FreeType TrueType Font 'SHC' Heap Buffer Overflow Vulnerability

FreeType TrueType Font 'SHC' Heap Buffer Overflow Vulnerability

Solution:
The vendor released FreeType 2.3.6 to address this issue. Please see the references for more information.

Ubuntu Ubuntu Linux 7.10 powerpc

Ubuntu freetype2-demos_2.3.5-1ubuntu4.7.10.1_powerpc.deb
http://security.ubuntu.com/ubuntu/pool/universe/f/freetype/freetype2-d emos_2.3.5-1ubuntu4.7.10.1_powerpc.deb

Ubuntu libfreetype6-dev_2.3.5-1ubuntu4.7.10.1_powerpc.deb
http://security.ubuntu.com/ubuntu/pool/main/f/freetype/libfreetype6-de v_2.3.5-1ubuntu4.7.10.1_powerpc.deb

Ubuntu libfreetype6-udeb_2.3.5-1ubuntu4.7.10.1_powerpc.udeb
http://security.ubuntu.com/ubuntu/pool/universe/f/freetype/libfreetype 6-udeb_2.3.5-1ubuntu4.7.10.1_powerpc.udeb

Ubuntu libfreetype6_2.3.5-1ubuntu4.7.10.1_powerpc.deb
http://security.ubuntu.com/ubuntu/pool/main/f/freetype/libfreetype6_2. 3.5-1ubuntu4.7.10.1_powerpc.deb

Debian Linux 4.0 amd64

Debian freetype2-demos_2.2.1-5+etch3_amd64.deb
http://security.debian.org/pool/updates/main/f/freetype/freetype2-demo s_2.2.1-5+etch3_amd64.deb

Debian libfreetype6-dev_2.2.1-5+etch3_amd64.deb
http://security.debian.org/pool/updates/main/f/freetype/libfreetype6-d ev_2.2.1-5+etch3_amd64.deb

Debian libfreetype6-udeb_2.2.1-5+etch3_amd64.udeb
http://security.debian.org/pool/updates/main/f/freetype/libfreetype6-u deb_2.2.1-5+etch3_amd64.udeb

Debian libfreetype6_2.2.1-5+etch3_amd64.deb
http://security.debian.org/pool/updates/main/f/freetype/libfreetype6_2 .2.1-5+etch3_amd64.deb

Debian Linux 4.0 ia-32

Debian freetype2-demos_2.2.1-5+etch3_i386.deb
http://security.debian.org/pool/updates/main/f/freetype/freetype2-demo s_2.2.1-5+etch3_i386.deb

Debian libfreetype6-dev_2.2.1-5+etch3_i386.deb
http://security.debian.org/pool/updates/main/f/freetype/libfreetype6-d ev_2.2.1-5+etch3_i386.deb

Debian libfreetype6-udeb_2.2.1-5+etch3_i386.udeb
http://security.debian.org/pool/updates/main/f/freetype/libfreetype6-u deb_2.2.1-5+etch3_i386.udeb

Debian libfreetype6_2.2.1-5+etch3_i386.deb
http://security.debian.org/pool/updates/main/f/freetype/libfreetype6_2 .2.1-5+etch3_i386.deb

Ubuntu Ubuntu Linux 7.04 i386

Ubuntu freetype2-demos_2.2.1-5ubuntu1.2_i386.deb
http://security.ubuntu.com/ubuntu/pool/universe/f/freetype/freetype2-d emos_2.2.1-5ubuntu1.2_i386.deb

Ubuntu libfreetype6-dev_2.2.1-5ubuntu1.2_i386.deb
http://security.ubuntu.com/ubuntu/pool/main/f/freetype/libfreetype6-de v_2.2.1-5ubuntu1.2_i386.deb

Ubuntu libfreetype6-udeb_2.2.1-5ubuntu1.2_i386.udeb
http://security.ubuntu.com/ubuntu/pool/universe/f/freetype/libfreetype 6-udeb_2.2.1-5ubuntu1.2_i386.udeb

