Please do not reply directly to this email. All additional comments should be made in the comments box of this bug report.
Summary: CVE-2008-1807 FreeType invalid free() flaw Alias: CVE-2008-1807
https://bugzilla.redhat.com/show_bug.cgi?id=450773
Bug 450773 depends on bug 451212, which changed state.
Bug 451212 Summary: CVE-2008-1806 CVE-2008-1807 CVE-2008-1808 Multiple freetype vulnerabilities [Fedora 8] https://bugzilla.redhat.com/show_bug.cgi?id=451212
What |Old Value |New Value ---------------------------------------------------------------------------- Status|MODIFIED |CLOSED Resolution| |CURRENTRELEASE
------- Additional Comments From j.w.r.degoede@hhs.nl 2008-06-18 02:55 EST ------- Hi All,
I see that an update for this for freetype2 has been released, good! I still need to push the freetype1 builds fixing some of the same issues through bodhi.
But I needs some help to know what (and which CVE's) to put in bodhi.
I know that not all issues apply to freetype1 due to it not having support for bdf and type1 fonts, still some parts of the patch provided here did apply to freetype1 (and more then just the BCI fix).
I'll attach the backported patch here, and hope that some of you can shed some light on this. I cannot find out what to put in the advisory myself, as the parts of the patch that have been backported do not seem to match any of the CVE descriptions.
fonts-bugs@lists.fedoraproject.org