FreeType Versions Prior to 2.4.0 Multiple Remote Vulnerabilities

Bugtraq ID:	41663
Class:	Unknown
CVE:	CVE-2010-2497 CVE-2010-2498 CVE-2010-2499 CVE-2010-2500 CVE-2010-2519 CVE-2010-2520
Remote:	Yes
Local:	No
Published:	Jul 14 2010 12:00AM
Updated:	Apr 16 2015 06:13PM
Credit:	Robert Swiecki
Vulnerable:	Ubuntu Ubuntu Linux 9.10 sparc Ubuntu Ubuntu Linux 9.10 powerpc Ubuntu Ubuntu Linux 9.10 lpia Ubuntu Ubuntu Linux 9.10 i386 Ubuntu Ubuntu Linux 9.10 amd64 Ubuntu Ubuntu Linux 9.04 sparc Ubuntu Ubuntu Linux 9.04 powerpc Ubuntu Ubuntu Linux 9.04 lpia Ubuntu Ubuntu Linux 9.04 i386 Ubuntu Ubuntu Linux 9.04 amd64 Ubuntu Ubuntu Linux 8.04 LTS sparc Ubuntu Ubuntu Linux 8.04 LTS powerpc Ubuntu Ubuntu Linux 8.04 LTS lpia Ubuntu Ubuntu Linux 8.04 LTS i386 Ubuntu Ubuntu Linux 8.04 LTS amd64 Ubuntu Ubuntu Linux 6.06 LTS sparc Ubuntu Ubuntu Linux 6.06 LTS powerpc Ubuntu Ubuntu Linux 6.06 LTS i386 Ubuntu Ubuntu Linux 6.06 LTS amd64 Ubuntu Ubuntu Linux 10.04 sparc Ubuntu Ubuntu Linux 10.04 powerpc Ubuntu Ubuntu Linux 10.04 i386 Ubuntu Ubuntu Linux 10.04 amd64 SuSE SUSE Linux Enterprise Server 9 SuSE SUSE Linux Enterprise Server 10 SP2 SuSE SUSE Linux Enterprise 11 SuSE SUSE Linux Enterprise 10 SP3 SuSE openSUSE 11.3 S.u.S.E. openSUSE 11.2 S.u.S.E. openSUSE 11.1 RedHat Enterprise Linux WS 3 RedHat Enterprise Linux ES 3 RedHat Desktop 3.0 Red Hat Enterprise Linux AS 3 Pardus Linux 2009 0 Mandriva Linux Mandrake 2010.1 x86_64 Mandriva Linux Mandrake 2010.1 Mandriva Linux Mandrake 2010.0 x86_64 Mandriva Linux Mandrake 2010.0 Mandriva Linux Mandrake 2009.1 x86_64 Mandriva Linux Mandrake 2009.1 Mandriva Linux Mandrake 2009.0 x86_64 Mandriva Linux Mandrake 2009.0 Mandriva Linux Mandrake 2008.0 x86_64 Mandriva Linux Mandrake 2008.0 MandrakeSoft Enterprise Server 5 x86_64 MandrakeSoft Enterprise Server 5 MandrakeSoft Corporate Server 4.0 x86_64 MandrakeSoft Corporate Server 4.0 Gentoo Linux FreeType FreeType 2.3.9 FreeType FreeType 2.3.6 FreeType FreeType 2.3.5 FreeType FreeType 2.3.4 FreeType FreeType 2.3.3 FreeType FreeType 2.2.10 FreeType FreeType 2.2.1 FreeType FreeType 2.1.10 FreeType FreeType 2.1.9 FreeType FreeType 2.1.7 FreeType FreeType 2.0.9 FreeType FreeType 2.0.6 FreeType FreeType 1.3.1 FreeType FreeType 2.2 FreeType FreeType 0 Debian Linux 5.0 sparc Debian Linux 5.0 s/390 Debian Linux 5.0 powerpc Debian Linux 5.0 mipsel Debian Linux 5.0 mips Debian Linux 5.0 m68k Debian Linux 5.0 ia-64 Debian Linux 5.0 ia-32 Debian Linux 5.0 hppa Debian Linux 5.0 armel Debian Linux 5.0 arm Debian Linux 5.0 amd64 Debian Linux 5.0 alpha Debian Linux 5.0 Avaya Voice Portal 5.1 Avaya Voice Portal 5.0 SP2 Avaya Voice