[Bug 890088] CVE-2012-5669 freetype: heap buffer over-read in BDF parsing _bdf_parse_glyphs() (#37906)

[bugzilla]

https://bugzilla.redhat.com/show_bug.cgi?id=890088

Ján Rusnačko  changed:

   What|Removed |Added

 Whiteboard|impact=important,public=201 |impact=important,public=201
   |21215,reported=20121224,sou |21215,reported=20121224,sou
   |rce=internet,cvss2=6.8/AV:N |rce=internet,cvss2=6.8/AV:N
   |/AC:M/Au:N/C:P/I:P/A:P,rhel |/AC:M/Au:N/C:P/I:P/A:P,rhel
   |-5/freetype=affected,rhel-6 |-5/freetype=affected,rhel-6
   |/freetype=notaffected,fedor |/freetype=affected,fedora-a
   |a-all/freetype=affected,fed |ll/freetype=affected,fedora
   |ora-all/mingw-freetype=affe |-all/mingw-freetype=affecte
   |cted|d



-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug 
https://bugzilla.redhat.com/token.cgi?t=YTnyuzZ7gb=cc_unsubscribe
___
mingw mailing list
mingw@lists.fedoraproject.org
http://lists.fedoraproject.org/admin/lists/mingw@lists.fedoraproject.org

[Bug 890088] CVE-2012-5669 freetype: heap buffer over-read in BDF parsing _bdf_parse_glyphs() (#37906)

[bugzilla]

https://bugzilla.redhat.com/show_bug.cgi?id=890088

Vincent Danen  changed:

   What|Removed |Added

 Whiteboard|impact=important,public=201 |impact=important,public=201
   |21215,reported=20121224,sou |21215,reported=20121224,sou
   |rce=internet,cvss2=6.8/AV:N |rce=internet,cvss2=6.8/AV:N
   |/AC:M/Au:N/C:P/I:P/A:P,rhel |/AC:M/Au:N/C:P/I:P/A:P,rhel
   |-5/freetype=affected,rhel-6 |-5/freetype=affected,rhel-6
   |/freetype=affected,fedora-a |/freetype=notaffected,fedor
   |ll/freetype=affected,fedora |a-all/freetype=affected,fed
   |-all/mingw-freetype=affecte |ora-all/mingw-freetype=affe
   |d   |cted



-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug 
https://bugzilla.redhat.com/token.cgi?t=G7MWVLA2WM=cc_unsubscribe
___
mingw mailing list
mingw@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/mingw

[Bug 890088] CVE-2012-5669 freetype: heap buffer over-read in BDF parsing _bdf_parse_glyphs() (#37906)

[bugzilla]

https://bugzilla.redhat.com/show_bug.cgi?id=890088

Ján Rusnačko jrusn...@redhat.com changed:

   What|Removed |Added

   Severity|low |high



-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug 
https://bugzilla.redhat.com/token.cgi?t=zdIz2vfXf3a=cc_unsubscribe
___
mingw mailing list
mingw@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/mingw

[Bug 890088] CVE-2012-5669 freetype: heap buffer over-read in BDF parsing _bdf_parse_glyphs() (#37906)

[bugzilla]

https://bugzilla.redhat.com/show_bug.cgi?id=890088

Ján Rusnačko jrusn...@redhat.com changed:

   What|Removed |Added

   Priority|low |high



-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug 
https://bugzilla.redhat.com/token.cgi?t=p1fxmqQq6Ya=cc_unsubscribe
___
mingw mailing list
mingw@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/mingw

[Bug 890088] CVE-2012-5669 freetype: heap buffer over-read in BDF parsing _bdf_parse_glyphs() (#37906)

[bugzilla]

https://bugzilla.redhat.com/show_bug.cgi?id=890088
Bug 890088 depends on bug 903555, which changed state.

Bug 903555 Summary: CVE-2012-5669 freetype: heap buffer over-read in BDF 
parsing _bdf_parse_glyphs() (#37906) [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=903555

   What|Removed |Added

 Status|NEW |CLOSED
 Resolution|--- |WONTFIX



-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug 
https://bugzilla.redhat.com/token.cgi?t=BuUxQwnzBia=cc_unsubscribe
___
mingw mailing list
mingw@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/mingw

[Bug 890088] CVE-2012-5669 freetype: heap buffer over-read in BDF parsing _bdf_parse_glyphs() (#37906)

[bugzilla]

Product: Security Response
https://bugzilla.redhat.com/show_bug.cgi?id=890088

Bug 890088 depends on bug 903554, which changed state.

