MGASA-2015-0367

See a problem?
Please try reporting it to the source first.

Source

https://advisories.mageia.org/MGASA-2015-0367.html

Import Source

https://advisories.mageia.org/MGASA-2015-0367.json

JSON Data

https://api.osv.dev/v1/vulns/MGASA-2015-0367

Published

2015-09-13T21:58:30Z

Modified

2026-04-16T04:28:37.186938Z

Summary

Updated freetype2 packages fix security vulnerabilities

Details

Updated freetype2 packages fix security vulnerabilities:

It was discovered that FreeType did not correctly handle certain malformed font files. If a user were tricked into using a specially crafted font file, a remote attacker could cause FreeType to crash or hang, resulting in a denial of service, or possibly expose uninitialized memory (Savannah bugs 41309 and 41590).

References

Credits

- Mageia - COORDINATOR
- - https://wiki.mageia.org/en/Packages_Security_Team

Affected packages

Mageia:4 / freetype2

Package

Name: freetype2
Purl: pkg:rpm/mageia/freetype2?arch=source&distro=mageia-4

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.5.0.1-3.4.mga4

Ecosystem specific

{
    "section": "core"
}

Database specific

source

"https://advisories.mageia.org/MGASA-2015-0367.json"