USN-324-1: freetype vulnerability
Ubuntu Security Notice USN-324-1
27th July, 2006
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 6.06 LTS
- Ubuntu 5.10
- Ubuntu 5.04
An integer overflow has been discovered in the FreeType library. By
tricking a user into installing and/or opening a specially crafted
font file, these could be exploited to execute arbitrary code with the
privileges of that user.
The problem can be corrected by updating your system to the following package version:
- Ubuntu 6.06 LTS:
- libfreetype6 2.1.10-1ubuntu2.2
- Ubuntu 5.10:
- libfreetype6 2.1.7-2.4ubuntu1.2
- Ubuntu 5.04:
- libfreetype6 2.1.7-2.3ubuntu0.2
To update your system, please follow these instructions: https://wiki.ubuntu.com/Security/Upgrades.
After a standard system upgrade you need to restart your session to
effect the necessary changes.