Portal 5.0 SP1 Avaya Voice Portal 5.0 Avaya Voice Portal 4.1 SP2 Avaya Voice Portal 4.1 SP1 Avaya Voice Portal 4.1 Avaya Voice Portal 4.0 Avaya Voice Portal 3.0 Avaya Proactive Contact 4.1.2 Avaya Proactive Contact 4.1.1 Avaya Proactive Contact 3.0.3 Avaya Proactive Contact 3.0.2 Avaya Proactive Contact 4.2 Avaya Proactive Contact 4.1 Avaya Proactive Contact 4.0 Avaya Proactive Contact 3.0 Avaya Proactive Contact 0 Avaya Messaging Storage Server MM3.0 Avaya Messaging Storage Server 5.2 SP1 Avaya Messaging Storage Server 5.2 Avaya Messaging Storage Server 5.1 Avaya Messaging Storage Server 5.0 Avaya Messaging Storage Server 4.0 Avaya Messaging Storage Server 3.1 SP1 Avaya Messaging Storage Server 3.1 Avaya Messaging Storage Server 2.0 Avaya Messaging Storage Server 1.0 Avaya Messaging Storage Server Avaya Message Networking MN 3.1 Avaya Message Networking 5.2 Avaya Message Networking 3.1 Avaya Message Networking Avaya IR 4.0 Avaya IQ 4.1 Avaya IQ 5.1 Avaya IQ 5 Avaya Intuity AUDIX LX R1.1 Avaya Intuity AUDIX LX 2.0 SP2 Avaya Intuity AUDIX LX 2.0 SP1 Avaya Intuity AUDIX LX 2.0 Avaya Intuity AUDIX LX 1.0 Avaya CMS Server 16.2 Avaya CMS Server 16.1 Avaya CMS Server 16.0 Avaya CMS Server 15.0 Avaya Aura System Platform SP1.1 Avaya Aura System Platform 6.0 Avaya Aura System Platform 1.1 Avaya Aura System Manager 6.0 SP1 Avaya Aura System Manager 5.2 Avaya Aura System Manager 1.0 Avaya Aura Session Manager 6.0 Avaya Aura Session Manager 5.2 SP2 Avaya Aura Session Manager 5.2 SP1 Avaya Aura Session Manager 5.2 Avaya Aura Session Manager 1.1 Avaya Aura Session Manager 1.0 Avaya Aura Presence Services 6.0 Avaya Aura Presence Services 0 Avaya Aura Conferencing 6.0 Standard Avaya Aura Conferencing 6.0 Avaya Aura Application Enablement Services 5.2.1 Avaya Aura Application Enablement Services 5.2 Apple Mac OS X Server 10.6.4 Apple Mac OS X Server 10.6.3 Apple Mac OS X Server 10.6.2 Apple Mac OS X Server 10.6.1 Apple Mac OS X Server 10.5.8 Apple Mac OS X Server 10.5.7 Apple Mac OS X Server 10.5.6 Apple Mac OS X Server 10.5.5 Apple Mac OS X Server 10.5.4 Apple Mac OS X Server 10.5.3 Apple Mac OS X Server 10.5.2 Apple Mac OS X Server 10.5.1 Apple Mac OS X Server 10.5 Apple Mac OS X Server 10.6 Apple Mac OS X Server 10.5 Apple Mac OS X 10.6.4 Apple Mac OS X 10.6.3 Apple Mac OS X 10.6.2 Apple Mac OS X 10.6.1 Apple Mac OS X 10.5.8 Apple Mac OS X 10.5.7 Apple Mac OS X 10.5.6 Apple Mac OS X 10.5.5 Apple Mac OS X 10.5.4 Apple Mac OS X 10.5.3 Apple Mac OS X 10.5.2 Apple Mac OS X 10.5.1 Apple Mac OS X 10.5 Apple Mac OS X 10.6 Apple Mac OS X 10.5
Not Vulnerable:	FreeType FreeType 2.4 Apple Mac OS X Server 10.6.5

