8:50 a.m.
https://bugzilla.redhat.com/show_bug.cgi?id=1262373
Bug ID: 1262373
Summary: freetype: Use of uninitialized memory
Product: Security Response
Component: vulnerability
Keywords: Security
Severity: low
Priority: low
Assignee: security-response-team(a)redhat.com
Reporter: amaris(a)redhat.com
CC: behdad(a)fedoraproject.org, erik-fedora(a)vanpienbroek.nl,
fedora-mingw(a)lists.fedoraproject.org,
fonts-bugs(a)lists.fedoraproject.org,
kevin(a)tigcc.ticalc.org, lfarkas(a)lfarkas.org,
mkasik(a)redhat.com, rjones(a)redhat.com
Three use-of-uninitialized conditions were found in psobjs.c in
ps_parser_load_field, in t42parse.c in 42_parse_font_matrix and in t1load.c in
tt1_parse_font_matrix.
Upstream bug:
https://savannah.nongnu.org/bugs/?41309
Upstream patch:
http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=8b281f...
CVE request:
http://seclists.org/oss-sec/2015/q3/537
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug
https://bugzilla.redhat.com/token.cgi?t=1vpsmfjkAX&a=cc_unsubscribe
8:51 a.m.
New subject: [Bug 1262373] freetype: Use of uninitialized memory
https://bugzilla.redhat.com/show_bug.cgi?id=1262373
Adam Mariš <amaris(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Blocks| |1262375
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug
https://bugzilla.redhat.com/token.cgi?t=vu2XJs9pZI&a=cc_unsubscribe
8:59 a.m.
New subject: [Bug 1262373] freetype: Use of uninitialized memory
https://bugzilla.redhat.com/show_bug.cgi?id=1262373
Adam Mariš <amaris(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Depends On| |1262384
Depends On| |1262385
Depends On| |1262386
--- Comment #1 from Adam Mariš <amaris(a)redhat.com> ---
Created freetype tracking bugs for this issue:
Affects: fedora-all [bug 1262384]
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=1262384
[Bug 1262384] freetype: Use of uninitialized memory [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1262385
[Bug 1262385] mingw-freetype: freetype: Use of uninitialized memory
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1262386
[Bug 1262386] mingw-freetype: freetype: Use of uninitialized memory
[epel-7]
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug
https://bugzilla.redhat.com/token.cgi?t=XInjf2DYK7&a=cc_unsubscribe
8:59 a.m.
New subject: [Bug 1262373] freetype: Use of uninitialized memory
https://bugzilla.redhat.com/show_bug.cgi?id=1262373
--- Comment #2 from Adam Mariš <amaris(a)redhat.com> ---
Created mingw-freetype tracking bugs for this issue:
Affects: fedora-all [bug 1262385]
Affects: epel-7 [bug 1262386]
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug
https://bugzilla.redhat.com/token.cgi?t=PPku62zExw&a=cc_unsubscribe
9:51 a.m.
New subject: [Bug 1262373] freetype: Use of uninitialized memory
https://bugzilla.redhat.com/show_bug.cgi?id=1262373
--- Comment #3 from Marek Kašík <mkasik(a)redhat.com> ---
It seems to me that this is already fixed in all maintained versions of Fedora.
Check it please.
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug
https://bugzilla.redhat.com/token.cgi?t=d7vornuBl5&a=cc_unsubscribe
12:49 a.m.
New subject: [Bug 1262373] freetype: Use of uninitialized memory
https://bugzilla.redhat.com/show_bug.cgi?id=1262373
--- Comment #4 from Huzaifa S. Sidhpurwala <huzaifas(a)redhat.com> ---
Upstream freetype git suggests that this issue was addressed in freetype-2.5.3.
Therefore this issue is already fixed in all the maintained versions of Fedora.
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug
https://bugzilla.redhat.com/token.cgi?t=gzdTK2ZjLv&a=cc_unsubscribe
12:49 a.m.
New subject: [Bug 1262373] freetype: Use of uninitialized memory
https://bugzilla.redhat.com/show_bug.cgi?id=1262373
Bug 1262373 depends on bug 1262384, which changed state.
Bug 1262384 Summary: freetype: Use of uninitialized memory [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1262384
What |Removed |Added
----------------------------------------------------------------------------
Status|NEW |CLOSED
Resolution|--- |NOTABUG
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug
https://bugzilla.redhat.com/token.cgi?t=Hr9qOmKxay&a=cc_unsubscribe
12:50 a.m.
New subject: [Bug 1262373] freetype: Use of uninitialized memory
https://bugzilla.redhat.com/show_bug.cgi?id=1262373
Bug 1262373 depends on bug 1262385, which changed state.
Bug 1262385 Summary: mingw-freetype: freetype: Use of uninitialized memory [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1262385
What |Removed |Added
----------------------------------------------------------------------------
Status|NEW |CLOSED
Resolution|--- |NOTABUG
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug
https://bugzilla.redhat.com/token.cgi?t=UPnrCACUGx&a=cc_unsubscribe
12:50 a.m.
New subject: [Bug 1262373] freetype: Use of uninitialized memory
https://bugzilla.redhat.com/show_bug.cgi?id=1262373
Bug 1262373 depends on bug 1262386, which changed state.
