[Bug 1262373] New: freetype: Use of uninitialized memory

List overview All Threads
Download

newer

older

[Bug 1265854] Review Request:...

[Bug 1191079] CVE-2014-9657...

Red Hat Bugzilla

11 Sep 2015 11 Sep '15

2:50 p.m.

https://bugzilla.redhat.com/show_bug.cgi?id=1262373

Bug ID: 1262373 Summary: freetype: Use of uninitialized memory Product: Security Response Component: vulnerability Keywords: Security Severity: low Priority: low Assignee: security-response-team@redhat.com Reporter: amaris@redhat.com CC: behdad@fedoraproject.org, erik-fedora@vanpienbroek.nl, fedora-mingw@lists.fedoraproject.org, fonts-bugs@lists.fedoraproject.org, kevin@tigcc.ticalc.org, lfarkas@lfarkas.org, mkasik@redhat.com, rjones@redhat.com

Three use-of-uninitialized conditions were found in psobjs.c in ps_parser_load_field, in t42parse.c in 42_parse_font_matrix and in t1load.c in tt1_parse_font_matrix.

Upstream bug:

https://savannah.nongnu.org/bugs/?41309

Upstream patch:

http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=8b281f83e...

CVE request:

http://seclists.org/oss-sec/2015/q3/537

-- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=1vpsmfjkAX&a=cc_unsubscribe

Show replies by date

Red Hat Bugzilla

11 Sep 11 Sep

2:51 p.m.

New subject: [Bug 1262373] freetype: Use of uninitialized memory

https://bugzilla.redhat.com/show_bug.cgi?id=1262373

Adam Mariš amaris@redhat.com changed:

What |Removed |Added ---------------------------------------------------------------------------- Blocks| |1262375

-- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=vu2XJs9pZI&a=cc_unsubscribe

Red Hat Bugzilla

2:59 p.m.

New subject: [Bug 1262373] freetype: Use of uninitialized memory

https://bugzilla.redhat.com/show_bug.cgi?id=1262373

Adam Mariš amaris@redhat.com changed:

--- Comment #1 from Adam Mariš amaris@redhat.com ---

Created freetype tracking bugs for this issue:

Affects: fedora-all [bug 1262384]

Referenced Bugs:

https://bugzilla.redhat.com/show_bug.cgi?id=1262384 [Bug 1262384] freetype: Use of uninitialized memory [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1262385 [Bug 1262385] mingw-freetype: freetype: Use of uninitialized memory [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1262386 [Bug 1262386] mingw-freetype: freetype: Use of uninitialized memory [epel-7]

-- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=XInjf2DYK7&a=cc_unsubscribe

Red Hat Bugzilla

2:59 p.m.

New subject: [Bug 1262373] freetype: Use of uninitialized memory

https://bugzilla.redhat.com/show_bug.cgi?id=1262373

--- Comment #2 from Adam Mariš amaris@redhat.com ---

Created mingw-freetype tracking bugs for this issue:

Affects: fedora-all [bug 1262385] Affects: epel-7 [bug 1262386]

-- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=PPku62zExw&a=cc_unsubscribe

Red Hat Bugzilla

3:51 p.m.

New subject: [Bug 1262373] freetype: Use of uninitialized memory

https://bugzilla.redhat.com/show_bug.cgi?id=1262373

--- Comment #3 from Marek Kašík mkasik@redhat.com --- It seems to me that this is already fixed in all maintained versions of Fedora. Check it please.

-- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=d7vornuBl5&a=cc_unsubscribe

Red Hat Bugzilla

14 Sep 14 Sep

6:49 a.m.

New subject: [Bug 1262373] freetype: Use of uninitialized memory

https://bugzilla.redhat.com/show_bug.cgi?id=1262373

--- Comment #4 from Huzaifa S. Sidhpurwala huzaifas@redhat.com --- Upstream freetype git suggests that this issue was addressed in freetype-2.5.3.

Therefore this issue is already fixed in all the maintained versions of Fedora.

-- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=gzdTK2ZjLv&a=cc_unsubscribe

Red Hat Bugzilla

6:49 a.m.

New subject: [Bug 1262373] freetype: Use of uninitialized memory

https://bugzilla.redhat.com/show_bug.cgi?id=1262373 Bug 1262373 depends on bug 1262384, which changed state.

Bug 1262384 Summary: freetype: Use of uninitialized memory [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1262384

-- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=Hr9qOmKxay&a=cc_unsubscribe

Red Hat Bugzilla

6:50 a.m.

New subject: [Bug 1262373] freetype: Use of uninitialized memory

https://bugzilla.redhat.com/show_bug.cgi?id=1262373 Bug 1262373 depends on bug 1262385, which changed state.

Bug 1262385 Summary: mingw-freetype: freetype: Use of uninitialized memory [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1262385

-- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=UPnrCACUGx&a=cc_unsubscribe

Red Hat Bugzilla

6:50 a.m.

New subject: [Bug 1262373] freetype: Use of uninitialized memory

https://bugzilla.redhat.com/show_bug.cgi?id=1262373 Bug 1262373 depends on bug 1262386, which changed state.

Bug 1262386 Summary: mingw-freetype: freetype: Use of uninitialized memory [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1262386

-- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=hu1Q2Wxh0N&a=cc_unsubscribe

Red Hat Bugzilla

6:56 a.m.

New subject: [Bug 1262373] freetype: Use of uninitialized memory

https://bugzilla.redhat.com/show_bug.cgi?id=1262373

Huzaifa S. Sidhpurwala huzaifas@redhat.com changed:

-- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=h6A9RfeeVG&a=cc_unsubscribe

Red Hat Bugzilla

6:56 a.m.

New subject: [Bug 1262373] freetype: Use of uninitialized memory

https://bugzilla.redhat.com/show_bug.cgi?id=1262373

Huzaifa S. Sidhpurwala huzaifas@redhat.com changed:

-- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=z70o41Ulow&a=cc_unsubscribe

Red Hat Bugzilla

8:24 a.m.

New subject: [Bug 1262373] freetype: Use of uninitialized memory

https://bugzilla.redhat.com/show_bug.cgi?id=1262373

Huzaifa S. Sidhpurwala huzaifas@redhat.com changed:

-- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=64c4cEes9s&a=cc_unsubscribe

Red Hat Bugzilla

29 Sep 29 Sep

10:18 a.m.

New subject: [Bug 1262373] CVE-2014-9746 CVE-2014-9747 freetype: Use of uninitialized memory

https://bugzilla.redhat.com/show_bug.cgi?id=1262373

Adam Mariš amaris@redhat.com changed:

--- Comment #6 from Adam Mariš amaris@redhat.com --- CVE-2014-9746 is for accessing uninitialized memory issues CVE-2014-9747 is for the fix for CWE-372 ("Incomplete Internal State Distinction") issue in the sense that the possibility of immediates-only mode isn't checked (in t42parse.c)

-- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=o4OAm6pQc7&a=cc_unsubscribe

Red Hat Bugzilla

21 Oct 21 Oct

3:57 p.m.

New subject: [Bug 1262373] CVE-2014-9746 CVE-2014-9747 freetype: Use of uninitialized memory

https://bugzilla.redhat.com/show_bug.cgi?id=1262373

Adam Mariš amaris@redhat.com changed:

-- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=YMWf25n3SX&a=cc_unsubscribe

3248

Age (days ago)

3288

Last active (days ago)

mingw@lists.fedoraproject.org

13 comments

1 participants

tags (0)

participants (1)

Red Hat Bugzilla