[Bug 1262377] New: freetype: Infinite loop in parse_encoding in t1load.c - fonts-bugs - Fedora Mailing-Lists

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

[Bug 1262377] New: freetype: Infinite loop in parse_encoding in t1load.c

[Bug 450774] CVE-2008-1808...

[Bug 613167] CVE-2010-2500...

Red Hat Bugzilla

Friday, 11 September 2015 Fri, 11 Sep '15

8:55 a.m.

https://bugzilla.redhat.com/show_bug.cgi?id=1262377 Bug ID: 1262377 Summary: freetype: Infinite loop in parse_encoding in t1load.c Product: Security Response Component: vulnerability Keywords: Security Severity: low Priority: low Assignee: security-response-team(a)redhat.com Reporter: amaris(a)redhat.com CC: behdad(a)fedoraproject.org, erik-fedora(a)vanpienbroek.nl, fedora-mingw(a)lists.fedoraproject.org, fonts-bugs(a)lists.fedoraproject.org, kevin(a)tigcc.ticalc.org, lfarkas(a)lfarkas.org, mkasik(a)redhat.com, rjones(a)redhat.com If the Postscript stream contains a broken number-with-base (e.g. "8#garbage") the cursor doesn't advance and parse_encoding enters an infinite loop. Upstream patch: http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=df14e6... CVE request: http://seclists.org/oss-sec/2015/q3/537 -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=iemI0CxmQI&a=cc_unsubscribe _______________________________________________ fonts-bugs mailing list fonts-bugs(a)lists.fedoraproject.org http://lists.fedoraproject.org/postorius/fonts-bugs@lists.fedoraproject.org

Reply

Show replies by date

Red Hat Bugzilla

Friday, 11 September Fri, 11 Sep

8:57 a.m.

New subject: [Bug 1262377] freetype: Infinite loop in parse_encoding in t1load.c

https://bugzilla.redhat.com/show_bug.cgi?id=1262377 Adam Mariš <amaris(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Blocks| |1262379 -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=mrfJ9xB1FV&a=cc_unsubscribe _______________________________________________ fonts-bugs mailing list fonts-bugs(a)lists.fedoraproject.org http://lists.fedoraproject.org/postorius/fonts-bugs@lists.fedoraproject.org

Reply

Red Hat Bugzilla

8:58 a.m.

New subject: [Bug 1262377] freetype: Infinite loop in parse_encoding in t1load.c

https://bugzilla.redhat.com/show_bug.cgi?id=1262377 Adam Mariš <amaris(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Depends On| |1262380 Depends On| |1262381 Depends On| |1262382 --- Comment #1 from Adam Mariš <amaris(a)redhat.com> --- Created freetype tracking bugs for this issue: Affects: fedora-all [bug 1262381] Referenced Bugs: https://bugzilla.redhat.com/show_bug.cgi?id=1262380 [Bug 1262380] mingw-freetype: freetype: Infinite loop in parse_encoding in t1load.c [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1262381 [Bug 1262381] freetype: Infinite loop in parse_encoding in t1load.c [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1262382 [Bug 1262382] mingw-freetype: freetype: Infinite loop in parse_encoding in t1load.c [epel-7] -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=oNVxiQPEl9&a=cc_unsubscribe _______________________________________________ fonts-bugs mailing list fonts-bugs(a)lists.fedoraproject.org http://lists.fedoraproject.org/postorius/fonts-bugs@lists.fedoraproject.org

Reply

Red Hat Bugzilla

8:58 a.m.

New subject: [Bug 1262377] freetype: Infinite loop in parse_encoding in t1load.c

https://bugzilla.redhat.com/show_bug.cgi?id=1262377 --- Comment #2 from Adam Mariš <amaris(a)redhat.com> --- Created mingw-freetype tracking bugs for this issue: Affects: fedora-all [bug 1262380] Affects: epel-7 [bug 1262382] -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=wpVSzxkpmD&a=cc_unsubscribe _______________________________________________ fonts-bugs mailing list fonts-bugs(a)lists.fedoraproject.org http://lists.fedoraproject.org/postorius/fonts-bugs@lists.fedoraproject.org

Reply

Red Hat Bugzilla

9:51 a.m.

New subject: [Bug 1262377] freetype: Infinite loop in parse_encoding in t1load.c

https://bugzilla.redhat.com/show_bug.cgi?id=1262377 --- Comment #3 from Marek Kašík <mkasik(a)redhat.com> --- It seems to me that this is already fixed in all maintained versions of Fedora. Check it please. -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=BYpHhCqeK6&a=cc_unsubscribe _______________________________________________ fonts-bugs mailing list fonts-bugs(a)lists.fedoraproject.org http://lists.fedoraproject.org/postorius/fonts-bugs@lists.fedoraproject.org

Reply

Red Hat Bugzilla

Monday, 14 September Mon, 14 Sep

2:22 a.m.

