[Bug 1752788] New: CVE-2015-9381 freetype: a heap-based buffer over-read in T1_Get_Private_Dict in type1/t1parse.c leading to information disclosure

List overview All Threads
Download

newer

older

[Bug 162370] Print the table!

[Bug 1964877] New:...

bugzilla＠redhat.com

17 Sep 2019 17 Sep '19

3:40 a.m.

https://bugzilla.redhat.com/show_bug.cgi?id=1752788

Bug ID: 1752788 Summary: CVE-2015-9381 freetype: a heap-based buffer over-read in T1_Get_Private_Dict in type1/t1parse.c leading to information disclosure Product: Security Response Hardware: All OS: Linux Status: NEW Component: vulnerability Keywords: Security Severity: medium Priority: medium Assignee: security-response-team@redhat.com Reporter: mrehak@redhat.com CC: ajax@redhat.com, caillon+fedoraproject@gmail.com, fonts-bugs@lists.fedoraproject.org, gnome-sig@lists.fedoraproject.org, john.j5live@gmail.com, kevin@tigcc.ticalc.org, mclasen@redhat.com, mkasik@redhat.com, rhughes@redhat.com, rstrode@redhat.com, sandmann@redhat.com Target Milestone: --- Classification: Other

FreeType before 2.6.1 has a heap-based buffer over-read in T1_Get_Private_Dict in type1/t1parse.c.

-- You are receiving this mail because: You are on the CC list for the bug.

Show replies by date

bugzilla＠redhat.com

17 Sep 17 Sep

3:41 a.m.

New subject: [Bug 1752788] CVE-2015-9381 freetype: a heap-based buffer over-read in T1_Get_Private_Dict in type1/t1parse.c leading to information disclosure

https://bugzilla.redhat.com/show_bug.cgi?id=1752788

--- Comment #1 from Marian Rehak mrehak@redhat.com --- Upstream patch:

http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/src/type1/t1p...

-- You are receiving this mail because: You are on the CC list for the bug.

bugzilla＠redhat.com

3:41 a.m.

New subject: [Bug 1752788] CVE-2015-9381 freetype: a heap-based buffer over-read in T1_Get_Private_Dict in type1/t1parse.c leading to information disclosure

https://bugzilla.redhat.com/show_bug.cgi?id=1752788

Marian Rehak mrehak@redhat.com changed:

What |Removed |Added ---------------------------------------------------------------------------- Blocks| |1752789

-- You are receiving this mail because: You are on the CC list for the bug.

bugzilla＠redhat.com

3 Oct 3 Oct

10:51 p.m.

New subject: [Bug 1752788] CVE-2015-9381 freetype: a heap-based buffer over-read in T1_Get_Private_Dict in type1/t1parse.c leading to information disclosure

https://bugzilla.redhat.com/show_bug.cgi?id=1752788

--- Comment #2 from Huzaifa S. Sidhpurwala huzaifas@redhat.com --- Upstream bug (along with reproducer) at: https://savannah.nongnu.org/bugs/?45955

-- You are receiving this mail because: You are on the CC list for the bug.

bugzilla＠redhat.com

10:55 p.m.

New subject: [Bug 1752788] CVE-2015-9381 freetype: a heap-based buffer over-read in T1_Get_Private_Dict in type1/t1parse.c leading to information disclosure

https://bugzilla.redhat.com/show_bug.cgi?id=1752788

Huzaifa S. Sidhpurwala huzaifas@redhat.com changed:

What |Removed |Added ---------------------------------------------------------------------------- Depends On| |1758402

-- You are receiving this mail because: You are on the CC list for the bug.

bugzilla＠redhat.com

17 Dec 17 Dec

5:05 a.m.

New subject: [Bug 1752788] CVE-2015-9381 freetype: a heap-based buffer over-read in T1_Get_Private_Dict in type1/t1parse.c leading to information disclosure

https://bugzilla.redhat.com/show_bug.cgi?id=1752788

--- Comment #5 from errata-xmlrpc errata-xmlrpc@redhat.com --- This issue has been addressed in the following products:

Red Hat Enterprise Linux 6

Via RHSA-2019:4254 https://access.redhat.com/errata/RHSA-2019:4254

-- You are receiving this mail because: You are on the CC list for the bug.

bugzilla＠redhat.com

5:05 a.m.

