exploit the possibilities

Mandriva Linux Security Advisory 2011-157

Mandriva Linux Security Advisory 2011-157
Posted Oct 21, 2011
Authored by Mandriva | Site mandriva.com

Mandriva Linux Security Advisory 2011-157 - FreeType allows remote attackers to execute arbitrary code or cause a denial of service via a crafted font. A regression was found in freetype2 in Mandriva Enterprise Server 5 that caused ugly font rendering with firefox. Additionally, improvements concerning the LZW handling (as noted in the freetype-2.4.7 version) was added. The updated packages have been patched to correct these issues.

tags | advisory, remote, denial of service, arbitrary
systems | linux, mandriva
advisories | CVE-2011-3256
MD5 | c097d846647592c3a428f9f0c2d950bb

Mandriva Linux Security Advisory 2011-157

Change Mirror Download
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

_______________________________________________________________________

Mandriva Linux Security Advisory MDVSA-2011:157
http://www.mandriva.com/security/
_______________________________________________________________________

Package : freetype2
Date : October 21, 2011
Affected: 2010.1, 2011., Enterprise Server 5.0
_______________________________________________________________________

Problem Description:

A vulnerability has been discovered and corrected in freetype2:

FreeType allows remote attackers to execute arbitrary code or
cause a denial of service (memory corruption) via a crafted font
(CVE-2011-3256).

A regression was found in freetype2 in Mandriva Enterprise Server 5
that caused ugly font rendering with firefox (#63892).

Additionally, improvements conserning the LZW handling (as noted in
the freetype-2.4.7 version) was added.

The updated packages have been patched to correct these issues.
_______________________________________________________________________

References:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3256
https://qa.mandriva.com/63892
_______________________________________________________________________

Updated Packages:

Mandriva Linux 2010.1:
5cb7a45af29372a1b91c23088a3be78f 2010.1/i586/libfreetype6-2.3.12-1.7mdv2010.2.i586.rpm
18b8a3231fab96584207b6e8a4a8e81d 2010.1/i586/libfreetype6-devel-2.3.12-1.7mdv2010.2.i586.rpm
7d6147c1638bcb6d16cee6e2a9939f27 2010.1/i586/libfreetype6-static-devel-2.3.12-1.7mdv2010.2.i586.rpm
77690084036cd92f1f19333d383897ad 2010.1/SRPMS/freetype2-2.3.12-1.7mdv2010.2.src.rpm

Mandriva Linux 2010.1/X86_64:
7ae7f8215e3542d2fb8f6377c7cf4469 2010.1/x86_64/lib64freetype6-2.3.12-1.7mdv2010.2.x86_64.rpm
6b97bbef06367d203527cfb65bcd899f 2010.1/x86_64/lib64freetype6-devel-2.3.12-1.7mdv2010.2.x86_64.rpm
2864878ad4d4294790f4e5a00cbe4390 2010.1/x86_64/lib64freetype6-static-devel-2.3.12-1.7mdv2010.2.x86_64.rpm
77690084036cd92f1f19333d383897ad 2010.1/SRPMS/freetype2-2.3.12-1.7mdv2010.2.src.rpm

Mandriva Linux 2011:
e9fab15c8a7e45a3b59f81ce166cc85d 2011/i586/freetype2-demos-2.4.5-2.1-mdv2011.0.i586.rpm
3c9cb8ee3857996cc5dc5829dcf8e41e 2011/i586/libfreetype6-2.4.5-2.1-mdv2011.0.i586.rpm
592bdc4c63e31b7692da26a8ba001528 2011/i586/libfreetype6-devel-2.4.5-2.1-mdv2011.0.i586.rpm
edc8653f7609c869c0ec20a0fcd012fa 2011/i586/libfreetype6-static-devel-2.4.5-2.1-mdv2011.0.i586.rpm
86535a7b5e2ccef2e1ba0d037f18e000 2011/SRPMS/freetype2-2.4.5-2.1.src.rpm