Bug 1262386 Summary: mingw-freetype: freetype: Use of uninitialized memory [epel-7]
https://bugzilla.redhat.com/show_bug.cgi?id=1262386
What |Removed |Added
----------------------------------------------------------------------------
Status|NEW |CLOSED
Resolution|--- |NOTABUG
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug
https://bugzilla.redhat.com/token.cgi?t=hu1Q2Wxh0N&a=cc_unsubscribe
12:56 a.m.
New subject: [Bug 1262373] freetype: Use of uninitialized memory
https://bugzilla.redhat.com/show_bug.cgi?id=1262373
Huzaifa S. Sidhpurwala <huzaifas(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Whiteboard|impact=low,public=20140122, |impact=low,public=20140122,
|reported=20150911,source=in |reported=20150911,source=in
|ternet,rhel-5/freetype=affe |ternet,rhel-5/freetype=wont
|cted,rhel-6/freetype=affect |fix,rhel-6/freetype=wontfix
|ed,rhel-7/freetype=affected |,rhel-7/freetype=wontfix,fe
|,fedora-all/freetype=affect |dora-all/freetype=affected,
|ed,fedora-all/mingw-freetyp |fedora-all/mingw-freetype=a
|e=affected,epel-7/mingw-fre |ffected,epel-7/mingw-freety
|etype=affected |pe=affected
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug
https://bugzilla.redhat.com/token.cgi?t=h6A9RfeeVG&a=cc_unsubscribe
12:56 a.m.
New subject: [Bug 1262373] freetype: Use of uninitialized memory
https://bugzilla.redhat.com/show_bug.cgi?id=1262373
Huzaifa S. Sidhpurwala <huzaifas(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|NEW |CLOSED
Resolution|--- |WONTFIX
Last Closed| |2015-09-14 01:56:10
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug
https://bugzilla.redhat.com/token.cgi?t=z70o41Ulow&a=cc_unsubscribe
2:24 a.m.
New subject: [Bug 1262373] freetype: Use of uninitialized memory
https://bugzilla.redhat.com/show_bug.cgi?id=1262373
Huzaifa S. Sidhpurwala <huzaifas(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Whiteboard|impact=low,public=20140122, |impact=low,public=20140122,
|reported=20150911,source=in |reported=20150911,source=in
|ternet,rhel-5/freetype=wont |ternet,rhel-5/freetype=wont
|fix,rhel-6/freetype=wontfix |fix,rhel-6/freetype=wontfix
|,rhel-7/freetype=wontfix,fe |,rhel-7/freetype=wontfix,fe
|dora-all/freetype=affected, |dora-all/freetype=notaffect
|fedora-all/mingw-freetype=a |ed,fedora-all/mingw-freetyp
|ffected,epel-7/mingw-freety |e=notaffected,epel-7/mingw-
|pe=affected |freetype=notaffected
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug
https://bugzilla.redhat.com/token.cgi?t=64c4cEes9s&a=cc_unsubscribe
4:18 a.m.
New subject: [Bug 1262373] CVE-2014-9746 CVE-2014-9747 freetype: Use of uninitialized memory
https://bugzilla.redhat.com/show_bug.cgi?id=1262373
Adam Mariš <amaris(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Summary|freetype: Use of |CVE-2014-9746 CVE-2014-9747
|uninitialized memory |freetype: Use of
| |uninitialized memory
Alias| |CVE-2014-9746,
| |CVE-2014-9747
--- Comment #6 from Adam Mariš <amaris(a)redhat.com> ---
CVE-2014-9746 is for accessing uninitialized memory issues
CVE-2014-9747 is for the fix for CWE-372 ("Incomplete Internal State
Distinction") issue in the sense that the possibility of immediates-only mode
isn't checked (in t42parse.c)
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug
https://bugzilla.redhat.com/token.cgi?t=o4OAm6pQc7&a=cc_unsubscribe
9:57 a.m.
New subject: [Bug 1262373] CVE-2014-9746 CVE-2014-9747 freetype: Use of uninitialized memory
https://bugzilla.redhat.com/show_bug.cgi?id=1262373
Adam Mariš <amaris(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Whiteboard|impact=low,public=20140122, |impact=low,public=20140122,
|reported=20150911,source=in |reported=20150911,source=in
|ternet,rhel-5/freetype=wont |ternet,cvss2=2.1/AV:L/AC:L/
|fix,rhel-6/freetype=wontfix |Au:N/C:N/I:N/A:P,rhel-5/fre
|,rhel-7/freetype=wontfix,fe |etype=wontfix,rhel-6/freety
|dora-all/freetype=notaffect |pe=wontfix,rhel-7/freetype=
|ed,fedora-all/mingw-freetyp |wontfix,fedora-all/freetype
|e=notaffected,epel-7/mingw- |=notaffected,fedora-all/min
|freetype=notaffected |gw-freetype=notaffected,epe
| |l-7/mingw-freetype=notaffec
| |ted
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug
https://bugzilla.redhat.com/token.cgi?t=YMWf25n3SX&a=cc_unsubscribe
3118
days inactive
3158
days old
13 comments
1 participants
participants (1)
-
Red Hat Bugzilla