exploit the possibilities
Home Files News &[SERVICES_TAB]About Contact Add New

Mandriva Linux Security Advisory 2006.129

Mandriva Linux Security Advisory 2006.129
Posted Jul 24, 2006
Authored by Mandriva | Site mandriva.com

Mandriva Linux Security Advisory MDKSA-2006-129 - An additional overflow, similar to those corrected by patches for CVE-2006-1861 was found in libfreetype. If a user loads a carefully crafted font file with a program linked against FreeType, it could cause the application to crash or execute arbitrary code as the user.

tags | advisory, overflow, arbitrary
systems | linux, mandriva
advisories | CVE-2006-3467, CVE-2006-1861
SHA-256 | 7e47a195b9cc7deb5b5f25f14df95194792e1933817dd609d56c07aa622bbdd3

Mandriva Linux Security Advisory 2006.129

Change Mirror Download

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

_______________________________________________________________________

Mandriva Linux Security Advisory MDKSA-2006:129
http://www.mandriva.com/security/
_______________________________________________________________________

Package : freetype2
Date : July 20, 2006
Affected: 2006.0, Corporate 3.0, Multi Network Firewall 2.0
_______________________________________________________________________

Problem Description:

An additional overflow, similar to those corrected by patches for
CVE-2006-1861 was found in libfreetype. If a user loads a carefully
crafted font file with a program linked against FreeType, it could cause
the application to crash or execute arbitrary code as the user.

Updated packages have been patched to correct this issue.
_______________________________________________________________________

References:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3467
_______________________________________________________________________

Updated Packages:

Mandriva Linux 2006.0:
58610d57ba81e18fd281de0723377d15 2006.0/RPMS/libfreetype6-2.1.10-9.4.20060mdk.i586.rpm
acc57dee23d472c2dd67a7dfd4f31178 2006.0/RPMS/libfreetype6-devel-2.1.10-9.4.20060mdk.i586.rpm
0cb439096b7c68f7b087494f460733ef 2006.0/RPMS/libfreetype6-static-devel-2.1.10-9.4.20060mdk.i586.rpm
21644362815c06ab64672919b74d4482 2006.0/SRPMS/freetype2-2.1.10-9.4.20060mdk.src.rpm

Mandriva Linux 2006.0/X86_64:
bc9d61266c643afb4c621b69fe773d1f x86_64/2006.0/RPMS/lib64freetype6-2.1.10-9.4.20060mdk.x86_64.rpm
7b2e091d9d451c0ca78bc1a30ca65abe x86_64/2006.0/RPMS/lib64freetype6-devel-2.1.10-9.4.20060mdk.x86_64.rpm
98930009ac9bc59a90045801db3e9884 x86_64/2006.0/RPMS/lib64freetype6-static-devel-2.1.10-9.4.20060mdk.x86_64.rpm
58610d57ba81e18fd281de0723377d15 x86_64/2006.0/RPMS/libfreetype6-2.1.10-9.4.20060mdk.i586.rpm
acc57dee23d472c2dd67a7dfd4f31178 x86_64/2006.0/RPMS/libfreetype6-devel-2.1.10-9.4.20060mdk.i586.rpm
0cb439096b7c68f7b087494f460733ef x86_64/2006.0/RPMS/libfreetype6-static-devel-2.1.10-9.4.20060mdk.i586.rpm
21644362815c06ab64672919b74d4482 x86_64/2006.0/SRPMS/freetype2-2.1.10-9.4.20060mdk.src.rpm

Corporate 3.0:
a178787bfed2fb14fa946da97a617cc3 corporate/3.0/RPMS/libfreetype6-2.1.7-4.3.C30mdk.i586.rpm
1635f5556cadc0cac6d069face4456a2 corporate/3.0/RPMS/libfreetype6-devel-2.1.7-4.3.C30mdk.i586.rpm
445a95dba634a31197305bc82a87879d corporate/3.0/RPMS/libfreetype6-static-devel-2.1.7-4.3.C30mdk.i586.rpm
aae2d49840b8ceed17dd373ecaf1edc3 corporate/3.0/SRPMS/freetype2-2.1.7-4.3.C30mdk.src.rpm

