Ubuntu 963-1: FreeType vulnerabilities
Summary
Update Instructions
References
Package Information
==========================================================Ubuntu Security Notice USN-963-1 July 20, 2010 freetype vulnerabilities CVE-2010-2498, CVE-2010-2499, CVE-2010-2500, CVE-2010-2519, CVE-2010-2520, CVE-2010-2527 ========================================================== A security issue affects the following Ubuntu releases: Ubuntu 6.06 LTS Ubuntu 8.04 LTS Ubuntu 9.04 Ubuntu 9.10 Ubuntu 10.04 LTS This advisory also applies to the corresponding versions of Kubuntu, Edubuntu, and Xubuntu. The problem can be corrected by upgrading your system to the following package versions: Ubuntu 6.06 LTS: libfreetype6 2.1.10-1ubuntu2.7 Ubuntu 8.04 LTS: libfreetype6 2.3.5-1ubuntu4.8.04.3 Ubuntu 9.04: libfreetype6 2.3.9-4ubuntu0.2 Ubuntu 9.10: libfreetype6 2.3.9-5ubuntu0.1 Ubuntu 10.04 LTS: libfreetype6 2.3.11-1ubuntu2.1 After a standard system update you need to restart your session to make all the necessary changes. Details follow: Robert Święcki discovered that FreeType did not correctly handle certain malformed font files. If a user were tricked into using a specially crafted font file, a remote attacker could execute arbitrary code with user privileges. Updated packages for Ubuntu 6.06 LTS: Source archives: Size/MD5: 66378 53a1e74f47f7370e6cedfd49ef33f82a Size/MD5: 719 4f1ab392b150b45f00d7084a2fda2e3f Size/MD5: 1323617 adf145ce51196ad1b3054d5fb032efe6 amd64 architecture (Athlon64, Opteron, EM64T Xeon): Size/MD5: 717700 ef25a872834db5b57de8cba1b9d198bb Size/MD5: 440434 6f785a8660ca70a43e36157b9d5db23a Size/MD5: 133890 558c68a334e4bb3ebbf9bb2058234d17 Size/MD5: 251848 1cf31177a65df3bb23712a9620937724 i386 architecture (x86 compatible Intel/AMD): Size/MD5: 677528 9551dffd9a301d368c799a38f7161bb4 Size/MD5: 415952 5605ecc4398f4e1c5fa8822233b36e9b Size/MD5: 117280 bb7fd6d1f7eb762cf355d8c34c3da705 Size/MD5: 227420 27670bac197089a9588b7167679e7f05 powerpc architecture (Apple Macintosh G3/G4/G5): Size/MD5: 708556 09c6d8c9859b29f777e017d4532d7d6b Size/MD5: 430594 56625ca1fa70f5859a8e293a98421547 Size/MD5: 134270 ef77dec93e203f782865a3142d88c180 Size/MD5: 241644 b140c31ea68f78e54096ad60e1b214d0 sparc architecture (Sun SPARC/UltraSPARC): Size/MD5: 683840 184e946cc8d89d1d169b4047e27c92b0 Size/MD5: 411518 a420b09b4f205bf6e55e7aa4782c88fc Size/MD5: 120116 9c8db36770be6466ef897314ea4abc4b Size/MD5: 222590 905398b9656ebc72cc70b7bdca894ab2 Updated packages for Ubuntu 8.04 LTS: Source archives: Size/MD5: 37126 04fe68272c3a06e116a13e89f1ea4f13 Size/MD5: 907 b46efc68ee637cb27c2a76d4594b5615 Size/MD5: 1536077 4a5bdbe1ab92f3fe4c4816f9934a5ec2 