[Bug 800590] CVE-2012-1132 freetype: heap buffer over-read in Type1
parser parse_subrs() (#35606)
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=800590
Ján Rusnačko <jrusnack(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Whiteboard|impact=low,public=20120223, |impact=low,public=20120223,
|reported=20120302,source=cu |reported=20120302,source=cu
|stomer,cvss2=2.6/AV:N/AC:H/ |stomer,cvss2=2.6/AV:N/AC:H/
|Au:N/C:N/I:N/A:P,rhel-5/fre |Au:N/C:N/I:N/A:P,rhel-5/fre
|etype=affected,rhel-6/freet |etype=affected,rhel-6/freet
|ype=notaffected,fedora-all/ |ype=affected,fedora-all/fre
|freetype=affected,fedora-al |etype=affected,fedora-all/m
|l/mingw32-freetype=affected |ingw32-freetype=affected,cw
|,cwe=(CWE-122|CWE-125) |e=(CWE-122|CWE-125)
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=tnIQapZTSE&a=cc_unsubscribe
8 years, 7 months
[Bug 800589] CVE-2012-1131 freetype: incorrect type cast allowing
input sanity check bypass in ft_smooth_render_generic() (#35604)
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=800589
Ján Rusnačko <jrusnack(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Whiteboard|impact=low,public=20120226, |impact=low,public=20120226,
|reported=20120302,source=cu |reported=20120302,source=cu
|stomer,cvss2=4.3/AV:N/AC:M/ |stomer,cvss2=4.3/AV:N/AC:M/
|Au:N/C:N/I:N/A:P,rhel-5/fre |Au:N/C:N/I:N/A:P,rhel-5/fre
|etype=affected,rhel-6/freet |etype=affected,rhel-6/freet
|ype=notaffected,fedora-all/ |ype=affected,fedora-all/fre
|freetype=affected,fedora-al |etype=affected,fedora-all/m
|l/mingw32-freetype=affected |ingw32-freetype=affected,cw
|,cwe=CWE-704->CWE-122 |e=CWE-704->CWE-122
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=tm0NkQdjAa&a=cc_unsubscribe
8 years, 7 months
[Bug 800587] CVE-2012-1130 freetype: heap buffer over-read in PCF
parser pcf_get_properties() (#35603)
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=800587
Ján Rusnačko <jrusnack(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Whiteboard|impact=low,public=20120223, |impact=low,public=20120223,
|reported=20120302,source=cu |reported=20120302,source=cu
|stomer,cvss2=4.3/AV:N/AC:M/ |stomer,cvss2=4.3/AV:N/AC:M/
|Au:N/C:N/I:N/A:P,rhel-5/fre |Au:N/C:N/I:N/A:P,rhel-5/fre
|etype=affected,rhel-6/freet |etype=affected,rhel-6/freet
|ype=notaffected,fedora-all/ |ype=affected,fedora-all/fre
|freetype=affected,fedora-al |etype=affected,fedora-all/m
|l/mingw32-freetype=affected |ingw32-freetype=affected,cw
|,cwe=(CWE-122|CWE-125) |e=(CWE-122|CWE-125)
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=L78fP95WP1&a=cc_unsubscribe
8 years, 7 months
[Bug 800583] CVE-2012-1127 freetype: heap buffer over-read in BDF
parsing _bdf_parse_glyphs() (#35599, #35600)
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=800583
Ján Rusnačko <jrusnack(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Whiteboard|impact=low,public=20120223, |impact=low,public=20120223,
|reported=20120302,source=cu |reported=20120302,source=cu
|stomer,cvss2=4.3/AV:N/AC:M/ |stomer,cvss2=4.3/AV:N/AC:M/
|Au:N/C:N/I:N/A:P,rhel-5/fre |Au:N/C:N/I:N/A:P,rhel-5/fre
|etype=affected,rhel-6/freet |etype=affected,rhel-6/freet
|ype=notaffected,fedora-all/ |ype=affected,fedora-all/fre
|freetype=affected,fedora-al |etype=affected,fedora-all/m
|l/mingw32-freetype=affected |ingw32-freetype=affected,cw
|,cwe=(CWE-122|CWE-125) |e=(CWE-122|CWE-125)
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=TYrJ2dWEF2&a=cc_unsubscribe
8 years, 7 months
[Bug 800581] CVE-2012-1126 freetype: heap buffer over-read in BDF
parsing _bdf_is_atom() (#35597, #35598)
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=800581
Ján Rusnačko <jrusnack(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Whiteboard|impact=low,public=20120223, |impact=low,public=20120223,
|reported=20120302,source=cu |reported=20120302,source=cu
|stomer,cvss2=4.3/AV:N/AC:M/ |stomer,cvss2=4.3/AV:N/AC:M/
