Foresight alert FLEA-2007-0025-1 (freetype)

From:
    	     
 
Foresight Linux Essential Announcement Service <foresight-security-noreply@foresightlinux.org>
To:
    	     
 
foresight-security-announce@lists.rpath.org
Subject:
    	     
 
FLEA-2007-0025-1: openoffice.org
Date:
    	     
 
Wed, 13 Jun 2007 14:37:54 -0400
Cc:
    	     
 
full-disclosure@lists.grok.org.uk, bugtraq@securityfocus.com, lwn@lwn.net
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Foresight Linux Essential Advisory: 2007-0025-1
Published: 2007-06-13

Rating: Moderate

Updated Versions:
    openoffice.org=/conary.rpath.com@rpl:devel//1//foresight.rpath.org@fl:1-devel//1/2.2.1-0.0.1-1
    group-dist=/foresight.rpath.org@fl:1-devel//1/1.3-0.5-3

References:
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2754

Description:
    Previous versions of the freetype package were vulnerable to an issue whereby a specially
crafted ttf file could execute arbitrary code at the permission level of the use running freetype.

- ---

Copyright 2007 Foresight Linux Project
This file is distributed under the terms of the MIT License.
A copy is available at http://www.foresightlinux.org/permanent/mit-license.html

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.4 (GNU/Linux)
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=Nunk
-----END PGP SIGNATURE-----