[Bug 451212] New: CVE-2008-1806 CVE-2008-1807 CVE-2008-1808 Multiple freetype vulnerabilities [Fedora 8]

[Red Hat Bugzilla]

Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug report.

https://bugzilla.redhat.com/show_bug.cgi?id=451212

Summary: CVE-2008-1806 CVE-2008-1807 CVE-2008-1808 Multiple
                    freetype vulnerabilities [Fedora 8]
           Product: Fedora
           Version: 8
          Platform: All
               URL: http://fedoraproject.org/wiki/Security/TrackingBugs
        OS/Version: Linux
            Status: NEW
          Severity: low
          Priority: low
         Component: freetype
        AssignedTo: [e-mail]
        ReportedBy: [e-mail]
         QAContact: [e-mail]
                CC: [e-mail]

This is an automatically created tracking bug! It was created to ensure that one or more security vulnerabilities are fixed in all affected branches.

You should *not* refer to this bug publicly, as it is a private "Fedora Project Contributors" bug.

For comments that are specific to the vulnerability please use bugs filed against "Security Response" product referenced in "Blocks" field.

bug #450768: CVE-2008-1806 FreeType PFB integer overflow
    bug #450773: CVE-2008-1807 FreeType invalid free() flaw
    bug #450774: CVE-2008-1808 FreeType off-by-one flaws

When creating an update for the version this this bug is reported against please include the bug IDs of respective bugs filed against "Security Response" product as well as of this bug and let the update system close them. Please note that the update announcement will (and should) contain only references to "Security Response" bugs as long as the tracking bug is restricted to "Fedora Project Contributors".

For more information see: http://fedoraproject.org/wiki/Security/TrackingBugs

[Bug 451212] CVE-2008-1806 CVE-2008-1807 CVE-2008-1808 Multiple freetype vulnerabilities [Fedora 8]

[Red Hat Bugzilla]

Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug report.

Summary: CVE-2008-1806 CVE-2008-1807 CVE-2008-1808 Multiple freetype vulnerabilities [Fedora 8]

https://bugzilla.redhat.com/show_bug.cgi?id=451212

------- Additional Comments From [e-mail]  2008-06-13 09:14 EST -------
You can eventually use the following link to create the update request: 
https://admin.fedoraproject.org/updates/new/?request=Stable&type=securit...

[Bug 451212] CVE-2008-1806 CVE-2008-1807 CVE-2008-1808 Multiple freetype vulnerabilities [Fedora 8]

[Red Hat Bugzilla]

Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug report.

Summary: CVE-2008-1806 CVE-2008-1807 CVE-2008-1808 Multiple freetype vulnerabilities [Fedora 8]

https://bugzilla.redhat.com/show_bug.cgi?id=451212

[e-mail] changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
OtherBugsDependingO|                            |450768,450773,450774
              nThis|                            |

[e-mail] changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |MODIFIED

------- Additional Comments From [e-mail]  2008-06-17 00:36 EST -------
Built freetype-2.3.5-4.fc8

[Bug 451212] CVE-2008-1806 CVE-2008-1807 CVE-2008-1808 Multiple freetype vulnerabilities [Fedora 8]

[Red Hat Bugzilla]

Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug report.

Summary: CVE-2008-1806 CVE-2008-1807 CVE-2008-1808 Multiple freetype vulnerabilities [Fedora 8]

https://bugzilla.redhat.com/show_bug.cgi?id=451212

------- Additional Comments From [e-mail]  2008-06-17 05:43 EST -------
freetype-2.3.5-4.fc8 has been submitted as an update for Fedora 8

[Bug 451212] CVE-2008-1806 CVE-2008-1807 CVE-2008-1808 Multiple freetype vulnerabilities [Fedora 8]

[Red Hat Bugzilla]

Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug report.

Summary: CVE-2008-1806 CVE-2008-1807 CVE-2008-1808 Multiple freetype vulnerabilities [Fedora 8]

https://bugzilla.redhat.com/show_bug.cgi?id=451212

------- Additional Comments From [e-mail]  2008-06-17 23:15 EST -------
freetype-2.3.5-4.fc8 has been pushed to the Fedora 8 stable repository.  If problems still persist, please make note of it in this bug report.

[Bug 451212] CVE-2008-1806 CVE-2008-1807 CVE-2008-1808 Multiple freetype vulnerabilities [Fedora 8]

[Red Hat Bugzilla]

Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug report.

Summary: CVE-2008-1806 CVE-2008-1807 CVE-2008-1808 Multiple freetype vulnerabilities [Fedora 8]

https://bugzilla.redhat.com/show_bug.cgi?id=451212

[e-mail] changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|MODIFIED                    |CLOSED
         Resolution|                            |CURRENTRELEASE
   Fixed In Version|                            |2.3.5-4.fc8