amd64 architecture (Athlon64, Opteron, EM64T Xeon): Size/MD5: 694110 b35305e27ad2531fd774c19748efde7b Size/MD5: 361814 cec5f15ce8a397d8212f764ff7e25f0b Size/MD5: 221334 56fd8a5204e014256105d1e7d833f275 Size/MD5: 258230 21b232b84b12f335843504b49d9ff284 i386 architecture (x86 compatible Intel/AMD): Size/MD5: 663244 3f15ca19cbe6fc05840409958cea65b1 Size/MD5: 346772 99afdc331b475c43beda28d4459ff4e5 Size/MD5: 201222 d8487d4840b48cc60370daddc3fc61ab Size/MD5: 243290 a9a85de7d9467d99e5fec169bfaa9908 lpia architecture (Low Power Intel Architecture): Size/MD5: 665008 d19873caab8d82d40d046cf98350fb98 Size/MD5: 346972 580b60a5a20371df70d770e5b45d3d67 Size/MD5: 205460 dadb0d5ffc952504953c15d41d0a2356 Size/MD5: 244160 d60ef9b4abdb4d345c382c3950075544 powerpc architecture (Apple Macintosh G3/G4/G5): Size/MD5: 687172 978bb494ab76f8a150dc9f1886df2873 Size/MD5: 357724 f6c2693b012c775e7f85bea30e7d6ac7 Size/MD5: 235556 7c13b39c41718a3e7e594a08a9c42fd9 Size/MD5: 254440 80ad8bcba1a39760e217dc91f447aacd sparc architecture (Sun SPARC/UltraSPARC): Size/MD5: 657974 d1d6d8ab63f4e6624b1c7b69756d02f9 Size/MD5: 331648 8b2df436ad35d4c71c90ebfe1ed86c5d Size/MD5: 199746 4da2f86265e6a7714fbe0bde32f22154 Size/MD5: 227682 dcf258655d624daa833a315fa68af6ae Updated packages for Ubuntu 9.04: Source archives: Size/MD5: 39290 799e4e568b9806952f927c4b3a896f87 Size/MD5: 1311 ea7ece62a87ca6a90244d4a419ac6259 Size/MD5: 1624314 7b2ab681f1a436876ed888041204e478 amd64 architecture (Athlon64, Opteron, EM64T Xeon): Size/MD5: 729182 0db366c000c726419ef46d0d2047adcd Size/MD5: 272744 96613f4e2ed3cc1217c9ac9ad2e8f8fa Size/MD5: 406484 9580234639381beaf1e1e0ba1707b7e5 Size/MD5: 226422 89ab56c75fbe22efb8140ca82960ddfd i386 architecture (x86 compatible Intel/AMD): Size/MD5: 697534 1cf3d4991a00804ea20d7898cfddd6ca Size/MD5: 257702 f96e5175f5ebfb858718498a5ac62971 Size/MD5: 391938 509d532cba962f210ee2223d51f7f001 Size/MD5: 198728 7930d58edf1ab1c3380e102b82ac5170 lpia architecture (Low Power Intel Architecture): Size/MD5: 698598 a88f33a3010d4b7f8d331dd0346b22d4 Size/MD5: 257644 6aed18309e225f9b1413f5c85696d725 Size/MD5: 392384 40c1a93c1b72421ca40f0a7b80f91882 Size/MD5: 201552 a9d7be5b254bead82386687714cf778e powerpc architecture (Apple Macintosh G3/G4/G5): Size/MD5: 719872 60ff1a115a7254f82b8d80b6c6ef6b74 Size/MD5: 265648 72e68838b98843ff0515af3b854065f0 Size/MD5: 399740 ce2b8574754fb9a6c08bfdff0f3b8aa4 Size/MD5: 227856 fa508302d46bb73c1b2a13aa11871239 sparc architecture (Sun SPARC/UltraSPARC): Size/MD5: 689132 c3d269891e090d405b2cf7da96e77341 Size/MD5: 238116 7487d5f6c08361212430bca6261ef016 Size/MD5: 371970 95d02ed537411018ac66a3a91bc82093 Size/MD5: 201374 