Bug 903554 Summary: CVE-2012-5669 freetype: heap buffer over-read in BDF 
parsing _bdf_parse_glyphs() (#37906) [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=903554

   What|Removed |Added

 Status|MODIFIED|CLOSED
 Resolution|--- |ERRATA

-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug 
https://bugzilla.redhat.com/token.cgi?t=Rwd8a2bs96a=cc_unsubscribe
___
mingw mailing list
mingw@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/mingw

[Bug 890088] CVE-2012-5669 freetype: heap buffer over-read in BDF parsing _bdf_parse_glyphs() (#37906)

[bugzilla]

Product: Security Response
https://bugzilla.redhat.com/show_bug.cgi?id=890088

Jan Lieskovsky jlies...@redhat.com changed:

   What|Removed |Added

  Comment #3 is|1   |0
private||

-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug 
https://bugzilla.redhat.com/token.cgi?t=EYRrncNaCpa=cc_unsubscribe
___
mingw mailing list
mingw@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/mingw

[Bug 890088] CVE-2012-5669 freetype: heap buffer over-read in BDF parsing _bdf_parse_glyphs() (#37906)

[bugzilla]

Product: Security Response
https://bugzilla.redhat.com/show_bug.cgi?id=890088

--- Comment #18 from Fedora Update System upda...@fedoraproject.org ---
freetype-2.4.10-3.fc18 has been pushed to the Fedora 18 stable repository.  If
problems still persist, please make note of it in this bug report.

-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug 
https://bugzilla.redhat.com/token.cgi?t=5nIaxjAQM8a=cc_unsubscribe
___
mingw mailing list
mingw@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/mingw

[Bug 890088] CVE-2012-5669 freetype: heap buffer over-read in BDF parsing _bdf_parse_glyphs() (#37906)

[bugzilla]

Product: Security Response
https://bugzilla.redhat.com/show_bug.cgi?id=890088

--- Comment #17 from errata-xmlrpc errata-xml...@redhat.com ---
This issue has been addressed in following products:

  Red Hat Enterprise Linux 5
  Red Hat Enterprise Linux 6

Via RHSA-2013:0216 https://rhn.redhat.com/errata/RHSA-2013-0216.html

-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug 
https://bugzilla.redhat.com/token.cgi?t=9zUa1wvo2Na=cc_unsubscribe
___
mingw mailing list
mingw@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/mingw

[Bug 890088] CVE-2012-5669 freetype: heap buffer over-read in BDF parsing _bdf_parse_glyphs() (#37906)

[bugzilla]

Product: Security Response
https://bugzilla.redhat.com/show_bug.cgi?id=890088

Huzaifa S. Sidhpurwala huzai...@redhat.com changed:

   What|Removed |Added

 Depends On||903539
 Depends On||903541
 Depends On||903542
 Depends On||903543

-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug 
https://bugzilla.redhat.com/token.cgi?t=TJljdT94Yna=cc_unsubscribe
___
mingw mailing list
mingw@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/mingw

[Bug 890088] CVE-2012-5669 freetype: heap buffer over-read in BDF parsing _bdf_parse_glyphs() (#37906)

[bugzilla]

Product: Security Response
https://bugzilla.redhat.com/show_bug.cgi?id=890088

Huzaifa S. Sidhpurwala huzai...@redhat.com changed:

   What|Removed |Added

 Whiteboard|impact=important,public=201 |impact=important,public=201
   |21215,reported=20121225,sou |21215,reported=20121225,sou
   |rce=internet,cvss2=6.8/AV:N |rce=internet,cvss2=6.8/AV:N
   |/AC:M/Au:N/C:P/I:P/A:P,rhel |/AC:M/Au:N/C:P/I:P/A:P,rhel
   |-5/freetype=affected,rhel-6 |-5/freetype=affected,rhel-6
   |/freetype=affected,fedora-a |/freetype=affected,fedora-a
   |ll/freetype=notaffected,fed |ll/freetype=affected,fedora
   |ora-all/mingw32-freetype=no |-all/mingw-freetype=affecte
   |taffected   |d

--- Comment #12 from Huzaifa S. Sidhpurwala huzai...@redhat.com ---
This issue affects the version of freetype as shipped with Fedora-17 and
Fedora-18.

This issue affects the version of mingw-freetype as shipped with Fedora-17 and
Fedora-18.

-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug 
https://bugzilla.redhat.com/token.cgi?t=tG64IkIblna=cc_unsubscribe
___
mingw mailing list
mingw@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/mingw

[Bug 890088] CVE-2012-5669 freetype: heap buffer over-read in BDF parsing _bdf_parse_glyphs() (#37906)

[bugzilla]

Product: Security Response
https://bugzilla.redhat.com/show_bug.cgi?id=890088

Huzaifa S. Sidhpurwala huzai...@redhat.com changed:

   What|Removed |Added

 Depends On||903554
 Depends On||903555

--- Comment #14 from Huzaifa S. Sidhpurwala huzai...@redhat.com ---
Created freetype tracking bugs for this issue

Affects: fedora-all [bug 903554]