New subject: [Bug 1262377] freetype: Infinite loop in parse_encoding in t1load.c

https://bugzilla.redhat.com/show_bug.cgi?id=1262377 Bug 1262377 depends on bug 1262381, which changed state. Bug 1262381 Summary: freetype: Infinite loop in parse_encoding in t1load.c [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1262381 What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |CLOSED Resolution|--- |NOTABUG -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=h1zZHYOzak&a=cc_unsubscribe _______________________________________________ fonts-bugs mailing list fonts-bugs(a)lists.fedoraproject.org http://lists.fedoraproject.org/postorius/fonts-bugs@lists.fedoraproject.org

Reply

Red Hat Bugzilla

2:22 a.m.

New subject: [Bug 1262377] freetype: Infinite loop in parse_encoding in t1load.c

https://bugzilla.redhat.com/show_bug.cgi?id=1262377 Bug 1262377 depends on bug 1262380, which changed state. Bug 1262380 Summary: mingw-freetype: freetype: Infinite loop in parse_encoding in t1load.c [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1262380 What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |CLOSED Resolution|--- |NOTABUG -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=tyoafxiZRC&a=cc_unsubscribe _______________________________________________ fonts-bugs mailing list fonts-bugs(a)lists.fedoraproject.org http://lists.fedoraproject.org/postorius/fonts-bugs@lists.fedoraproject.org

Reply

Red Hat Bugzilla

2:23 a.m.

New subject: [Bug 1262377] freetype: Infinite loop in parse_encoding in t1load.c

https://bugzilla.redhat.com/show_bug.cgi?id=1262377 Bug 1262377 depends on bug 1262382, which changed state. Bug 1262382 Summary: mingw-freetype: freetype: Infinite loop in parse_encoding in t1load.c [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1262382 What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |CLOSED Resolution|--- |NOTABUG -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=0wDVnJXmNV&a=cc_unsubscribe _______________________________________________ fonts-bugs mailing list fonts-bugs(a)lists.fedoraproject.org http://lists.fedoraproject.org/postorius/fonts-bugs@lists.fedoraproject.org

Reply

Red Hat Bugzilla

2:23 a.m.

New subject: [Bug 1262377] freetype: Infinite loop in parse_encoding in t1load.c

https://bugzilla.redhat.com/show_bug.cgi?id=1262377 --- Comment #4 from Huzaifa S. Sidhpurwala <huzaifas(a)redhat.com> --- Upstream freetype git suggests that this issue was addressed in freetype-2.5.3. Therefore this issue is already fixed in all the maintained versions of Fedora. -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=bvIoOcCrpY&a=cc_unsubscribe _______________________________________________ fonts-bugs mailing list fonts-bugs(a)lists.fedoraproject.org http://lists.fedoraproject.org/postorius/fonts-bugs@lists.fedoraproject.org

Reply

Red Hat Bugzilla

2:24 a.m.

New subject: [Bug 1262377] freetype: Infinite loop in parse_encoding in t1load.c

https://bugzilla.redhat.com/show_bug.cgi?id=1262377 Huzaifa S. Sidhpurwala <huzaifas(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|impact=low,public=20140214, |impact=low,public=20140214, |reported=20150911,source=in |reported=20150911,source=in |ternet,rhel-5/freetype=affe |ternet,rhel-5/freetype=affe |cted,rhel-6/freetype=affect |cted,rhel-6/freetype=affect |ed,rhel-7/freetype=affected |ed,rhel-7/freetype=affected |,fedora-all/mingw-freetype= |,fedora-all/mingw-freetype= |affected,fedora-all/freetyp |notaffected,fedora-all/free |e=affected,epel-7/mingw-fre |type=notaffected,epel-7/min |etype=affected |gw-freetype=notaffected -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=JdIJQqqebs&a=cc_unsubscribe _______________________________________________ fonts-bugs mailing list fonts-bugs(a)lists.fedoraproject.org http://lists.fedoraproject.org/postorius/fonts-bugs@lists.fedoraproject.org

Reply

Red Hat Bugzilla

2:25 a.m.

New subject: [Bug 1262377] freetype: Infinite loop in parse_encoding in t1load.c

https://bugzilla.redhat.com/show_bug.cgi?id=1262377 Huzaifa S. Sidhpurwala <huzaifas(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|impact=low,public=20140214, |impact=low,public=20140214, |reported=20150911,source=in |reported=20150911,source=in |ternet,rhel-5/freetype=affe |ternet,rhel-5/freetype=wont |cted,rhel-6/freetype=affect |fix,rhel-6/freetype=wontfix |ed,rhel-7/freetype=affected |,rhel-7/freetype=wontfix,fe |,fedora-all/mingw-freetype= |dora-all/mingw-freetype=not |notaffected,fedora-all/free |affected,fedora-all/freetyp |type=notaffected,epel-7/min |e=notaffected,epel-7/mingw- |gw-freetype=notaffected |freetype=notaffected -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=799BKcHmoN&a=cc_unsubscribe _______________________________________________ fonts-bugs mailing list fonts-bugs(a)lists.fedoraproject.org http://lists.fedoraproject.org/postorius/fonts-bugs@lists.fedoraproject.org

Reply

Red Hat Bugzilla

2:25 a.m.

