ID de Prueba:	1.3.6.1.4.1.25623.1.0.122337
Categoría:	Oracle Linux Local Security Checks
Título:	Oracle: Security Advisory (ELSA-2010-0578)
Resumen:	The remote host is missing an update for the 'freetype' package(s) announced via the ELSA-2010-0578 advisory.
Descripción:	Summary: The remote host is missing an update for the 'freetype' package(s) announced via the ELSA-2010-0578 advisory. Vulnerability Insight: [2.2.1-25] - Add freetype-2.2.1-axis-name-overflow.patch (Avoid overflow when dealing with names of axes) - Resolves: #614012 [2.2.1-24] - Modify freetype-2.2.1-CVE-2010-2519.patch (additional fix) (If the type of the POST fragment is 0, the segment is completely ignored) - Resolves: #614012 [2.2.1-23] - Add freetype-2.2.1-CVE-2010-2527.patch (Use precision for '%s' where appropriate to avoid buffer overflows) - Resolves: #614012 [2.2.1-22] - Add freetype-2.2.1-CVE-2010-2498.patch (Assure that 'end_point' is not larger than 'glyph->num_points') - Add freetype-2.2.1-CVE-2010-2499.patch (Check the buffer size during gathering PFB fragments) - Add freetype-2.2.1-CVE-2010-2500.patch (Use smaller threshold values for 'width' and 'height') - Add freetype-2.2.1-CVE-2010-2519.patch (Check 'rlen' the length of fragment declared in the POST fragment header) - Resolves: #614012 Affected Software/OS: 'freetype' package(s) on Oracle Linux 4, Oracle Linux 5. Solution: Please install the updated package(s). CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2010-2498 1024266 http://securitytracker.com/id?1024266 48951 http://secunia.com/advisories/48951 APPLE-SA-2010-11-10-1 http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html DSA-2070 http://www.debian.org/security/2010/dsa-2070 MDVSA-2010:137 http://www.mandriva.com/security/advisories?name=MDVSA-2010:137 RHSA-2010:0578 http://www.redhat.com/support/errata/RHSA-2010-0578.html USN-963-1 http://www.ubuntu.com/usn/USN-963-1 [freetype] 20100712 FreeType 2.4.0 has been released http://lists.nongnu.org/archive/html/freetype/2010-07/msg00001.html [oss-security] 20100713 Multiple bugs in freetype http://marc.info/?l=oss-security&m=127905701201340&w=2 [oss-security] 20100714 Re: Multiple bugs in freetype http://marc.info/?l=oss-security&m=127909326909362&w=2 http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=8d22746c9e5af80ff4304aef440986403a5072e2 http://support.apple.com/kb/HT4435 https://bugzilla.redhat.com/show_bug.cgi?id=613160 https://savannah.nongnu.org/bugs/?30106 Common Vulnerability Exposure (CVE) ID: CVE-2010-2499 http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=c69891a1345640096fbf396e8dd567fe879ce233 http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=f29f741efbba0a5ce2f16464f648fb8d026ed4c8 https://bugzilla.redhat.com/show_bug.cgi?id=613162 https://savannah.nongnu.org/bugs/?30248 https://savannah.nongnu.org/bugs/?30249 Common Vulnerability Exposure (CVE) ID: CVE-2010-2500 RHSA-2010:0577 http://www.redhat.com/support/errata/RHSA-2010-0577.html http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=6305b869d86ff415a33576df6d43729673c66eee https://bugzilla.redhat.com/show_bug.cgi?id=613167 https://savannah.nongnu.org/bugs/?30263 Common Vulnerability Exposure (CVE) ID: CVE-2010-2519 http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=5ef20c8c1d4de12a84b50ba497c2a358c90ec44b http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=b2ea64bcc6c385a8e8318f9c759450a07df58b6d https://bugzilla.redhat.com/show_bug.cgi?id=613194 https://savannah.nongnu.org/bugs/?30306 Common Vulnerability Exposure (CVE) ID: CVE-2010-2527 http://marc.info/?l=oss-security&m=127912955808467&w=2 http://git.savannah.gnu.org/cgit/freetype/freetype2-demos.git/commit/?id=b995299b73ba4cd259f221f500d4e63095508bec http://savannah.nongnu.org/bugs/?30054 https://bugzilla.redhat.com/show_bug.cgi?id=614557 Common Vulnerability Exposure (CVE) ID: CVE-2010-2541 40982 http://secunia.com/advisories/40982 ADV-2010-2106 http://www.vupen.com/english/advisories/2010/2106 USN-972-1 http://www.ubuntu.com/usn/USN-972-1 http://freetype.sourceforge.net/index2.html#release-freetype-2.4.2 http://sourceforge.net/projects/freetype/files/freetype2/2.4.2/NEWS/view https://bugs.launchpad.net/ubuntu/maverick/+source/freetype/+bug/617019 https://bugzilla.redhat.com/show_bug.cgi?id=617342
Copyright	Copyright (C) 2015 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.