Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2018:0837-1

Опубликовано: 29 мар. 2018
Источник: suse-cvrf

Описание

Security update for freetype2

This update for freetype2 fixes the following issues:

Security issue fixed:

  • CVE-2016-10328: Fixed heap-based buffer overflow in cff_parser_run function in cff/cffparse.c (bsc#1034191).

Список пакетов

SUSE Linux Enterprise Server 11 SP4
freetype2-2.3.7-25.45.8.1
freetype2-32bit-2.3.7-25.45.8.1
freetype2-x86-2.3.7-25.45.8.1
ft2demos-2.3.7-25.45.8.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4
freetype2-2.3.7-25.45.8.1
freetype2-32bit-2.3.7-25.45.8.1
freetype2-x86-2.3.7-25.45.8.1
ft2demos-2.3.7-25.45.8.1
SUSE Linux Enterprise Software Development Kit 11 SP4
freetype2-devel-2.3.7-25.45.8.1
freetype2-devel-32bit-2.3.7-25.45.8.1

Ссылки

Описание

FreeType 2 before 2016-12-16 has an out-of-bounds write caused by a heap-based buffer overflow related to the cff_parser_run function in cff/cffparse.c.

Затронутые продукты
SUSE Linux Enterprise Server 11 SP4:freetype2-2.3.7-25.45.8.1
SUSE Linux Enterprise Server 11 SP4:freetype2-32bit-2.3.7-25.45.8.1
SUSE Linux Enterprise Server 11 SP4:freetype2-x86-2.3.7-25.45.8.1
SUSE Linux Enterprise Server 11 SP4:ft2demos-2.3.7-25.45.8.1
Ссылки