New subject: [Bug 1262377] freetype: Infinite loop in parse_encoding in t1load.c

https://bugzilla.redhat.com/show_bug.cgi?id=1262377 Huzaifa S. Sidhpurwala <huzaifas(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |CLOSED Resolution|--- |WONTFIX Last Closed| |2015-09-14 03:25:24 -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=qsEw1eMDOz&a=cc_unsubscribe _______________________________________________ fonts-bugs mailing list fonts-bugs(a)lists.fedoraproject.org http://lists.fedoraproject.org/postorius/fonts-bugs@lists.fedoraproject.org

Reply

Red Hat Bugzilla

Tuesday, 15 September Tue, 15 Sep

2:36 a.m.

New subject: [Bug 1262377] freetype: Infinite loop in parse_encoding in t1load.c

https://bugzilla.redhat.com/show_bug.cgi?id=1262377 Martin Prpic <mprpic(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Alias| |CVE-2014-9745 -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=Pez6sqYsCo&a=cc_unsubscribe _______________________________________________ fonts-bugs mailing list fonts-bugs(a)lists.fedoraproject.org http://lists.fedoraproject.org/postorius/fonts-bugs@lists.fedoraproject.org

Reply

Red Hat Bugzilla

2:36 a.m.

New subject: [Bug 1262377] CVE-2014-9745 freetype: Infinite loop in parse_encoding in t1load.c

https://bugzilla.redhat.com/show_bug.cgi?id=1262377 Martin Prpic <mprpic(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Summary|freetype: Infinite loop in |CVE-2014-9745 freetype: |parse_encoding in t1load.c |Infinite loop in | |parse_encoding in t1load.c -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=gjPpf52iHd&a=cc_unsubscribe _______________________________________________ fonts-bugs mailing list fonts-bugs(a)lists.fedoraproject.org http://lists.fedoraproject.org/postorius/fonts-bugs@lists.fedoraproject.org

Reply

Red Hat Bugzilla

Wednesday, 21 October Wed, 21 Oct

9:56 a.m.

New subject: [Bug 1262377] CVE-2014-9745 freetype: Infinite loop in parse_encoding in t1load.c

https://bugzilla.redhat.com/show_bug.cgi?id=1262377 Adam Mariš <amaris(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|impact=low,public=20140214, |impact=low,public=20140214, |reported=20150911,source=in |reported=20150911,source=in |ternet,rhel-5/freetype=wont |ternet,cvss2=2.1/AV:L/AC:L/ |fix,rhel-6/freetype=wontfix |Au:N/C:N/I:N/A:P,rhel-5/fre |,rhel-7/freetype=wontfix,fe |etype=wontfix,rhel-6/freety |dora-all/mingw-freetype=not |pe=wontfix,rhel-7/freetype= |affected,fedora-all/freetyp |wontfix,fedora-all/mingw-fr |e=notaffected,epel-7/mingw- |eetype=notaffected,fedora-a |freetype=notaffected |ll/freetype=notaffected,epe | |l-7/mingw-freetype=notaffec | |ted -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=hEMWOy5a6i&a=cc_unsubscribe

Reply

Red Hat Bugzilla

Friday, 4 March Fri, 4 Mar

5 a.m.

New subject: [Bug 1262377] CVE-2014-9745 freetype: Infinite loop in parse_encoding in t1load.c

https://bugzilla.redhat.com/show_bug.cgi?id=1262377 Ján Rusnačko <jrusnack(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|impact=low,public=20140214, |impact=low,public=20140214, |reported=20150911,source=in |reported=20150911,source=in |ternet,cvss2=2.1/AV:L/AC:L/ |ternet,cvss2=2.1/AV:L/AC:L/ |Au:N/C:N/I:N/A:P,rhel-5/fre |Au:N/C:N/I:N/A:P,rhel-5/fre |etype=wontfix,rhel-6/freety |etype=wontfix,rhel-6/freety |pe=wontfix,rhel-7/freetype= |pe=wontfix,rhel-7/freetype= |wontfix,fedora-all/mingw-fr |wontfix,fedora-all/mingw-fr |eetype=notaffected,fedora-a |eetype=notaffected,fedora-a |ll/freetype=notaffected,epe |ll/freetype=notaffected,epe |l-7/mingw-freetype=notaffec |l-7/mingw-freetype=notaffec |ted |ted,cwe=CWE-835[auto] -- You are receiving this mail because: You are on the CC list for the bug.

Reply

2983

days inactive

3158

days old

fonts-bugs@lists.fedoraproject.org

Manage subscription

15 comments

1 participants

tags (0)

participants (1)

Red Hat Bugzilla