FreeType Versions Prior to 2.4.0 Multiple Remote Vulnerabilities

Currently we are not aware of any exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

FreeType Versions Prior to 2.4.0 Multiple Remote Vulnerabilities

Solution:
Updates are available. Please see the references for more information.


Ubuntu Ubuntu Linux 9.10 powerpc

• Ubuntu freetype2-demos_2.3.9-5ubuntu0.1_powerpc.deb
  http://ports.ubuntu.com/pool/universe/f/freetype/freetype2-demos_2.3.9 -5ubuntu0.1_powerpc.deb


• Ubuntu libfreetype6-dev_2.3.9-5ubuntu0.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/f/freetype/libfreetype6-dev_2.3.9-5u buntu0.1_powerpc.deb


• Ubuntu libfreetype6-udeb_2.3.9-5ubuntu0.1_powerpc.udeb
  http://ports.ubuntu.com/pool/main/f/freetype/libfreetype6-udeb_2.3.9-5 ubuntu0.1_powerpc.udeb


• Ubuntu libfreetype6_2.3.9-5ubuntu0.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/f/freetype/libfreetype6_2.3.9-5ubunt u0.1_powerpc.deb

Debian Linux 5.0 alpha

• Debian freetype2-demos_2.3.7-2+lenny2_alpha.deb
  http://security.debian.org/pool/updates/main/f/freetype/freetype2-demo s_2.3.7-2+lenny2_alpha.deb


• Debian libfreetype6-dev_2.3.7-2+lenny2_alpha.deb
  http://security.debian.org/pool/updates/main/f/freetype/libfreetype6-d ev_2.3.7-2+lenny2_alpha.deb


• Debian libfreetype6-udeb_2.3.7-2+lenny2_alpha.udeb
  http://security.debian.org/pool/updates/main/f/freetype/libfreetype6-u deb_2.3.7-2+lenny2_alpha.udeb


• Debian libfreetype6_2.3.7-2+lenny2_alpha.deb
  http://security.debian.org/pool/updates/main/f/freetype/libfreetype6_2 .3.7-2+lenny2_alpha.deb

Mandriva Linux Mandrake 2008.0

• Mandriva libfreetype6-2.3.5-2.3mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libfreetype6-devel-2.3.5-2.3mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libfreetype6-static-devel-2.3.5-2.3mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/

Ubuntu Ubuntu Linux 9.10 lpia

• Ubuntu freetype2-demos_2.3.9-5ubuntu0.1_lpia.deb
  http://ports.ubuntu.com/pool/universe/f/freetype/freetype2-demos_2.3.9 -5ubuntu0.1_lpia.deb


• Ubuntu libfreetype6-dev_2.3.9-5ubuntu0.1_lpia.deb
  http://ports.ubuntu.com/pool/main/f/freetype/libfreetype6-dev_2.3.9-5u buntu0.1_lpia.deb


• Ubuntu libfreetype6-udeb_2.3.9-5ubuntu0.1_lpia.udeb
  http://ports.ubuntu.com/pool/main/f/freetype/libfreetype6-udeb_2.3.9-5 ubuntu0.1_lpia.udeb


• Ubuntu libfreetype6_2.3.9-5ubuntu0.1_lpia.deb
  http://ports.ubuntu.com/pool/main/f/freetype/libfreetype6_2.3.9-5ubunt u0.1_lpia.deb

Ubuntu Ubuntu Linux 9.04 sparc

• Ubuntu freetype2-demos_2.3.9-4ubuntu0.2_sparc.deb
  http://ports.ubuntu.com/pool/universe/f/freetype/freetype2-demos_2.3.9 -4ubuntu0.2_sparc.deb


• Ubuntu libfreetype6-dev_2.3.9-4ubuntu0.2_sparc.deb
  http://ports.ubuntu.com/pool/main/f/freetype/libfreetype6-dev_2.3.9-4u buntu0.2_sparc.deb


• Ubuntu libfreetype6-udeb_2.3.9-4ubuntu0.2_sparc.udeb
  http://ports.ubuntu.com/pool/main/f/freetype/libfreetype6-udeb_2.3.9-4 ubuntu0.2_sparc.udeb


• Ubuntu libfreetype6_2.3.9-4ubuntu0.2_sparc.deb
  http://ports.ubuntu.com/pool/main/f/freetype/libfreetype6_2.3.9-4ubunt u0.2_sparc.deb

