Bug 728044

Summary: VUL-0: freetype2 buffer overflow
Product: [Novell Products] SUSE Security Incidents Reporter: Ludwig Nussel <lnussel>
Component: GeneralAssignee: Juergen Weigert <jw>
Status: VERIFIED DUPLICATE QA Contact: Security Team bot <security-team>
Severity: Major    
Priority: P3 - Medium CC: security-team
Version: unspecified   
Target Milestone: ---   
Hardware: Other   
OS: Other   
Whiteboard: maint:running:43952:important maint:released:sle10-sp2:46696
Found By: Other Services Priority:
Business Priority: Blocker: ---
Marketing QA Status: --- IT Deployment: ---

Description Ludwig Nussel 2011-11-03 13:08:28 UTC
Your friendly security team received the following report via mitre.
Please respond ASAP.
The issue is public.

Name: CVE-2011-3256

FreeType 2 before 2.4.7, as used in CoreGraphics in Apple iOS before 5, Mandriva Enterprise Server 5, and possibly other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font, a different vulnerability than CVE-2011-0226.

Reference: CONFIRM: https://sourceforge.net/projects/freetype/files/freetype2/2.4.7/README/view
Reference: MANDRIVA: http://www.mandriva.com/security/advisories?name=MDVSA-2011:157
Reference: CONFIRM: http://support.apple.com/kb/HT4999
Reference: APPLE: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html

Comment 1 Swamp Workflow Management 2011-11-03 13:11:23 UTC
The SWAMPID for this issue is 43952.
This issue was rated as important.
Please submit fixed packages until 2011-11-10.
When done, please reassign the bug to security-team@suse.de.
Patchinfo will be handled by security team.
Comment 4 Swamp Workflow Management 2012-04-23 12:54:03 UTC
Update released for: freetype2, freetype2-32bit, freetype2-debuginfo, freetype2-devel, freetype2-devel-32bit, ft2demos, ft2demos-debuginfo
SLE-SERVER 10-SP2-LTSS (i386, s390x, x86_64)