[Bug 806270] New: CVE-2012-1144 freetype: insufficient checking of first outline point in TTF parser (#35689) [fedora-all]
6:12 a.m.
Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug.
Summary: CVE-2012-1144 freetype: insufficient checking of first outline point in TTF
parser (#35689) [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=806270
Summary: CVE-2012-1144 freetype: insufficient checking of first
outline point in TTF parser (#35689) [fedora-all]
Product: Fedora
Version: 16
Platform: All
OS/Version: Linux
Status: NEW
Keywords: Security, SecurityTracking
Severity: high
Priority: high
Component: freetype
AssignedTo: mkasik(a)redhat.com
ReportedBy: thoger(a)redhat.com
QAContact: extras-qa(a)fedoraproject.org
CC: behdad(a)fedoraproject.org, kevin(a)tigcc.ticalc.org,
fonts-bugs(a)lists.fedoraproject.org, mkasik(a)redhat.com
Blocks: 800607
Classification: Fedora
Story Points: ---
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected Fedora
versions.
For comments that are specific to the vulnerability please use bugs filed
against "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When creating a Bodhi update request, please include this bug ID and the
bug IDs of this bug's parent bugs filed against the "Security Response"
product (the top-level CVE bugs). Please mention the CVE IDs being fixed
in the RPM changelog when available.
Bodhi update submission link:
https://admin.fedoraproject.org/updates/new/?type_=security&bugs=800607
Please note: this issue affects multiple supported versions of Fedora.
Only one tracking bug has been filed; please ensure that it is only closed
when all affected versions are fixed.
[bug automatically created by: add-tracking-bugs]
--
Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.
6:37 a.m.
New subject: [Bug 806270] CVE-2012-{1126, 1127, 1128, 1129, 1130, 1131, 1132, 1133, 1134, 1135, 1136, 1137, 1138, 1139, 1140, 1141, 1142, 1143, 1144} freetype: multiple vulnerabilities [fedora-all]
Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug.
https://bugzilla.redhat.com/show_bug.cgi?id=806270
Tomas Hoger <thoger(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Blocks| |800581(CVE-2012-1126),
| |800583(CVE-2012-1127),
| |800584(CVE-2012-1128),
| |800585(CVE-2012-1129),
| |800587(CVE-2012-1130),
| |800589(CVE-2012-1131),
| |800590(CVE-2012-1132),
| |800591(CVE-2012-1133),
| |800592(CVE-2012-1134),
| |800593(CVE-2012-1135),
| |800594(CVE-2012-1136),
| |800595(CVE-2012-1137),
| |800597(CVE-2012-1138),
| |800598(CVE-2012-1139),
| |800600(CVE-2012-1140),
| |800602(CVE-2012-1141),
| |800604(CVE-2012-1142),
| |800606(CVE-2012-1143)
Summary|CVE-2012-1144 freetype: |CVE-2012-{1126,1127,1128,11
|insufficient checking of |29,1130,1131,1132,1133,1134
|first outline point in TTF |,1135,1136,1137,1138,1139,1
|parser (#35689) |140,1141,1142,1143,1144}
|[fedora-all] |freetype: multiple
| |vulnerabilities
| |[fedora-all]
--
Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.
6:40 a.m.
New subject: [Bug 806270] CVE-2012-{1126, 1127, 1128, 1129, 1130, 1131, 1132, 1133, 1134, 1135, 1136, 1137, 1138, 1139, 1140, 1141, 1142, 1143, 1144} freetype: multiple vulnerabilities [fedora-all]
Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug.
https://bugzilla.redhat.com/show_bug.cgi?id=806270
Tomas Hoger <thoger(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Blocks|800585(CVE-2012-1129) |
--
Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.
6:41 a.m.
