AusCERT - ESB-2011.0846 - [Debian] freetype: Execute arbitrary code/commands

HOME
About AusCERT
Membership
PKI Services
Training
Publications
Sec. Bulletins
Conferences
News & Media
Services
Web Log
Site Map
Site Help
Member login
ESB-2011.0846 - [Debian] freetype: Execute arbitrary code/commands - Existing account
Date: 15 August 2011
References: ESB-2011.0731 ESB-2011.0760

Click here for printable version
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

===========================================================================
             AUSCERT External Security Bulletin Redistribution

                               ESB-2011.0846
                         freetype security update
                              15 August 2011

===========================================================================

        AusCERT Security Bulletin Summary
        ---------------------------------

Product:           freetype
Publisher:         Debian
Operating System:  Debian GNU/Linux 6
                   Debian GNU/Linux 5
Impact/Access:     Execute Arbitrary Code/Commands -- Existing Account
Resolution:        Patch/Upgrade
CVE Names:         CVE-2011-0226  

Reference:         ESB-2011.0760
                   ESB-2011.0731

Original Bulletin: 
   http://www.debian.org/security/2011/dsa-2294

- --------------------------BEGIN INCLUDED TEXT--------------------

- -----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- - -------------------------------------------------------------------------
Debian Security Advisory DSA-2294-1                   security@debian.org
http://www.debian.org/security/                        Moritz Muehlenhoff
August 14, 2011                        http://www.debian.org/security/faq
- - -------------------------------------------------------------------------

Package        : freetype
Vulnerability  : missing input sanisiting
Problem type   : remote
Debian-specific: no
CVE ID         : CVE-2011-0226 
Debian Bug     : 635871

It was discovered that insufficient input saniting in Freetype's code to
parse Type1 could lead to the execution of arbitrary code.

For the oldstable distribution (lenny), this problem has been fixed in
version 2.3.7-2+lenny6.

For the stable distribution (squeeze), this problem has been fixed in
version 2.4.2-2.1+squeeze1.

For the unstable distribution (sid), this problem has been fixed in
version 2.4.6-1.

We recommend that you upgrade your freetype packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: http://www.debian.org/security/

Mailing list: debian-security-announce@lists.debian.org
- -----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)

iEYEARECAAYFAk5IFoUACgkQXm3vHE4uylq7IACcCv7nHTwi8SCB3D6Qsc1M4nFJ
CB0AoNFbvNHiS0z2di0tbm+S6+wIUNi5
=qFD6
- -----END PGP SIGNATURE-----

- --------------------------END INCLUDED TEXT--------------------

You have received this e-mail bulletin as a result of your organisation's
registration with AusCERT. The mailing list you are subscribed to is
maintained within your organisation, so if you do not wish to continue
receiving these bulletins you should contact your local IT manager. If
you do not know who that is, please send an email to auscert@auscert.org.au
and we will forward your request to the appropriate person.

NOTE: Third Party Rights
This security bulletin is provided as a service to AusCERT's members.  As
AusCERT did not write the document quoted above, AusCERT has had no control
over its content. The decision to follow or act on information or advice
contained in this security bulletin is the responsibility of each user or
organisation, and should be considered in accordance with your organisation's
site policies and procedures. AusCERT takes no responsibility for consequences
which may arise from following or acting on information or advice contained in
this security bulletin.

NOTE: This is only the original release of the security bulletin.  It may
not be updated when updates to the original are made.  If downloading at
a later date, it is recommended that the bulletin is retrieved directly
from the author's website to ensure that the information is still current.

Contact information for the authors of the original document is included
in the Security Bulletin above.  If you have any questions or need further
information, please contact them directly.

Previous advisories and external security bulletins can be retrieved from:

        http://www.auscert.org.au/render.html?cid=1980

===========================================================================
Australian Computer Emergency Response Team
The University of Queensland
Brisbane
Qld 4072

Internet Email: auscert@auscert.org.au
Facsimile:      (07) 3365 7031
Telephone:      (07) 3365 4417 (International: +61 7 3365 4417)
                AusCERT personnel answer during Queensland business hours
                which are GMT+10:00 (AEST).
                On call after hours for member emergencies only.
===========================================================================
-----BEGIN PGP SIGNATURE-----
Comment: http://www.auscert.org.au/render.html?it=1967
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=5tDM
-----END PGP SIGNATURE-----