-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug 
https://bugzilla.redhat.com/token.cgi?t=RaHbwokqPha=cc_unsubscribe
___
mingw mailing list
mingw@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/mingw

[Bug 890088] CVE-2012-5669 freetype: heap buffer over-read in BDF parsing _bdf_parse_glyphs() (#37906)

[bugzilla]

Product: Security Response
https://bugzilla.redhat.com/show_bug.cgi?id=890088

--- Comment #15 from Huzaifa S. Sidhpurwala huzai...@redhat.com ---
Created mingw-freetype tracking bugs for this issue

Affects: fedora-all [bug 903555]

-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug 
https://bugzilla.redhat.com/token.cgi?t=FcEmgDNeAZa=cc_unsubscribe
___
mingw mailing list
mingw@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/mingw

[Bug 890088] CVE-2012-5669 freetype: heap buffer over-read in BDF parsing _bdf_parse_glyphs() (#37906)

[bugzilla]

Product: Security Response
https://bugzilla.redhat.com/show_bug.cgi?id=890088

Huzaifa S. Sidhpurwala huzai...@redhat.com changed:

   What|Removed |Added

 Whiteboard|impact=important,public=201 |impact=important,public=201
   |21215,reported=20121225,sou |21215,reported=20121224,sou
   |rce=internet,cvss2=6.8/AV:N |rce=internet,cvss2=6.8/AV:N
   |/AC:M/Au:N/C:P/I:P/A:P,rhel |/AC:M/Au:N/C:P/I:P/A:P,rhel
   |-5/freetype=affected,rhel-6 |-5/freetype=affected,rhel-6
   |/freetype=affected,fedora-a |/freetype=affected,fedora-a
   |ll/freetype=affected,fedora |ll/freetype=affected,fedora
   |-all/mingw-freetype=affecte |-all/mingw-freetype=affecte
   |d   |d

-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug 
https://bugzilla.redhat.com/token.cgi?t=GrTq7xe9Wza=cc_unsubscribe
___
mingw mailing list
mingw@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/mingw

[Bug 890088] CVE-2012-5669 freetype: heap buffer over-read in BDF parsing _bdf_parse_glyphs() (#37906)

[bugzilla]

Product: Security Response
https://bugzilla.redhat.com/show_bug.cgi?id=890088

--- Comment #9 from Marek Kašík mka...@redhat.com ---
Created attachment 678709
  -- https://bugzilla.redhat.com/attachment.cgi?id=678709action=edit
CVE-2012-5669 patch for Red Hat Enterprise Linux 6

-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug 
https://bugzilla.redhat.com/token.cgi?t=arbZH04XHqa=cc_unsubscribe
___
mingw mailing list
mingw@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/mingw

[Bug 890088] CVE-2012-5669 freetype: heap buffer over-read in BDF parsing _bdf_parse_glyphs() (#37906)

[bugzilla]

Product: Security Response
https://bugzilla.redhat.com/show_bug.cgi?id=890088

Huzaifa S. Sidhpurwala huzai...@redhat.com changed:

   What|Removed |Added

 Whiteboard|impact=low,public=20121215, |impact=low,public=20121215,
   |reported=20121225,source=in |reported=20121225,source=in
   |ternet,cvss2=4.3/AV:N/AC:M/ |ternet,cvss2=4.3/AV:N/AC:M/
   |Au:N/C:N/I:N/A:P,rhel-5/fre |Au:N/C:N/I:N/A:P,rhel-5/fre
   |etype=affected,rhel-6/freet |etype=notaffected,rhel-6/fr
   |ype=affected,fedora-all/fre |eetype=notaffected,fedora-a
   |etype=affected,fedora-all/m |ll/freetype=notaffected,fed
   |ingw32-freetype=affected|ora-all/mingw32-freetype=no
   ||taffected

-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug 
https://bugzilla.redhat.com/token.cgi?t=2KXLu0yqifa=cc_unsubscribe
___
mingw mailing list
mingw@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/mingw

[Bug 890088] CVE-2012-5669 freetype: heap buffer over-read in BDF parsing _bdf_parse_glyphs() (#37906)

[bugzilla]

Product: Security Response
https://bugzilla.redhat.com/show_bug.cgi?id=890088

Huzaifa S. Sidhpurwala huzai...@redhat.com changed:

   What|Removed |Added

 CC||beh...@fedoraproject.org,
   ||erik-fed...@vanpienbroek.nl
   ||,
   ||fedora-mingw@lists.fedorapr
   ||oject.org,
   ||fonts-bugs@lists.fedoraproj
   ||ect.org,
   ||ke...@tigcc.ticalc.org,
   ||lfar...@lfarkas.org,
   ||mka...@redhat.com,
   ||rjo...@redhat.com

-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug 
https://bugzilla.redhat.com/token.cgi?t=QqkU3h2ZwEa=cc_unsubscribe
___
mingw mailing list
mingw@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/mingw