Ubuntu Ubuntu Linux 10.04 powerpc

• Ubuntu freetype2-demos_2.3.11-1ubuntu2.1_powerpc.deb
  http://ports.ubuntu.com/pool/universe/f/freetype/freetype2-demos_2.3.1 1-1ubuntu2.1_powerpc.deb


• Ubuntu libfreetype6-dev_2.3.11-1ubuntu2.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/f/freetype/libfreetype6-dev_2.3.11-1 ubuntu2.1_powerpc.deb


• Ubuntu libfreetype6-udeb_2.3.11-1ubuntu2.1_powerpc.udeb
  http://ports.ubuntu.com/pool/main/f/freetype/libfreetype6-udeb_2.3.11- 1ubuntu2.1_powerpc.udeb


• Ubuntu libfreetype6_2.3.11-1ubuntu2.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/f/freetype/libfreetype6_2.3.11-1ubun tu2.1_powerpc.deb

Ubuntu Ubuntu Linux 9.04 lpia

• Ubuntu freetype2-demos_2.3.9-4ubuntu0.2_lpia.deb
  http://ports.ubuntu.com/pool/universe/f/freetype/freetype2-demos_2.3.9 -4ubuntu0.2_lpia.deb


• Ubuntu libfreetype6-dev_2.3.9-4ubuntu0.2_lpia.deb
  http://ports.ubuntu.com/pool/main/f/freetype/libfreetype6-dev_2.3.9-4u buntu0.2_lpia.deb


• Ubuntu libfreetype6-udeb_2.3.9-4ubuntu0.2_lpia.udeb
  http://ports.ubuntu.com/pool/main/f/freetype/libfreetype6-udeb_2.3.9-4 ubuntu0.2_lpia.udeb


• Ubuntu libfreetype6_2.3.9-4ubuntu0.2_lpia.deb
  http://ports.ubuntu.com/pool/main/f/freetype/libfreetype6_2.3.9-4ubunt u0.2_lpia.deb

Debian Linux 5.0 armel

• Debian freetype2-demos_2.3.7-2+lenny2_armel.deb
  http://security.debian.org/pool/updates/main/f/freetype/freetype2-demo s_2.3.7-2+lenny2_armel.deb


• Debian libfreetype6-dev_2.3.7-2+lenny2_armel.deb
  http://security.debian.org/pool/updates/main/f/freetype/libfreetype6-d ev_2.3.7-2+lenny2_armel.deb


• Debian libfreetype6-udeb_2.3.7-2+lenny2_armel.udeb
  http://security.debian.org/pool/updates/main/f/freetype/libfreetype6-u deb_2.3.7-2+lenny2_armel.udeb


• Debian libfreetype6_2.3.7-2+lenny2_armel.deb
  http://security.debian.org/pool/updates/main/f/freetype/libfreetype6_2 .3.7-2+lenny2_armel.deb

Ubuntu Ubuntu Linux 9.10 amd64

• Ubuntu freetype2-demos_2.3.9-5ubuntu0.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/f/freetype/freetype2-d emos_2.3.9-5ubuntu0.1_amd64.deb


• Ubuntu libfreetype6-dev_2.3.9-5ubuntu0.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/f/freetype/libfreetype6-de v_2.3.9-5ubuntu0.1_amd64.deb


• Ubuntu libfreetype6-udeb_2.3.9-5ubuntu0.1_amd64.udeb
  http://security.ubuntu.com/ubuntu/pool/main/f/freetype/libfreetype6-ud eb_2.3.9-5ubuntu0.1_amd64.udeb


• Ubuntu libfreetype6_2.3.9-5ubuntu0.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/f/freetype/libfreetype6_2. 3.9-5ubuntu0.1_amd64.deb

Apple Mac OS X 10.6

• Apple MacOSXUpdCombo10.6.5.dmg
  For Mac OS X v10.6 - v10.6.3
  http://www.apple.com/support/downloads/

Mandriva Linux Mandrake 2009.0 x86_64

• Mandriva lib64freetype6-2.3.7-1.2mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64freetype6-devel-2.3.7-1.2mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64freetype6-static-devel-2.3.7-1.2mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/

