https://bugzilla.redhat.com/show_bug.cgi?id=1191082
Tomas Hoger <thoger(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Priority|medium |low
Fixed In Version| |freetype 2.5.4
Summary|CVE-2014-9660 freetype: |CVE-2014-9660 freetype:
|NULL pointer dereference in |missing ENDCHAR NULL
|the _bdf_parse_glyphs |pointer dereference in the
|function in bdf/bdflib.c |_bdf_parse_glyphs()
Whiteboard|impact=moderate,public=2014 |impact=low,public=20141124,
|1124,reported=20150210,sour |reported=20150210,source=cv
|ce=cve,cvss2=3.7/AV:L/AC:H/ |e,cvss2=4.3/AV:N/AC:M/Au:N/
|Au:N/C:P/I:P/A:P,fedora-all |C:N/I:N/A:P,rhel-4/freetype
|/freetype=affected,rhel-5/f |=wontfix,rhel-5/freetype=wo
|reetype=new,rhel-6/freetype |ntfix,rhel-6/freetype=affec
|=new,rhel-7/freetype=new |ted,rhel-7/freetype=affecte
| |d,rhev-m-3/mingw-virt-viewe
| |r=affected,fedora-all/freet
| |ype=affected,fedora-all/min
| |gw-freetype=affected,epel-7
| |/mingw-freetype=affected
Severity|medium |low
--- Comment #3 from Tomas Hoger <thoger(a)redhat.com> ---
Upstream bug is:
https://savannah.nongnu.org/bugs/?43660
Issue was fixed upstream in 2.5.4.
A NULL pointer dereference issue, which can cause application using freetype to
crash if specially-crafted BDF font is loaded.
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug
https://bugzilla.redhat.com/token.cgi?t=lZP0ApUYXj&a=cc_unsubscribe