RHSA-2015:0696High

Red Hat Security Advisory: freetype security update

Published
March 17, 2015
Last Modified
November 5, 2026

🔗 CVE IDs covered (13)

CVE-2014-9667 →CVE-2014-9670 →CVE-2014-9671 →CVE-2014-9674 →CVE-2014-9660 →CVE-2014-9663 →CVE-2014-9669 →CVE-2014-9673 →CVE-2014-9675 →CVE-2014-9657 →CVE-2014-9658 →CVE-2014-9661 →CVE-2014-9664 →

📋 Description

CVE-2014-9657 — freetype: off-by-one buffer over-read in tt_face_load_hdmx() CVE-2014-9658 — freetype: buffer over-read and integer underflow in tt_face_load_kern() CVE-2014-9660 — freetype: missing ENDCHAR NULL pointer dereference in the _bdf_parse_glyphs() CVE-2014-9661 — freetype: out of bounds read in Type42 font parser CVE-2014-9663 — freetype: out-of-bounds read in tt_cmap4_validate() CVE-2014-9664 — freetype: off-by-one buffer over-read in parse_charstrings() / t42_parse_charstrings() CVE-2014-9667 — freetype: integer overflow in tt_face_load_font_dir() leading to out-of-bounds read CVE-2014-9669 — freetype: multiple integer overflows leading to buffer over-reads in cmap handling CVE-2014-9670 — freetype: integer overflow in pcf_get_encodings() leading to NULL pointer dereference CVE-2014-9671 — freetype: integer overflow in pcf_get_properties() leading to NULL pointer dereference CVE-2014-9673 — freetype: integer signedness error in Mac_Read_POST_Resource() leading to heap-based buffer overflow CVE-2014-9674 — freetype: multiple integer overflows Mac_Read_POST_Resource() leading to heap-based buffer overflows CVE-2014-9675 — freetype: information leak in _bdf_add_property()

🎯 Affected products135

  • Red Hat Enterprise Linux Client (v. 7)
  • Red Hat Enterprise Linux Client Optional (v. 7)
  • Red Hat Enterprise Linux ComputeNode (v. 7)
  • Red Hat Enterprise Linux ComputeNode Optional (v. 7)
  • Red Hat Enterprise Linux Desktop (v. 6)
  • Red Hat Enterprise Linux Desktop Optional (v. 6)
  • Red Hat Enterprise Linux HPC Node (v. 6)
  • Red Hat Enterprise Linux HPC Node Optional (v. 6)
  • Red Hat Enterprise Linux Server (v. 6)
  • Red Hat Enterprise Linux Server (v. 7)
  • Red Hat Enterprise Linux Server Optional (v. 6)
  • Red Hat Enterprise Linux Server Optional (v. 7)
  • Red Hat Enterprise Linux Workstation (v. 6)
  • Red Hat Enterprise Linux Workstation (v. 7)
  • Red Hat Enterprise Linux Workstation Optional (v. 6)
  • Red Hat Enterprise Linux Workstation Optional (v. 7)
  • freetype-0:2.3.11-15.el6_6.1.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)
  • freetype-0:2.3.11-15.el6_6.1.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)
  • freetype-0:2.3.11-15.el6_6.1.i686 as a component of Red Hat Enterprise Linux Server (v. 6)
  • freetype-0:2.3.11-15.el6_6.1.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)
  • freetype-0:2.3.11-15.el6_6.1.ppc as a component of Red Hat Enterprise Linux Server (v. 6)
  • freetype-0:2.3.11-15.el6_6.1.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)
  • freetype-0:2.3.11-15.el6_6.1.s390 as a component of Red Hat Enterprise Linux Server (v. 6)
  • freetype-0:2.3.11-15.el6_6.1.s390x as a component of Red Hat Enterprise Linux Server (v. 6)
  • freetype-0:2.3.11-15.el6_6.1.src as a component of Red Hat Enterprise Linux Desktop (v. 6)
  • freetype-0:2.3.11-15.el6_6.1.src as a component of Red Hat Enterprise Linux HPC Node (v. 6)
  • freetype-0:2.3.11-15.el6_6.1.src as a component of Red Hat Enterprise Linux Server (v. 6)
  • freetype-0:2.3.11-15.el6_6.1.src as a component of Red Hat Enterprise Linux Workstation (v. 6)
  • freetype-0:2.3.11-15.el6_6.1.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)
  • freetype-0:2.3.11-15.el6_6.1.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)
  • +105 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

🔗 References (16)