Debian Linux 5.0 mips

• Debian freetype2-demos_2.3.7-2+lenny2_mips.deb
  http://security.debian.org/pool/updates/main/f/freetype/freetype2-demo s_2.3.7-2+lenny2_mips.deb


• Debian libfreetype6-dev_2.3.7-2+lenny2_mips.deb
  http://security.debian.org/pool/updates/main/f/freetype/libfreetype6-d ev_2.3.7-2+lenny2_mips.deb


• Debian libfreetype6-udeb_2.3.7-2+lenny2_mips.udeb
  http://security.debian.org/pool/updates/main/f/freetype/libfreetype6-u deb_2.3.7-2+lenny2_mips.udeb


• Debian libfreetype6_2.3.7-2+lenny2_mips.deb
  http://security.debian.org/pool/updates/main/f/freetype/libfreetype6_2 .3.7-2+lenny2_mips.deb

Ubuntu Ubuntu Linux 9.04 amd64

• Ubuntu freetype2-demos_2.3.9-4ubuntu0.2_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/f/freetype/freetype2-d emos_2.3.9-4ubuntu0.2_amd64.deb


• Ubuntu libfreetype6-dev_2.3.9-4ubuntu0.2_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/f/freetype/libfreetype6-de v_2.3.9-4ubuntu0.2_amd64.deb


• Ubuntu libfreetype6-udeb_2.3.9-4ubuntu0.2_amd64.udeb
  http://security.ubuntu.com/ubuntu/pool/main/f/freetype/libfreetype6-ud eb_2.3.9-4ubuntu0.2_amd64.udeb


• Ubuntu libfreetype6_2.3.9-4ubuntu0.2_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/f/freetype/libfreetype6_2. 3.9-4ubuntu0.2_amd64.deb

Debian Linux 5.0 sparc

• Debian freetype2-demos_2.3.7-2+lenny2_sparc.deb
  http://security.debian.org/pool/updates/main/f/freetype/freetype2-demo s_2.3.7-2+lenny2_sparc.deb


• Debian libfreetype6-dev_2.3.7-2+lenny2_sparc.deb
  http://security.debian.org/pool/updates/main/f/freetype/libfreetype6-d ev_2.3.7-2+lenny2_sparc.deb


• Debian libfreetype6-udeb_2.3.7-2+lenny2_sparc.udeb
  http://security.debian.org/pool/updates/main/f/freetype/libfreetype6-u deb_2.3.7-2+lenny2_sparc.udeb


• Debian libfreetype6_2.3.7-2+lenny2_sparc.deb
  http://security.debian.org/pool/updates/main/f/freetype/libfreetype6_2 .3.7-2+lenny2_sparc.deb

Mandriva Linux Mandrake 2009.1 x86_64

• Mandriva lib64freetype6-2.3.9-1.3mdv2009.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64freetype6-devel-2.3.9-1.3mdv2009.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64freetype6-static-devel-2.3.9-1.3mdv2009.1.x86_64.rpm
  http://www.mandriva.com/en/download/

MandrakeSoft Enterprise Server 5

• Mandriva libfreetype6-2.3.7-1.2mdvmes5.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libfreetype6-devel-2.3.7-1.2mdvmes5.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libfreetype6-static-devel-2.3.7-1.2mdvmes5.1.i586.rpm
  http://www.mandriva.com/en/download/

Debian Linux 5.0 s/390

• Debian freetype2-demos_2.3.7-2+lenny2_s390.deb
  http://security.debian.org/pool/updates/main/f/freetype/freetype2-demo s_2.3.7-2+lenny2_s390.deb


• Debian libfreetype6-dev_2.3.7-2+lenny2_s390.deb
  http://security.debian.org/pool/updates/main/f/freetype/libfreetype6-d ev_2.3.7-2+lenny2_s390.deb


• Debian libfreetype6-udeb_2.3.7-2+lenny2_s390.udeb
  http://security.debian.org/pool/updates/main/f/freetype/libfreetype6-u deb_2.3.7-2+lenny2_s390.udeb


• Debian libfreetype6_2.3.7-2+lenny2_s390.deb
  http://security.debian.org/pool/updates/main/f/freetype/libfreetype6_2 .3.7-2+lenny2_s390.deb

