Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 515
Alerts This Week
Warning Icon 1 515

Stay Secure with the Latest Linux Advisories

Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -8 articles for you...
200

Scientific Linux: Important Freetype Security Update and Details

Important: freetype security update. Date: Mon, 4 Oct 2010 15:11:51 -0500 Reply-To: Troy Dawson Sender: Security Errata for Scientific Linux From: Troy Dawson Subject: Security ERRATA Important: freetype on SL3.x, SL4.x, SL5.x i386/x86_64 Comments: To: "This email address is being protected from spambots. You need JavaScript enabled to view it." Synopsis: Important: freetype security update Issue date: 2010-10-04 CVE Names: CVE-2010-2806 CVE-2010-2808 CVE-2010-3054 CVE-2010-3311 It was discovered that the FreeType font rendering engine improperly validated certain position values when processing input streams. If a user loaded a specially-crafted font file with an application linked against FreeType, and the relevant font glyphs were subsequently rendered with the X FreeType library (libXft), it could trigger a heap-based buffer overflow in the libXft library, causing the application to crash or, possibly, execute arbitrary code with the privileges of the user running the application. (CVE-2010-3311) A stack-based buffer overflow flaw was found in the way the FreeType font rendering engine processed some PostScript Type 1 fonts. If a user loaded a specially-crafted font file with an application linked against FreeType, it could cause the application to crash or, possibly, execute arbitrary code with the privileges of the user running the application. (CVE-2010-2808) (SLF4 and SLF5 only) An array index error was found in the way the FreeType font rendering engine processed certain PostScript Type 42 font files. If a user loaded a specially-crafted font file with an application linked against FreeType, it could cause the application to crash or, possibly, execute arbitrary code with the privileges of the user running the application. (CVE-2010-2806) A stack overflow flaw was found in the way the FreeType font rendering engine processed PostScript Type 1 font files that contain nested Standard Encoding Accented Character (seac) calls. If a user loaded a specially-crafted font file with an application linked against FreeType, it could cause the applicationto crash. (CVE-2010-3054) Note: All of the issues in this erratum only affect the FreeType 2 font engine. The X server must be restarted (log out, then log back in) for this update to take effect. SL 3.0.x SRPMS: freetype-2.1.4-18.el3.src.rpm i386: freetype-2.1.4-18.el3.i386.rpm freetype-demos-2.1.4-18.el3.i386.rpm freetype-devel-2.1.4-18.el3.i386.rpm freetype-utils-2.1.4-18.el3.i386.rpm x86_64: freetype-2.1.4-18.el3.i386.rpm freetype-2.1.4-18.el3.x86_64.rpm freetype-demos-2.1.4-18.el3.x86_64.rpm freetype-devel-2.1.4-18.el3.x86_64.rpm freetype-utils-2.1.4-18.el3.x86_64.rpm SL 4.x SRPMS: freetype-2.1.9-17.el4.8.src.rpm i386: freetype-2.1.9-17.el4.8.i386.rpm freetype-demos-2.1.9-17.el4.8.i386.rpm freetype-devel-2.1.9-17.el4.8.i386.rpm freetype-utils-2.1.9-17.el4.8.i386.rpm x86_64: freetype-2.1.9-17.el4.8.i386.rpm freetype-2.1.9-17.el4.8.x86_64.rpm freetype-demos-2.1.9-17.el4.8.x86_64.rpm freetype-devel-2.1.9-17.el4.8.x86_64.rpm freetype-utils-2.1.9-17.el4.8.x86_64.rpm SL 5.x SRPMS: freetype-2.2.1-28.el5_5.src.rpm i386: freetype-2.2.1-28.el5_5.i386.rpm freetype-demos-2.2.1-28.el5_5.i386.rpm freetype-devel-2.2.1-28.el5_5.i386.rpm x86_64: freetype-2.2.1-28.el5_5.i386.rpm freetype-2.2.1-28.el5_5.x86_64.rpm freetype-demos-2.2.1-28.el5_5.x86_64.rpm freetype-devel-2.2.1-28.el5_5.i386.rpm freetype-devel-2.2.1-28.el5_5.x86_64.rpm -Connie Sieh -Troy Dawson . This crucial announcement outlines major freetype security enhancements and flaws impacting Scientific Linux environments.. Freetype Update, Scientific Linux Advisory, Buffer Overflow Fix, Security Update, Freetype Vulnerability. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Oct 04, 2010 Important Scientific Linux
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200