Mandriva Linux 2011/X86_64:
35eaf601f67489ea952087e2f6339c1f 2011/x86_64/freetype2-demos-2.4.5-2.1-mdv2011.0.x86_64.rpm
7ccc207101ce7840e5e0abd0f4642067 2011/x86_64/lib64freetype6-2.4.5-2.1-mdv2011.0.x86_64.rpm
91aec2804157d8817fcab99ede4da4f0 2011/x86_64/lib64freetype6-devel-2.4.5-2.1-mdv2011.0.x86_64.rpm
92fb10c2f9a1847db4423f1c6c67c0fa 2011/x86_64/lib64freetype6-static-devel-2.4.5-2.1-mdv2011.0.x86_64.rpm
86535a7b5e2ccef2e1ba0d037f18e000 2011/SRPMS/freetype2-2.4.5-2.1.src.rpm

Mandriva Enterprise Server 5:
097b5a0bc581233000e5e4612101d500 mes5/i586/libfreetype6-2.3.7-1.8mdvmes5.2.i586.rpm
17c6796fb526c1c3e53074e0834db5c3 mes5/i586/libfreetype6-devel-2.3.7-1.8mdvmes5.2.i586.rpm
c3e708211d845e14ad63bfe14e108d6c mes5/i586/libfreetype6-static-devel-2.3.7-1.8mdvmes5.2.i586.rpm
13576b846900d36ed12b74f7ef612850 mes5/SRPMS/freetype2-2.3.7-1.8mdvmes5.2.src.rpm

Mandriva Enterprise Server 5/X86_64:
aa08ec531c3b663dec9fe150316b69f8 mes5/x86_64/lib64freetype6-2.3.7-1.8mdvmes5.2.x86_64.rpm
c1a715c5816d9db37159000ce71fc4fb mes5/x86_64/lib64freetype6-devel-2.3.7-1.8mdvmes5.2.x86_64.rpm
6f59f92a9e60158c4cd53bc7fb34d54d mes5/x86_64/lib64freetype6-static-devel-2.3.7-1.8mdvmes5.2.x86_64.rpm
13576b846900d36ed12b74f7ef612850 mes5/SRPMS/freetype2-2.3.7-1.8mdvmes5.2.src.rpm
_______________________________________________________________________

To upgrade automatically use MandrivaUpdate or urpmi. The verification
of md5 checksums and GPG signatures is performed automatically for you.

All packages are signed by Mandriva for security. You can obtain the
GPG public key of the Mandriva Security Team by executing:

gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98

You can view other update advisories for Mandriva Linux at:

http://www.mandriva.com/security/advisories

If you want to report vulnerabilities, please contact

security_(at)_mandriva.com
_______________________________________________________________________

Type Bits/KeyID Date User ID
pub 1024D/22458A98 2000-07-10 Mandriva Security Team
<security*mandriva.com>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)

iD8DBQFOoSQgmqjQ0CJFipgRAu7bAKCNJuDDSIC2BGla3ck+cJp/Kn88ZwCg1jD/
dxu3TlyhMXF4coBC+GcK+2g=
=QK6b
-----END PGP SIGNATURE-----
Login or Register to add favorites

File Archive:

October 2020

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Oct 1st
    25 Files
  • 2
    Oct 2nd
    0 Files
  • 3
    Oct 3rd
    0 Files
  • 4
    Oct 4th
    0 Files
  • 5
    Oct 5th
    0 Files
  • 6
    Oct 6th
    0 Files
  • 7
    Oct 7th
    0 Files
  • 8
    Oct 8th
    0 Files
  • 9
    Oct 9th
    0 Files
  • 10
    Oct 10th
    0 Files
  • 11
    Oct 11th
    0 Files
  • 12
    Oct 12th
    0 Files
  • 13
    Oct 13th
    0 Files
  • 14
    Oct 14th
    0 Files
  • 15
    Oct 15th
    0 Files
  • 16
    Oct 16th
    0 Files
  • 17
    Oct 17th
    0 Files
  • 18
    Oct 18th
    0 Files
  • 19
    Oct 19th
    0 Files
  • 20
    Oct 20th
    0 Files
  • 21
    Oct 21st
    0 Files
  • 22
    Oct 22nd
    0 Files
  • 23
    Oct 23rd
    0 Files
  • 24
    Oct 24th
    0 Files
  • 25
    Oct 25th
    0 Files
  • 26
    Oct 26th
    0 Files
  • 27
    Oct 27th
    0 Files
  • 28
    Oct 28th
    0 Files
  • 29
    Oct 29th
    0 Files
  • 30
    Oct 30th
    0 Files
  • 31
    Oct 31st
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2020 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close