5c0f80146fd1366e88c75fd427b04f56 Updated packages for Ubuntu 9.10: Source archives: Size/MD5: 38847 6694e4319b4b87a7366381ff0f4066ca Size/MD5: 1311 4aacd927d22517066aa795b0b4637c57 Size/MD5: 1624314 7b2ab681f1a436876ed888041204e478 amd64 architecture (Athlon64, Opteron, EM64T Xeon): Size/MD5: 730814 04cbd59abf8eb133c93b5052881758c5 Size/MD5: 274918 10491ab571ad8cc4314b53ae3a905809 Size/MD5: 408744 d9ed733aef1661ebe41bbc7cbf2c4f82 Size/MD5: 230716 be893e6cffe7985b67d8cfa4a52ed99d i386 architecture (x86 compatible Intel/AMD): Size/MD5: 696776 9d749fe8de579cb210a0da29681ef8f0 Size/MD5: 258496 1fdd1a45327b4289e58fae36a93a6de7 Size/MD5: 393238 5a0daf57499a91de25f76ccea6274279 Size/MD5: 195654 d7f4aafc59c8d61608ff6469356945d3 lpia architecture (Low Power Intel Architecture): Size/MD5: 699162 446907e7a2853e3e27ad182fc87dd763 Size/MD5: 259118 7d849cb8ef0ecafcacd8805aa5704f21 Size/MD5: 393668 9d9b9fcffa4bf4551b7f82a8a817b967 Size/MD5: 198448 5a680f80d2ae1815a4ab891cfeab51c9 powerpc architecture (Apple Macintosh G3/G4/G5): Size/MD5: 719470 dc2557d025bf350eca70fb9b12e77a72 Size/MD5: 264240 017ed182ca776de01b1f4a31c28807f3 Size/MD5: 398432 673f831700bd5078dab940620328d16d Size/MD5: 203786 ad1d3625e2712b5290c1abdcf46c556f sparc architecture (Sun SPARC/UltraSPARC): Size/MD5: 690882 474956a99bd530921143a5deaedb922a Size/MD5: 240326 43beb7cf66c7e9473280672381d539b2 Size/MD5: 374390 636de364e467d9400a8237ef636b5bb4 Size/MD5: 195772 0152eff0742d67f470d6a7e5d79ba410 Updated packages for Ubuntu 10.04: Source archives: Size/MD5: 37792 91c5ee03d36da51a835976e0ff1c688e Size/MD5: 1313 34b2898a751164cadbd59572bf0eacc8 Size/MD5: 1709600 5aa22c0bc6aa3815b40a309ead2b9d1b amd64 architecture (Athlon64, Opteron, EM64T Xeon): Size/MD5: 739366 b8e244fef49b2422e180b5fc37d4fc7b Size/MD5: 277296 09c42186549e22f61dedc77f162bade9 Size/MD5: 434322 e62e542678e479a90938357c14f0a86a Size/MD5: 221370 39c8dcc460781359a5283df0aba0792d i386 architecture (x86 compatible Intel/AMD): Size/MD5: 704664 64c3751c6f9341a4bd432cccc4d611ae Size/MD5: 260696 636de26225eae8f7c480738545ecaeae Size/MD5: 418488 db37df9fc07ace0ef2ded4d9a7a91637 Size/MD5: 188672 cc48be4e042eb3215c50bec8ed566a91 powerpc architecture (Apple Macintosh G3/G4/G5): Size/MD5: 727760 c1f31e0952484cb3a154c30d8efabe2e Size/MD5: 266454 89a1057d4e013fae1c7265199a3b6627 Size/MD5: 423818 28a622d650c3c9e0db13a20f1d69acb1 Size/MD5: 196646 44a6cb7e6084c96fb95e36723e187b56 sparc architecture (Sun SPARC/UltraSPARC): Size/MD5: 707062 4a3a0b8a2b1a3e3d19a219ebef461380 Size/MD5: 250700 e827e5ab700b21f343e44a4da45253b7 Size/MD5: 407810 423b481bec4b66ec2375c34a6ce4e153 Size/MD5: 198278 0c059b0b2d188a61c50ea61aeededad8