Your submission was sent successfully! Close

USN-324-1: freetype vulnerability

28 July 2006

freetype vulnerability

Releases

Details

An integer overflow has been discovered in the FreeType library. By
tricking a user into installing and/or opening a specially crafted
font file, these could be exploited to execute arbitrary code with the
privileges of that user.

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 6.06
  • libfreetype6 - 2.1.10-1ubuntu2.2
Ubuntu 5.10
  • libfreetype6 - 2.1.7-2.4ubuntu1.2
Ubuntu 5.04
  • libfreetype6 - 2.1.7-2.3ubuntu0.2

After a standard system upgrade you need to restart your session to
effect the necessary changes.

References

Related notices