28.el5_5.x86_64.rpm freetype-debuginfo-2.2.1-28.el5_5.i386.rpm freetype-debuginfo-2.2.1-28.el5_5.x86_64.rpm RHEL Desktop Workstation (v. 5 client): Source: i386: freetype-debuginfo-2.2.1-28.el5_5.i386.rpm freetype-demos-2.2.1-28.el5_5.i386.rpm freetype-devel-2.2.1-28.el5_5.i386.rpm x86_64: freetype-debuginfo-2.2.1-28.el5_5.i386.rpm freetype-debuginfo-2.2.1-28.el5_5.x86_64.rpm freetype-demos-2.2.1-28.el5_5.x86_64.rpm freetype-devel-2.2.1-28.el5_5.i386.rpm freetype-devel-2.2.1-28.el5_5.x86_64.rpm Red Hat Enterprise Linux (v. 5server): Source: i386: freetype-2.2.1-28.el5_5.i386.rpm freetype-debuginfo-2.2.1-28.el5_5.i386.rpm freetype-demos-2.2.1-28.el5_5.i386.rpm freetype-devel-2.2.1-28.el5_5.i386.rpm ia64: freetype-2.2.1-28.el5_5.i386.rpm freetype-2.2.1-28.el5_5.ia64.rpm freetype-debuginfo-2.2.1-28.el5_5.i386.rpm freetype-debuginfo-2.2.1-28.el5_5.ia64.rpm freetype-demos-2.2.1-28.el5_5.ia64.rpm freetype-devel-2.2.1-28.el5_5.ia64.rpm ppc: freetype-2.2.1-28.el5_5.ppc.rpm freetype-2.2.1-28.el5_5.ppc64.rpm freetype-debuginfo-2.2.1-28.el5_5.ppc.rpm freetype-debuginfo-2.2.1-28.el5_5.ppc64.rpm freetype-demos-2.2.1-28.el5_5.ppc.rpm freetype-devel-2.2.1-28.el5_5.ppc.rpm freetype-devel-2.2.1-28.el5_5.ppc64.rpm s390x: freetype-2.2.1-28.el5_5.s390.rpm freetype-2.2.1-28.el5_5.s390x.rpm freetype-debuginfo-2.2.1-28.el5_5.s390.rpm freetype-debuginfo-2.2.1-28.el5_5.s390x.rpm freetype-demos-2.2.1-28.el5_5.s390x.rpm freetype-devel-2.2.1-28.el5_5.s390.rpm freetype-devel-2.2.1-28.el5_5.s390x.rpm x86_64: freetype-2.2.1-28.el5_5.i386.rpm freetype-2.2.1-28.el5_5.x86_64.rpm freetype-debuginfo-2.2.1-28.el5_5.i386.rpm freetype-debuginfo-2.2.1-28.el5_5.x86_64.rpm freetype-demos-2.2.1-28.el5_5.x86_64.rpm freetype-devel-2.2.1-28.el5_5.i386.rpm freetype-devel-2.2.1-28.el5_5.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key#package 7. References: https://access.redhat.com/security/cve/CVE-2010-2806 https://access.redhat.com/security/cve/CVE-2010-2808 https://access.redhat.com/security/cve/CVE-2010-3054 https://access.redhat.com/security/cve/CVE-2010-3311 https://access.redhat.com/security/updates/classification#important 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2010 Red Hat, Inc. . The recent Freetype enhancement for Red Hat resolves several critical vulnerabilities impacting both font rendering processes and various applications..Freetype Update, Red Hat Security, Buffer Overflow, Important Advisory. . Severity: Important. LinuxSecurity.com Team

Calendar 2 Oct 04, 2010 •Important Red Hat
Banner 4 1028x280 1708121825 1771600306
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics

Your message here