Advisories » MGASA-2018-0128

Updated freetype2 packages fix security vulnerability

Publication date: 15 Feb 2018
Modification date: 15 Feb 2018
Type: security
Affected Mageia releases : 6
CVE: CVE-2017-7864

Description

Updated freetype2 packages fix security vulnerability:

FreeType 2 before 2017-02-02 has an out-of-bounds write caused by a heap-based
buffer overflow related to the tt_size_reset function in truetype/ttobjs.c
(CVE-2017-7864).
                

References

• https://bugs.mageia.org/show_bug.cgi?id=22563
• https://bugzilla.suse.com/show_bug.cgi?id=1034178
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7864

SRPMS

6/core

• freetype2-2.7.1-2.1.mga6

6/tainted

• freetype2-2.7.1-2.1.mga6.tainted