[Forgot Password]
Login  Register Subscribe

30389

 
 

423868

 
 

247085

 
 

909

 
 

194218

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

CESA-2019:4254 -- centos 6 freetype

ID: oval:org.secpod.oval:def:205405Date: (C)2020-01-09   (M)2023-11-09
Class: PATCHFamily: unix




FreeType is a free, high-quality, portable font engine that can open and manage font files. FreeType loads, hints, and renders individual glyphs efficiently. Security Fix: * freetype: a heap-based buffer over-read in T1_Get_Private_Dict in type1/t1parse.c leading to information disclosure * freetype: mishandling ps_parser_skip_PS_token in an FT_New_Memory_Face operation in skip_comment, psaux/psobjs.c, leads to a buffer over-read For more details about the security issue, including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page listed in the References section.

Platform:
CentOS 6
Product:
freetype
Reference:
CESA-2019:4254
CVE-2015-9381
CVE-2015-9382
CVE    2
CVE-2015-9381
CVE-2015-9382

© SecPod Technologies