New subject: [Bug 1752788] CVE-2015-9381 freetype: a heap-based buffer over-read in T1_Get_Private_Dict in type1/t1parse.c leading to information disclosure

https://bugzilla.redhat.com/show_bug.cgi?id=1752788

errata-xmlrpc errata-xmlrpc@redhat.com changed:

-- You are receiving this mail because: You are on the CC list for the bug.

bugzilla＠redhat.com

8:09 a.m.

New subject: [Bug 1752788] CVE-2015-9381 freetype: a heap-based buffer over-read in T1_Get_Private_Dict in type1/t1parse.c leading to information disclosure

https://bugzilla.redhat.com/show_bug.cgi?id=1752788

Product Security DevOps Team prodsec-dev@redhat.com changed:

--- Comment #6 from Product Security DevOps Team prodsec-dev@redhat.com --- This bug is now closed. Further updates for individual products will be reflected on the CVE page(s):

https://access.redhat.com/security/cve/cve-2015-9381

-- You are receiving this mail because: You are on the CC list for the bug.

bugzilla＠redhat.com

3 Mar 3 Mar

7:48 a.m.

New subject: [Bug 1752788] CVE-2015-9381 freetype: a heap-based buffer over-read in T1_Get_Private_Dict in type1/t1parse.c leading to information disclosure

https://bugzilla.redhat.com/show_bug.cgi?id=1752788

--- Doc Text *updated* by Eric Christensen sparks@redhat.com --- A heap-based buffer overflow flaw was found in FreeType prior to version 2.6.1.

-- You are receiving this mail because: You are on the CC list for the bug.

bugzilla＠redhat.com

9:19 a.m.

New subject: [Bug 1752788] CVE-2015-9381 freetype: a heap-based buffer over-read in T1_Get_Private_Dict in type1/t1parse.c leading to crash

https://bugzilla.redhat.com/show_bug.cgi?id=1752788

Marian Rehak mrehak@redhat.com changed:

-- You are receiving this mail because: You are on the CC list for the bug.

bugzilla＠redhat.com

9:22 a.m.

New subject: [Bug 1752788] CVE-2015-9381 freetype: a heap-based buffer over-read in T1_Get_Private_Dict in type1/t1parse.c leading to crash

https://bugzilla.redhat.com/show_bug.cgi?id=1752788

Marian Rehak mrehak@redhat.com changed:

-- You are receiving this mail because: You are on the CC list for the bug.

bugzilla＠redhat.com

10 Mar 10 Mar

10:30 a.m.

New subject: [Bug 1752788] CVE-2015-9381 freetype: a heap-based buffer over-read in T1_Get_Private_Dict in type1/t1parse.c leading to crash

https://bugzilla.redhat.com/show_bug.cgi?id=1752788

Eric Christensen sparks@redhat.com changed:

--- Doc Text *updated* --- An out-of-bounds buffer overflow flaw was found in FreeType prior to version 2.6.1.

-- You are receiving this mail because: You are on the CC list for the bug.

bugzilla＠redhat.com

16 Mar 16 Mar

11:11 p.m.

New subject: [Bug 1752788] CVE-2015-9381 freetype: a heap-based buffer over-read in T1_Get_Private_Dict in type1/t1parse.c leading to crash

https://bugzilla.redhat.com/show_bug.cgi?id=1752788

Huzaifa S. Sidhpurwala huzaifas@redhat.com changed:

-- You are receiving this mail because: You are on the CC list for the bug.

bugzilla＠redhat.com

2 Jun 2 Jun

12:04 a.m.

New subject: [Bug 1752788] CVE-2015-9381 freetype: a heap-based buffer over-read in T1_Get_Private_Dict in type1/t1parse.c leading to crash

https://bugzilla.redhat.com/show_bug.cgi?id=1752788

Huzaifa S. Sidhpurwala huzaifas@redhat.com changed:

What |Removed |Added ---------------------------------------------------------------------------- Depends On| |1966861

-- You are receiving this mail because: You are on the CC list for the bug.

1195

Age (days ago)

1819

Last active (days ago)

fonts-bugs@lists.fedoraproject.org

13 comments

1 participants

tags (0)

participants (1)

bugzilla＠redhat.com