RHSA-2019:4254MediumCVSS 6.5

Red Hat Security Advisory: freetype security update

Published
December 17, 2019
Last Modified
November 5, 2026

🔗 CVE IDs covered (2)

CVE-2015-9381 →CVE-2015-9382 →

📋 Description

CVE-2015-9381 — freetype: a heap-based buffer over-read in T1_Get_Private_Dict in type1/t1parse.c leading to crash CVE-2015-9382 — freetype: mishandling ps_parser_skip_PS_token in an FT_New_Memory_Face operation in skip_comment, psaux/psobjs.c, leads to a buffer over-read

🎯 Affected products67

  • Red Hat Enterprise Linux Desktop (v. 6)
  • Red Hat Enterprise Linux Desktop Optional (v. 6)
  • Red Hat Enterprise Linux HPC Node (v. 6)
  • Red Hat Enterprise Linux HPC Node Optional (v. 6)
  • Red Hat Enterprise Linux Server (v. 6)
  • Red Hat Enterprise Linux Server Optional (v. 6)
  • Red Hat Enterprise Linux Workstation (v. 6)
  • Red Hat Enterprise Linux Workstation Optional (v. 6)
  • freetype-0:2.3.11-19.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)
  • freetype-0:2.3.11-19.el6_10.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)
  • freetype-0:2.3.11-19.el6_10.i686 as a component of Red Hat Enterprise Linux Server (v. 6)
  • freetype-0:2.3.11-19.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)
  • freetype-0:2.3.11-19.el6_10.ppc as a component of Red Hat Enterprise Linux Server (v. 6)
  • freetype-0:2.3.11-19.el6_10.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)
  • freetype-0:2.3.11-19.el6_10.s390 as a component of Red Hat Enterprise Linux Server (v. 6)
  • freetype-0:2.3.11-19.el6_10.s390x as a component of Red Hat Enterprise Linux Server (v. 6)
  • freetype-0:2.3.11-19.el6_10.src as a component of Red Hat Enterprise Linux Desktop (v. 6)
  • freetype-0:2.3.11-19.el6_10.src as a component of Red Hat Enterprise Linux HPC Node (v. 6)
  • freetype-0:2.3.11-19.el6_10.src as a component of Red Hat Enterprise Linux Server (v. 6)
  • freetype-0:2.3.11-19.el6_10.src as a component of Red Hat Enterprise Linux Workstation (v. 6)
  • freetype-0:2.3.11-19.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)
  • freetype-0:2.3.11-19.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)
  • freetype-0:2.3.11-19.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)
  • freetype-0:2.3.11-19.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)
  • freetype-debuginfo-0:2.3.11-19.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)
  • freetype-debuginfo-0:2.3.11-19.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)
  • freetype-debuginfo-0:2.3.11-19.el6_10.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)
  • freetype-debuginfo-0:2.3.11-19.el6_10.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)
  • freetype-debuginfo-0:2.3.11-19.el6_10.i686 as a component of Red Hat Enterprise Linux Server (v. 6)
  • freetype-debuginfo-0:2.3.11-19.el6_10.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)
  • +37 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The X server must be restarted (log out, then log back in) for this update to take effect.

🔗 References (5)