==========================================================================
Ubuntu Security Notice USN-3282-2
May 16, 2017
FreeType vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
– Ubuntu 12.04 LTS
Summary:
FreeType could be made to crash or run programs if it opened a specially
crafted font file.
Software Description:
– freetype: FreeType 2 is a font engine library
Details:
It was discovered that FreeType did not correctly handle certain malformed
font files. If a user were tricked into using a specially crafted font
file, a remote attacker could cause FreeType to crash, resulting in a
denial of service, or possibly execute arbitrary code.
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 12.04 LTS:
libfreetype6 2.4.8-1ubuntu2.6
After a standard system update you need to restart your session to make
all the necessary changes.
References:
http://www.ubuntu.com/usn/usn-3282-2
http://www.ubuntu.com/usn/usn-3282-1
CVE-2017-8105, CVE-2017-8287
Package Information:
https://launchpad.net/ubuntu/+source/freetype/2.4.8-1ubuntu2.6—–BEGIN PGP SIGNATURE—–
Version: GnuPG v2
iQIcBAABCAAGBQJZHP/CAAoJEEK++w9AZDrpjmoP/A503IL4tDjzYXNloKjSWwKY
a4vq6IwjhJAKCqSx0qzNWe3LrMNbVsVJ+XauaVJL7vB3iNRrdVkMpPEUM5yKfaN2
+j+xKujHh2cqOVTFa8uH98mOOLTfWKR3+ikVw5UipYNCZVOwWK5QJXvuhgB7jc6I
OnHSg/XDWYWySjiVopLuLxCy4/8Rmbpb6E5JB3aMKw2MQVszCciU71Xizt0UbOKi
MfDuC+BbuY3iJNIY03z1LNNtRpTGoP2rSJT2t87McdJL0B1jLC/3bjb1Yz/AKXJ4
7hrdetZfvhvNpneMrLYpZLY4v2El+Fng6i9KYXTglh8i1G4Pm3LI2cE25LO/bN69
3tlKKU4yNCPzj/Fflbfq+MX7yFqCYWl5bZbNMTcLAesSaYd7pO4d/qLR8xqHKLYi
Jp8OX+q3uy0zqCCJzBCuNOoMSv0MowIOim407WtW9kG1nYKcnRnu2rgjXvDMCt+1
aH/dqJfB3DkkG/VVMkeAGZiuF6hN8HNFYLdKfMbfPCK5sGZRAD1A+ltJnxSrJc1Z
aRUU4/fcGGlYV16+4ofH/aUbMtpZptv5MQoHAcXgeJZFHCKvMFjVLXJEhGpJK3lg
6E+xRBfsvO+I5vK4JFDOzGOYqbrtaW/gKfePtYzboVd+AjhSmsTorXl1OdPWJ4h0
wu2v7+5UlpeH7leuDZjJ
=e5GX
—–END PGP SIGNATURE—–
—
