Skip to content
OpenAdvisories
Unscored RHSA-2010:0864 4 CVEs

Red Hat Security Advisory: freetype security update

Published Sep 15, 2024 · Updated Nov 13, 2026

Ecosystem: Red Hat

Fixed packages 16

ReleasePackageFixed in
Red Hat · RHEL 6 enterprise_linux:6::client freetype 0:2.3.11-6.el6_0.1
Red Hat · RHEL 6 enterprise_linux:6::client freetype-debuginfo 0:2.3.11-6.el6_0.1
Red Hat · RHEL 6 enterprise_linux:6::client freetype-demos 0:2.3.11-6.el6_0.1
Red Hat · RHEL 6 enterprise_linux:6::client freetype-devel 0:2.3.11-6.el6_0.1
Red Hat · RHEL 6 enterprise_linux:6::computenode freetype 0:2.3.11-6.el6_0.1
Red Hat · RHEL 6 enterprise_linux:6::computenode freetype-debuginfo 0:2.3.11-6.el6_0.1
Red Hat · RHEL 6 enterprise_linux:6::computenode freetype-demos 0:2.3.11-6.el6_0.1
Red Hat · RHEL 6 enterprise_linux:6::computenode freetype-devel 0:2.3.11-6.el6_0.1
Red Hat · RHEL 6 enterprise_linux:6::server freetype 0:2.3.11-6.el6_0.1
Red Hat · RHEL 6 enterprise_linux:6::server freetype-debuginfo 0:2.3.11-6.el6_0.1
Red Hat · RHEL 6 enterprise_linux:6::server freetype-demos 0:2.3.11-6.el6_0.1
Red Hat · RHEL 6 enterprise_linux:6::server freetype-devel 0:2.3.11-6.el6_0.1
Red Hat · RHEL 6 enterprise_linux:6::workstation freetype 0:2.3.11-6.el6_0.1
Red Hat · RHEL 6 enterprise_linux:6::workstation freetype-debuginfo 0:2.3.11-6.el6_0.1
Red Hat · RHEL 6 enterprise_linux:6::workstation freetype-demos 0:2.3.11-6.el6_0.1
Red Hat · RHEL 6 enterprise_linux:6::workstation freetype-devel 0:2.3.11-6.el6_0.1

Vulnerabilities 4

  • Unscored —
    CVE-2010-2805

    The FT_Stream_EnterFrame function in base/ftstream.c in FreeType before 2.4.2 does not properly validate certain positi…

    freetype Debian
  • Unscored —
    CVE-2010-2806

    Array index error in the t42_parse_sfnts function in type42/t42parse.c in FreeType before 2.4.2 allows remote attackers…

    freetype Debian
  • Unscored —
    CVE-2010-2808

    Buffer overflow in the Mac_Read_POST_Resource function in base/ftobjs.c in FreeType before 2.4.2 allows remote attacker…

    freetype Debian
  • Unscored —
    CVE-2010-3311

    Integer overflow in base/ftstream.c in libXft (aka the X FreeType library) in FreeType before 2.4 allows remote attacke…

    freetype Debian

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=621907
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=621980
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=623625
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=625626
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0864.json
  • report
    https://access.redhat.com/security/cve/CVE-2010-2805
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-2805
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-2805
  • report
    https://access.redhat.com/security/cve/CVE-2010-2806
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-2806
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-2806
  • report
    https://access.redhat.com/security/cve/CVE-2010-2808
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-2808
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-2808
  • report
    https://access.redhat.com/security/cve/CVE-2010-3311
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-3311
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-3311