Corporate 3.0/X86_64:
8a7688a1f8ab362b8994cf15babb6a26 x86_64/corporate/3.0/RPMS/lib64freetype6-2.1.7-4.3.C30mdk.x86_64.rpm
0590279a78710bf68de62333f594ec83 x86_64/corporate/3.0/RPMS/lib64freetype6-devel-2.1.7-4.3.C30mdk.x86_64.rpm
42fedd6e54d1f483e5f8655b7e1607b2 x86_64/corporate/3.0/RPMS/lib64freetype6-static-devel-2.1.7-4.3.C30mdk.x86_64.rpm
a178787bfed2fb14fa946da97a617cc3 x86_64/corporate/3.0/RPMS/libfreetype6-2.1.7-4.3.C30mdk.i586.rpm
aae2d49840b8ceed17dd373ecaf1edc3 x86_64/corporate/3.0/SRPMS/freetype2-2.1.7-4.3.C30mdk.src.rpm

Multi Network Firewall 2.0:
1a19681d0cbdcf910097685bd6ea4f49 mnf/2.0/RPMS/libfreetype6-2.1.7-4.3.M20mdk.i586.rpm
e8d868b0dfc94e945d096896b8b9e0ec mnf/2.0/SRPMS/freetype2-2.1.7-4.3.M20mdk.src.rpm
_______________________________________________________________________

To upgrade automatically use MandrivaUpdate or urpmi. The verification
of md5 checksums and GPG signatures is performed automatically for you.

All packages are signed by Mandriva for security. You can obtain the
GPG public key of the Mandriva Security Team by executing:

gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98

You can view other update advisories for Mandriva Linux at:

http://www.mandriva.com/security/advisories

If you want to report vulnerabilities, please contact

security_(at)_mandriva.com
_______________________________________________________________________

Type Bits/KeyID Date User ID
pub 1024D/22458A98 2000-07-10 Mandriva Security Team
<security*mandriva.com>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2.2 (GNU/Linux)

iD8DBQFEv2f7mqjQ0CJFipgRAh4KAJ9Zh4S5ATdPwUBE4P8eTH4qvIoA4wCfWT5p
1068arET28g/esaIHIzlrP4=
=Zo9b
-----END PGP SIGNATURE-----

Login or Register to add favorites

File Archive:

April 2024

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Apr 1st
    10 Files
  • 2
    Apr 2nd
    26 Files
  • 3
    Apr 3rd
    40 Files
  • 4
    Apr 4th
    6 Files
  • 5
    Apr 5th
    26 Files
  • 6
    Apr 6th
    0 Files
  • 7
    Apr 7th
    0 Files
  • 8
    Apr 8th
    22 Files
  • 9
    Apr 9th
    14 Files
  • 10
    Apr 10th
    10 Files
  • 11
    Apr 11th
    13 Files
  • 12
    Apr 12th
    14 Files
  • 13
    Apr 13th
    0 Files
  • 14
    Apr 14th
    0 Files
  • 15
    Apr 15th
    30 Files
  • 16
    Apr 16th
    10 Files
  • 17
    Apr 17th
    22 Files
  • 18
    Apr 18th
    45 Files
  • 19
    Apr 19th
    0 Files
  • 20
    Apr 20th
    0 Files
  • 21
    Apr 21st
    0 Files
  • 22
    Apr 22nd
    0 Files
  • 23
    Apr 23rd
    0 Files
  • 24
    Apr 24th
    0 Files
  • 25
    Apr 25th
    0 Files
  • 26
    Apr 26th
    0 Files
  • 27
    Apr 27th
    0 Files
  • 28
    Apr 28th
    0 Files
  • 29
    Apr 29th
    0 Files
  • 30
    Apr 30th
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2022 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close