Ubuntu Ubuntu Linux 8.04 LTS lpia

• Ubuntu freetype2-demos_2.3.5-1ubuntu4.8.04.3_lpia.deb
  http://ports.ubuntu.com/pool/universe/f/freetype/freetype2-demos_2.3.5 -1ubuntu4.8.04.3_lpia.deb


• Ubuntu libfreetype6-dev_2.3.5-1ubuntu4.8.04.3_lpia.deb
  http://ports.ubuntu.com/pool/main/f/freetype/libfreetype6-dev_2.3.5-1u buntu4.8.04.3_lpia.deb


• Ubuntu libfreetype6-udeb_2.3.5-1ubuntu4.8.04.3_lpia.udeb
  http://ports.ubuntu.com/pool/universe/f/freetype/libfreetype6-udeb_2.3 .5-1ubuntu4.8.04.3_lpia.udeb


• Ubuntu libfreetype6_2.3.5-1ubuntu4.8.04.3_lpia.deb
  http://ports.ubuntu.com/pool/main/f/freetype/libfreetype6_2.3.5-1ubunt u4.8.04.3_lpia.deb

Ubuntu Ubuntu Linux 6.06 LTS i386

• Ubuntu freetype2-demos_2.1.10-1ubuntu2.7_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/f/freetype/freetype2-d emos_2.1.10-1ubuntu2.7_i386.deb


• Ubuntu libfreetype6-dev_2.1.10-1ubuntu2.7_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/f/freetype/libfreetype6-de v_2.1.10-1ubuntu2.7_i386.deb


• Ubuntu libfreetype6-udeb_2.1.10-1ubuntu2.7_i386.udeb
  http://security.ubuntu.com/ubuntu/pool/universe/f/freetype/libfreetype 6-udeb_2.1.10-1ubuntu2.7_i386.udeb


• Ubuntu libfreetype6_2.1.10-1ubuntu2.7_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/f/freetype/libfreetype6_2. 1.10-1ubuntu2.7_i386.deb

Debian Linux 5.0 hppa

• Debian freetype2-demos_2.3.7-2+lenny2_hppa.deb
  http://security.debian.org/pool/updates/main/f/freetype/freetype2-demo s_2.3.7-2+lenny2_hppa.deb


• Debian libfreetype6-dev_2.3.7-2+lenny2_hppa.deb
  http://security.debian.org/pool/updates/main/f/freetype/libfreetype6-d ev_2.3.7-2+lenny2_hppa.deb


• Debian libfreetype6-udeb_2.3.7-2+lenny2_hppa.udeb
  http://security.debian.org/pool/updates/main/f/freetype/libfreetype6-u deb_2.3.7-2+lenny2_hppa.udeb


• Debian libfreetype6_2.3.7-2+lenny2_hppa.deb
  http://security.debian.org/pool/updates/main/f/freetype/libfreetype6_2 .3.7-2+lenny2_hppa.deb

Mandriva Linux Mandrake 2009.0

• Mandriva libfreetype6-2.3.7-1.2mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libfreetype6-devel-2.3.7-1.2mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libfreetype6-static-devel-2.3.7-1.2mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/

Ubuntu Ubuntu Linux 8.04 LTS i386

• Ubuntu freetype2-demos_2.3.5-1ubuntu4.8.04.3_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/f/freetype/freetype2-d emos_2.3.5-1ubuntu4.8.04.3_i386.deb


• Ubuntu libfreetype6-dev_2.3.5-1ubuntu4.8.04.3_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/f/freetype/libfreetype6-de v_2.3.5-1ubuntu4.8.04.3_i386.deb


• Ubuntu libfreetype6-udeb_2.3.5-1ubuntu4.8.04.3_i386.udeb
  http://security.ubuntu.com/ubuntu/pool/universe/f/freetype/libfreetype 6-udeb_2.3.5-1ubuntu4.8.04.3_i386.udeb


• Ubuntu libfreetype6_2.3.5-1ubuntu4.8.04.3_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/f/freetype/libfreetype6_2. 3.5-1ubuntu4.8.04.3_i386.deb

FreeType FreeType 1.3.1

• FreeType freetype-2.4.0.tar.bz2
  http://sourceforge.net/projects/freetype/files/freetype2/2.4.0/freetyp e-2.4.0.tar.bz2/download