New subject: [Bug 806270] CVE-2012-{1126, 1127, 1128, 1130, 1131, 1132, 1133, 1134, 1135, 1136, 1137, 1138, 1139, 1140, 1141, 1142, 1143, 1144} freetype: multiple vulnerabilities [fedora-all]
Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug.
https://bugzilla.redhat.com/show_bug.cgi?id=806270
Tomas Hoger <thoger(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Summary|CVE-2012-{1126,1127,1128,11 |CVE-2012-{1126,1127,1128,11
|29,1130,1131,1132,1133,1134 |30,1131,1132,1133,1134,1135
|,1135,1136,1137,1138,1139,1 |,1136,1137,1138,1139,1140,1
|140,1141,1142,1143,1144} |141,1142,1143,1144}
|freetype: multiple |freetype: multiple
|vulnerabilities |vulnerabilities
|[fedora-all] |[fedora-all]
--
Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.
9:38 a.m.
New subject: [Bug 806270] CVE-2012-{1126, 1127, 1128, 1130, 1131, 1132, 1133, 1134, 1135, 1136, 1137, 1138, 1139, 1140, 1141, 1142, 1143, 1144} freetype: multiple vulnerabilities [fedora-all]
Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug.
https://bugzilla.redhat.com/show_bug.cgi?id=806270
Fedora Update System <updates(a)fedoraproject.org> changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|NEW |MODIFIED
--
Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.
9:39 a.m.
New subject: [Bug 806270] CVE-2012-{1126, 1127, 1128, 1130, 1131, 1132, 1133, 1134, 1135, 1136, 1137, 1138, 1139, 1140, 1141, 1142, 1143, 1144} freetype: multiple vulnerabilities [fedora-all]
Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug.
https://bugzilla.redhat.com/show_bug.cgi?id=806270
--- Comment #1 from Fedora Update System <updates(a)fedoraproject.org> 2012-03-30
10:39:02 EDT ---
freetype-2.4.8-3.fc17 has been submitted as an update for Fedora 17.
https://admin.fedoraproject.org/updates/freetype-2.4.8-3.fc17
--
Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.
9:40 a.m.
New subject: [Bug 806270] CVE-2012-{1126, 1127, 1128, 1130, 1131, 1132, 1133, 1134, 1135, 1136, 1137, 1138, 1139, 1140, 1141, 1142, 1143, 1144} freetype: multiple vulnerabilities [fedora-all]
Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug.
https://bugzilla.redhat.com/show_bug.cgi?id=806270
--- Comment #2 from Fedora Update System <updates(a)fedoraproject.org> 2012-03-30
10:40:35 EDT ---
freetype-2.4.6-5.fc16 has been submitted as an update for Fedora 16.
https://admin.fedoraproject.org/updates/freetype-2.4.6-5.fc16
--
Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.
8:50 p.m.
New subject: [Bug 806270] CVE-2012-{1126, 1127, 1128, 1130, 1131, 1132, 1133, 1134, 1135, 1136, 1137, 1138, 1139, 1140, 1141, 1142, 1143, 1144} freetype: multiple vulnerabilities [fedora-all]
Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug.
https://bugzilla.redhat.com/show_bug.cgi?id=806270
--- Comment #3 from Kevin Kofler <kevin(a)tigcc.ticalc.org> 2012-04-01 21:50:08 EDT
---
What about Fedora 15?
--
Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.
10:38 a.m.
New subject: [Bug 806270] CVE-2012-{1126, 1127, 1128, 1130, 1131, 1132, 1133, 1134, 1135, 1136, 1137, 1138, 1139, 1140, 1141, 1142, 1143, 1144} freetype: multiple vulnerabilities [fedora-all]
Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug.
https://bugzilla.redhat.com/show_bug.cgi?id=806270
--- Comment #4 from Marek Kašík <mkasik(a)redhat.com> 2012-04-03 11:38:28 EDT ---
I(In reply to comment #3)
What about Fedora 15?
I'm working on it (it needs more backports than F17 and F16).
--
Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.
7:14 a.m.