|Au:N/C:N/I:N/A:P,rhel-5/fre |Au:N/C:N/I:N/A:P,rhel-5/fre
|etype=affected,rhel-6/freet |etype=affected,rhel-6/freet
|ype=notaffected,fedora-all/ |ype=affected,fedora-all/fre
|freetype=affected,fedora-al |etype=affected,fedora-all/m
|l/mingw32-freetype=affected |ingw32-freetype=affected,cw
|,cwe=(CWE-122|CWE-125) |e=(CWE-122|CWE-125)
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=AjPHC0ZvdF&a=cc_unsubscribe
8 years, 7 months
[Bug 753799] CVE-2011-3439 freetype: Multiple security flaws when
loading CID-keyed Type 1 fonts
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=753799
Ján Rusnačko <jrusnack(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Whiteboard|impact=important,public=201 |impact=important,public=201
|11110,reported=20111114,sou |11110,reported=20111114,sou
|rce=suse,cvss2=6.8/AV:N/AC: |rce=suse,cvss2=6.8/AV:N/AC:
|M/Au:N/C:P/I:P/A:P,rhel-4/f |M/Au:N/C:P/I:P/A:P,rhel-4/f
|reetype=affected,rhel-5.6.z |reetype=affected,rhel-5.6.z
|/freetype=affected,rhel-5/f |/freetype=affected,rhel-5/f
|reetype=affected,rhel-6/fre |reetype=affected,rhel-6/fre
|etype=notaffected,fedora-al |etype=affected,fedora-all/f
|l/freetype=affected |reetype=affected
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=B5mrqXQLm5&a=cc_unsubscribe
8 years, 7 months
[Bug 722701] CVE-2011-0226 freetype: postscript type1 font parsing
vulnerability
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=722701
Ján Rusnačko <jrusnack(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Whiteboard|public=20110708,reported=20 |public=20110708,reported=20
|110715,source=internet,impa |110715,source=internet,impa
|ct=important,cvss2=6.8/AV:N |ct=important,cvss2=6.8/AV:N
|/AC:M/Au:N/C:P/I:P/A:P,rhel |/AC:M/Au:N/C:P/I:P/A:P,rhel
|-4/freetype=notaffected,rhe |-4/freetype=notaffected,rhe
|l-5/freetype=notaffected,rh |l-5/freetype=notaffected,rh
|el-6/freetype=notaffected,f |el-6/freetype=affected,fedo
|edora-all/freetype=affected |ra-all/freetype=affected
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=p4JEBWQfBR&a=cc_unsubscribe
8 years, 7 months
[Bug 671122] CVE-2011-0020 pango: Heap-based buffer overflow by
rendering glyph box for certain FT_Bitmap objects
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=671122
Ján Rusnačko <jrusnack(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Whiteboard|public=20110118,reported=20 |public=20110118,reported=20
|110118,source=oss-security, |110118,source=oss-security,
|impact=moderate,cvss2=5.1/A |impact=moderate,cvss2=5.1/A
|V:N/AC:H/Au:N/C:P/I:P/A:P/, |V:N/AC:H/Au:N/C:P/I:P/A:P/,
|rhel-5/pango=affected,rhel- |rhel-5/pango=affected,rhel-
|6/pango=notaffected,fedora- |6/pango=affected,fedora-all
|all/pango=affected/cvss2=5. |/pango=affected/cvss2=5.1/A
|1/AV:N/AC:H/Au:N/C:P/I:P/A: |V:N/AC:H/Au:N/C:P/I:P/A:P,r
|P,rhel-4/pango=notaffected, |hel-4/pango=notaffected,rhe
|rhel-4/evolution28-pango=af |l-4/evolution28-pango=affec
|fected |ted
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=rimV3FlDPY&a=cc_unsubscribe
8 years, 7 months
[Bug 621980] CVE-2010-2806 FreeType: Heap-based buffer overflow by
processing FontType42 fonts with negative length of SFNT strings (FT bug
#30656)
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=621980
Ján Rusnačko <jrusnack(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Whiteboard|public=20100805,reported=20 |public=20100805,reported=20
|100806,source=internet,impa |100806,source=internet,impa
|ct=important,cvss2=6.8/AV:N |ct=important,cvss2=6.8/AV:N
|/AC:M/Au:N/C:P/I:P/A:P,rhel |/AC:M/Au:N/C:P/I:P/A:P,rhel
|-3/freetype=affected,rhel-4 |-3/freetype=affected,rhel-4
|/freetype=affected,rhel-5/f |/freetype=affected,rhel-5/f
|reetype=affected,rhel-6/fre |reetype=affected,rhel-6/fre
|etype=notaffected,fedora-al |etype=affected,fedora-all/f
|l/freetype=affected |reetype=affected
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=P5pKTY6uFx&a=cc_unsubscribe
8 years, 7 months