Apple Mac OS X 10.5.8

• Apple SecUpd2010-007.dmg
  For Mac OS X v10.5.8
  http://www.apple.com/support/downloads/

Apple Mac OS X 10.6.1

• Apple MacOSXUpdCombo10.6.5.dmg
  For Mac OS X v10.6 - v10.6.3
  http://www.apple.com/support/downloads/

Apple Mac OS X 10.6.3

• Apple MacOSXUpdCombo10.6.5.dmg
  For Mac OS X v10.6 - v10.6.3
  http://www.apple.com/support/downloads/

FreeType FreeType 2.0.9

• FreeType freetype-2.4.0.tar.bz2
  http://sourceforge.net/projects/freetype/files/freetype2/2.4.0/freetyp e-2.4.0.tar.bz2/download

FreeType FreeType 2.1.7

• FreeType freetype-2.4.0.tar.bz2
  http://sourceforge.net/projects/freetype/files/freetype2/2.4.0/freetyp e-2.4.0.tar.bz2/download

FreeType FreeType 2.3.3

• FreeType freetype-2.4.0.tar.bz2
  http://sourceforge.net/projects/freetype/files/freetype2/2.4.0/freetyp e-2.4.0.tar.bz2/download

FreeType FreeType 2.3.4

• FreeType freetype-2.4.0.tar.bz2
  http://sourceforge.net/projects/freetype/files/freetype2/2.4.0/freetyp e-2.4.0.tar.bz2/download

FreeType FreeType 2.3.6

• FreeType freetype-2.4.0.tar.bz2
  http://sourceforge.net/projects/freetype/files/freetype2/2.4.0/freetyp e-2.4.0.tar.bz2/download

FreeType FreeType 2.3.9

• FreeType freetype-2.4.0.tar.bz2
  http://sourceforge.net/projects/freetype/files/freetype2/2.4.0/freetyp e-2.4.0.tar.bz2/download

MandrakeSoft Corporate Server 4.0 x86_64

• Mandriva lib64freetype6-2.1.10-9.10.20060mlcs4.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64freetype6-devel-2.1.10-9.10.20060mlcs4.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64freetype6-static-devel-2.1.10-9.10.20060mlcs4.x86_64.rpm
  http://www.mandriva.com/en/download/

FreeType Versions Prior to 2.4.0 Multiple Remote Vulnerabilities

References:

• (CVE-2010-2498) CVE-2010-2498 freetype: invalid free vulnerability with possibl (Vincent Danen)
  
• (CVE-2010-2519) CVE-2010-2519 freetype: heap buffer overflow vulnerability when (Vincent Danen )
  
• (CVE-2010-2497) CVE-2010-2497 freetype: integer underflow vulnerability (Vincent Danen)
  
• (CVE-2010-2499) CVE-2010-2499 freetype: buffer overflow vulnerability (Vincent Danen)
  
• (CVE-2010-2500) CVE-2010-2500 freetype: integer overflow vulnerability in smooth (Vincent Danen)
  
• (CVE-2010-2520) CVE-2010-2520 freetype: heap buffer overflow vulnerability in tr (Vincent Danen)
  
• bug #30082: SIGSEGV while loading one of the glyphs (in freetype2/src/cff/cffglo (Robert Swiecki)
  
• bug #30083: SIGSEGV while loading a glyph (index 49) (Robert Swiecki)
  
• bug #30106: Invalid free (heap corruption?) resulting in SIGABRT (via glibc MALL (Robert Swiecki)
  
• bug #30248: SIGSEGV - write to non-mapped memory (looks like it might be exploit (Robert Swiecki)
  
• bug #30249: Heap corruption in base/* (Mac fonts related functions) (Robert Swiecki)
  
• bug #30361: Possible heap corruption (Robert Swiecki)
  
• FreeType Homepage (FreeType)
  
• SIGSEGV in FT_Stream_ReadAt():145 ; invalid parameters to memcpy() - mac font pa (Robert Swiecki)
  
• SIGSEGV under certain conditions in smooth/ftgrays.c:486 (Robert Swiecki)
  
• ASA-2010-257 freetype security update (RHSA-2010-0578) (Avaya)
  
• ASA-2012-049: Multiple Vulnerabilities in Freetype Prior to 2.4.2 (Oracle Octobe (Avaya)