Scientific Linux alert SL-free-20130201 (freetype)

From:
    	     
 
Pat Riehecky <riehecky@fnal.gov> 
To:
    	     
 
"SCIENTIFIC-LINUX-ERRATA@LISTSERV.FNAL.GOV"
	<SCIENTIFIC-LINUX-ERRATA@LISTSERV.FNAL.GOV> 
Subject:
    	     
 
Security ERRATA Important: freetype on SL5.x, SL6.x i386/x86_64 
Date:
    	     
 
Fri, 1 Feb 2013 09:47:47 -0600
Message-ID:
    	     
 
<510BE3A3.5020004@fnal.gov>
Archive-link:
    	     
 
Article, Thread
              
Synopsis:          Important: freetype security update
Issue Date:        2013-01-31
CVE Numbers:       CVE-2012-5669
--

A flaw was found in the way the FreeType font rendering engine processed
certain Glyph Bitmap Distribution Format (BDF) fonts. If a user loaded a
specially-crafted font file with an application linked against FreeType, it
could cause the application to crash or, possibly, execute arbitrary 
code with
the privileges of the user running the application. (CVE-2012-5669)

The X server must be restarted (log out, then log back in) for this 
update to
take effect.
--

SL5
   x86_64
     freetype-2.2.1-32.el5_9.1.i386.rpm
     freetype-2.2.1-32.el5_9.1.x86_64.rpm
     freetype-debuginfo-2.2.1-32.el5_9.1.i386.rpm
     freetype-debuginfo-2.2.1-32.el5_9.1.x86_64.rpm
     freetype-demos-2.2.1-32.el5_9.1.x86_64.rpm
     freetype-devel-2.2.1-32.el5_9.1.i386.rpm
     freetype-devel-2.2.1-32.el5_9.1.x86_64.rpm
   i386
     freetype-2.2.1-32.el5_9.1.i386.rpm
     freetype-debuginfo-2.2.1-32.el5_9.1.i386.rpm
     freetype-demos-2.2.1-32.el5_9.1.i386.rpm
     freetype-devel-2.2.1-32.el5_9.1.i386.rpm
SL6
   x86_64
     freetype-2.3.11-14.el6_3.1.i686.rpm
     freetype-2.3.11-14.el6_3.1.x86_64.rpm
     freetype-debuginfo-2.3.11-14.el6_3.1.i686.rpm
     freetype-debuginfo-2.3.11-14.el6_3.1.x86_64.rpm
     freetype-demos-2.3.11-14.el6_3.1.x86_64.rpm
     freetype-devel-2.3.11-14.el6_3.1.i686.rpm
     freetype-devel-2.3.11-14.el6_3.1.x86_64.rpm
   i386
     freetype-2.3.11-14.el6_3.1.i686.rpm
     freetype-debuginfo-2.3.11-14.el6_3.1.i686.rpm
     freetype-demos-2.3.11-14.el6_3.1.i686.rpm
     freetype-devel-2.3.11-14.el6_3.1.i686.rpm

- Scientific Linux Development Team