Advisories:rPSA-2008-0255

From rPath Wiki

rPath Security Advisory 2008-0255-1

Published: 2008-08-14

Products

• rPath Appliance Platform Linux Service 1
• rPath Appliance Platform Linux Service 2
• rPath Linux 1
• rPath Linux 2

Rating

Major

Exposure Level Classification

Indirect User Deterministic Unauthorized Access

Updated Versions

• freetype=conary.rpath.com@rpl:1/2.1.10-5.3-1
• freetype=conary.rpath.com@rpl:2/2.3.6-1-0.1

rPath Issue Tracking System

• RPL-2608

References

• CVE-2008-1806
• CVE-2008-1807
• CVE-2008-1808

Description

Previous versions of the freetype package are vulnerable to multiple

Arbitrary Code Execution attacks when processing malformed Printer

Font Binary (PFB) and TrueType Font (TTF) files.

Copyright 2008 rPath, Inc. This file is distributed under the terms of the MIT License. A copy is available at http://www.rpath.com/permanent/mit-license.html