[SECURITY] [DLA 319-1] freetype security update

[news 28]

Package : freetype

Version : 2.4.2-2.1+squeeze6

CVE ID : CVE-2014-9745 CVE-2014-9746 CVE-2014-9747

Debian Bug : 798619 798620

 

Sergey Gorbaty reported issues related to the FreeType font engine.

FreeType improperly handled certain malformed font files, allowing

remote attackers to cause a Denial of Service when specially crafted

font files were used.

 

For Debian 6 “Squeezeâ€Â, these issues have been fixed in freetype version

2.4.2-2.1+squeeze6. We recommend you to upgrade your freetype packages.

 

Learn more about the Debian Long Term Support (LTS) Project and how to

apply these updates at: https://wiki.debian.org/LTS/