New subject: [Bug 806270] CVE-2012-{1126, 1127, 1128, 1130, 1131, 1132, 1133, 1134, 1135, 1136, 1137, 1138, 1139, 1140, 1141, 1142, 1143, 1144} freetype: multiple vulnerabilities [fedora-all]
Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug.
https://bugzilla.redhat.com/show_bug.cgi?id=806270
--- Comment #5 from Fedora Update System <updates(a)fedoraproject.org> 2012-04-04
08:14:57 EDT ---
freetype-2.4.4-8.fc15 has been submitted as an update for Fedora 15.
https://admin.fedoraproject.org/updates/freetype-2.4.4-8.fc15
--
Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.
7:17 a.m.
New subject: [Bug 806270] CVE-2012-{1126, 1127, 1128, 1130, 1131, 1132, 1133, 1134, 1135, 1136, 1137, 1138, 1139, 1140, 1141, 1142, 1143, 1144} freetype: multiple vulnerabilities [fedora-all]
Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug.
https://bugzilla.redhat.com/show_bug.cgi?id=806270
--- Comment #6 from Marek Kašík <mkasik(a)redhat.com> 2012-04-04 08:16:59 EDT ---
(In reply to comment #4)
I(In reply to comment #3)
> What about Fedora 15?
I'm working on it (it needs more backports than F17 and F16).
Actually, it was a problem in testing environment.
--
Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.
9:20 p.m.
New subject: [Bug 806270] CVE-2012-{1126, 1127, 1128, 1130, 1131, 1132, 1133, 1134, 1135, 1136, 1137, 1138, 1139, 1140, 1141, 1142, 1143, 1144} freetype: multiple vulnerabilities [fedora-all]
Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug.
https://bugzilla.redhat.com/show_bug.cgi?id=806270
--- Comment #7 from Fedora Update System <updates(a)fedoraproject.org> 2012-04-11
22:20:41 EDT ---
freetype-2.4.8-3.fc17 has been pushed to the Fedora 17 stable repository. If
problems still persist, please make note of it in this bug report.
--
Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.
2:27 p.m.
New subject: [Bug 806270] CVE-2012-{1126, 1127, 1128, 1130, 1131, 1132, 1133, 1134, 1135, 1136, 1137, 1138, 1139, 1140, 1141, 1142, 1143, 1144} freetype: multiple vulnerabilities [fedora-all]
Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug.
https://bugzilla.redhat.com/show_bug.cgi?id=806270
--- Comment #8 from Fedora Update System <updates(a)fedoraproject.org> 2012-04-18
15:27:17 EDT ---
freetype-2.4.6-5.fc16 has been pushed to the Fedora 16 stable repository. If
problems still persist, please make note of it in this bug report.
--
Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.
10:01 a.m.
New subject: [Bug 806270] CVE-2012-{1126, 1127, 1128, 1130, 1131, 1132, 1133, 1134, 1135, 1136, 1137, 1138, 1139, 1140, 1141, 1142, 1143, 1144} freetype: multiple vulnerabilities [fedora-all]
Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug.
https://bugzilla.redhat.com/show_bug.cgi?id=806270
--- Comment #9 from Fedora Update System <updates(a)fedoraproject.org> 2012-04-24
11:01:25 EDT ---
freetype-2.4.4-8.fc15 has been pushed to the Fedora 15 stable repository. If
problems still persist, please make note of it in this bug report.
--
Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.
10:04 a.m.
New subject: [Bug 806270] CVE-2012-{1126, 1127, 1128, 1130, 1131, 1132, 1133, 1134, 1135, 1136, 1137, 1138, 1139, 1140, 1141, 1142, 1143, 1144} freetype: multiple vulnerabilities [fedora-all]
Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug.
https://bugzilla.redhat.com/show_bug.cgi?id=806270
Marek Kašík <mkasik(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|MODIFIED |CLOSED
Resolution| |ERRATA
Last Closed| |2012-04-24 11:04:03
--
Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.
4378
days inactive
4410
days old
fonts-bugs@lists.fedoraproject.org
14 comments
1 participants
participants (1)
-
Red Hat Bugzilla