freetype2 was updated to fix various vulnerabilities that could lead to crashes or potentially code execution when parsing fonts.

This update fixes several security issues.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2510-1 advisory.

    Mateusz Jurczyk discovered that FreeType did not correctly handle certain malformed font files. If a user     were tricked into using a specially crafted font file, a remote attacker could cause FreeType to crash or     possibly execute arbitrary code with user privileges.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-201503-05 (FreeType: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in FreeType. Please review       the CVE identifiers referenced below for details.
  Impact :

    A remote attacker can cause Denial of Service.
  Workaround :

    There is no known workaround at this time.

Mateusz Jurczyk discovered multiple vulnerabilities in Freetype.
Opening malformed fonts may result in denial of service or the execution of arbitrary code.

For the oldstable distribution (squeeze), these problems have been fixed in version 2.4.2-2.1+squeeze5.

For the stable distribution (wheezy), these problems were fixed in version 2.4.9-1.1+deb7u1.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The font rendering library freetype2 has been updated to fix various security issues.

ID	Name	Product	Family	Published	Updated	Severity
82461	openSUSE Security Update : freetype2 (openSUSE-2015-274)	Nessus	SuSE Local Security Checks	3/31/2015	1/19/2021	high
81415	Fedora 21 : freetype-2.5.3-15.fc21 (2015-2237)	Nessus	Fedora Local Security Checks	2/20/2015	1/11/2021	high
81509	Ubuntu 14.04 LTS : FreeType vulnerabilities (USN-2510-1)	Nessus	Ubuntu Local Security Checks	2/25/2015	8/27/2024	medium
81690	GLSA-201503-05 : FreeType: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	3/9/2015	1/11/2021	high
82479	Debian DLA-185-1 : freetype security update	Nessus	Debian Local Security Checks	4/1/2015	1/11/2021	high
81429	Fedora 20 : freetype-2.5.0-9.fc20 (2015-2216)	Nessus	Fedora Local Security Checks	2/23/2015	1/11/2021	high
81752	SuSE 11.3 Security Update : freetype2 (SAT Patch Number 10386)	Nessus	SuSE Local Security Checks	3/11/2015	1/6/2021	high

Detections

Analytics

Plugins Search

high

high

medium

high

high

high

high