Security update for freetype2 SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2016:1149-1 Final 1 1 2016-04-25T15:38:39Z current 2016-04-25T15:38:39Z 2016-04-25T15:38:39Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for freetype2 This update of the freetype2 library fixes two security issues: - An infinite loop in parse_encoding in t1load.c (CVE-2014-9745, bsc#945849) - Use of uninitialized memory in ps_parser_load_field, t42_parse_font_matrix and t1_parse_font_matrix (CVE-2014-9747, bsc#947966) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). sdksp4-freetype2-12528,slessp4-freetype2-12528 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2016/suse-su-20161149-1/ Link for SUSE-SU-2016:1149-1 https://lists.suse.com/pipermail/sle-security-updates/2016-April/002028.html E-Mail link for SUSE-SU-2016:1149-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/945849 SUSE Bug 945849 https://bugzilla.suse.com/947966 SUSE Bug 947966 https://www.suse.com/security/cve/CVE-2014-9745/ SUSE CVE CVE-2014-9745 page https://www.suse.com/security/cve/CVE-2014-9747/ SUSE CVE CVE-2014-9747 page SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server for SAP Applications 11 SP4 SUSE Linux Enterprise Software Development Kit 11 SP4 freetype2-devel-2.3.7-25.41.4 freetype2-devel-32bit-2.3.7-25.41.4 freetype2-2.3.7-25.41.4 freetype2-32bit-2.3.7-25.41.4 freetype2-x86-2.3.7-25.41.4 ft2demos-2.3.7-25.41.4 freetype2-2.3.7-25.41.4 as a component of SUSE Linux Enterprise Server 11 SP4 freetype2-32bit-2.3.7-25.41.4 as a component of SUSE Linux Enterprise Server 11 SP4 freetype2-x86-2.3.7-25.41.4 as a component of SUSE Linux Enterprise Server 11 SP4 ft2demos-2.3.7-25.41.4 as a component of SUSE Linux Enterprise Server 11 SP4 freetype2-2.3.7-25.41.4 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 freetype2-32bit-2.3.7-25.41.4 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 freetype2-x86-2.3.7-25.41.4 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 ft2demos-2.3.7-25.41.4 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 freetype2-devel-2.3.7-25.41.4 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 freetype2-devel-32bit-2.3.7-25.41.4 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 The parse_encoding function in type1/t1load.c in FreeType before 2.5.3 allows remote attackers to cause a denial of service (infinite loop) via a "broken number-with-base" in a Postscript stream, as demonstrated by 8#garbage. CVE-2014-9745 SUSE Linux Enterprise Server 11 SP4:freetype2-2.3.7-25.41.4 SUSE Linux Enterprise Server 11 SP4:freetype2-32bit-2.3.7-25.41.4 SUSE Linux Enterprise Server 11 SP4:freetype2-x86-2.3.7-25.41.4 SUSE Linux Enterprise Server 11 SP4:ft2demos-2.3.7-25.41.4 SUSE Linux Enterprise Server for SAP Applications 11 SP4:freetype2-2.3.7-25.41.4 SUSE Linux Enterprise Server for SAP Applications 11 SP4:freetype2-32bit-2.3.7-25.41.4 SUSE Linux Enterprise Server for SAP Applications 11 SP4:freetype2-x86-2.3.7-25.41.4 SUSE Linux Enterprise Server for SAP Applications 11 SP4:ft2demos-2.3.7-25.41.4 SUSE Linux Enterprise Software Development Kit 11 SP4:freetype2-devel-2.3.7-25.41.4 SUSE Linux Enterprise Software Development Kit 11 SP4:freetype2-devel-32bit-2.3.7-25.41.4 moderate 2.1 AV:L/AC:L/Au:N/C:N/I:N/A:P 5 AV:N/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20161149-1/ https://www.suse.com/security/cve/CVE-2014-9745.html CVE-2014-9745 https://bugzilla.suse.com/945849 SUSE Bug 945849 https://bugzilla.suse.com/947966 SUSE Bug 947966 The t42_parse_encoding function in type42/t42parse.c in FreeType before 2.5.4 does not properly update the current position for immediates-only mode, which allows remote attackers to cause a denial of service (infinite loop) via a Type42 font. CVE-2014-9747 SUSE Linux Enterprise Server 11 SP4:freetype2-2.3.7-25.41.4 SUSE Linux Enterprise Server 11 SP4:freetype2-32bit-2.3.7-25.41.4 SUSE Linux Enterprise Server 11 SP4:freetype2-x86-2.3.7-25.41.4 SUSE Linux Enterprise Server 11 SP4:ft2demos-2.3.7-25.41.4 SUSE Linux Enterprise Server for SAP Applications 11 SP4:freetype2-2.3.7-25.41.4 SUSE Linux Enterprise Server for SAP Applications 11 SP4:freetype2-32bit-2.3.7-25.41.4 SUSE Linux Enterprise Server for SAP Applications 11 SP4:freetype2-x86-2.3.7-25.41.4 SUSE Linux Enterprise Server for SAP Applications 11 SP4:ft2demos-2.3.7-25.41.4 SUSE Linux Enterprise Software Development Kit 11 SP4:freetype2-devel-2.3.7-25.41.4 SUSE Linux Enterprise Software Development Kit 11 SP4:freetype2-devel-32bit-2.3.7-25.41.4 moderate 2.1 AV:L/AC:L/Au:N/C:N/I:N/A:P 5 AV:N/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20161149-1/ https://www.suse.com/security/cve/CVE-2014-9747.html CVE-2014-9747 https://bugzilla.suse.com/947966 SUSE Bug 947966