Ubuntu libfreetype6_2.2.1-5ubuntu1.2_i386.deb
http://security.ubuntu.com/ubuntu/pool/main/f/freetype/libfreetype6_2. 2.1-5ubuntu1.2_i386.deb

Debian Linux 4.0 mips

Debian freetype2-demos_2.2.1-5+etch3_mips.deb
http://security.debian.org/pool/updates/main/f/freetype/freetype2-demo s_2.2.1-5+etch3_mips.deb

Debian libfreetype6-dev_2.2.1-5+etch3_mips.deb
http://security.debian.org/pool/updates/main/f/freetype/libfreetype6-d ev_2.2.1-5+etch3_mips.deb

Debian libfreetype6-udeb_2.2.1-5+etch3_mips.udeb
http://security.debian.org/pool/updates/main/f/freetype/libfreetype6-u deb_2.2.1-5+etch3_mips.udeb

Debian libfreetype6_2.2.1-5+etch3_mips.deb
http://security.debian.org/pool/updates/main/f/freetype/libfreetype6_2 .2.1-5+etch3_mips.deb

Debian Linux 4.0 arm

Debian freetype2-demos_2.2.1-5+etch3_arm.deb
http://security.debian.org/pool/updates/main/f/freetype/freetype2-demo s_2.2.1-5+etch3_arm.deb

Debian libfreetype6-dev_2.2.1-5+etch3_arm.deb
http://security.debian.org/pool/updates/main/f/freetype/libfreetype6-d ev_2.2.1-5+etch3_arm.deb

Debian libfreetype6-udeb_2.2.1-5+etch3_arm.udeb
http://security.debian.org/pool/updates/main/f/freetype/libfreetype6-u deb_2.2.1-5+etch3_arm.udeb

Debian libfreetype6_2.2.1-5+etch3_arm.deb
http://security.debian.org/pool/updates/main/f/freetype/libfreetype6_2 .2.1-5+etch3_arm.deb

Debian Linux 4.0 powerpc

Debian freetype2-demos_2.2.1-5+etch3_powerpc.deb
http://security.debian.org/pool/updates/main/f/freetype/freetype2-demo s_2.2.1-5+etch3_powerpc.deb

Debian libfreetype6-dev_2.2.1-5+etch3_powerpc.deb
http://security.debian.org/pool/updates/main/f/freetype/libfreetype6-d ev_2.2.1-5+etch3_powerpc.deb

Debian libfreetype6-udeb_2.2.1-5+etch3_powerpc.udeb
http://security.debian.org/pool/updates/main/f/freetype/libfreetype6-u deb_2.2.1-5+etch3_powerpc.udeb

Debian libfreetype6_2.2.1-5+etch3_powerpc.deb
http://security.debian.org/pool/updates/main/f/freetype/libfreetype6_2 .2.1-5+etch3_powerpc.deb

Ubuntu Ubuntu Linux 7.04 amd64

Ubuntu freetype2-demos_2.2.1-5ubuntu1.2_amd64.deb
http://security.ubuntu.com/ubuntu/pool/universe/f/freetype/freetype2-d emos_2.2.1-5ubuntu1.2_amd64.deb

Ubuntu libfreetype6-dev_2.2.1-5ubuntu1.2_amd64.deb
http://security.ubuntu.com/ubuntu/pool/main/f/freetype/libfreetype6-de v_2.2.1-5ubuntu1.2_amd64.deb

Ubuntu libfreetype6-udeb_2.2.1-5ubuntu1.2_amd64.udeb
http://security.ubuntu.com/ubuntu/pool/universe/f/freetype/libfreetype 6-udeb_2.2.1-5ubuntu1.2_amd64.udeb

Ubuntu libfreetype6_2.2.1-5ubuntu1.2_amd64.deb
http://security.ubuntu.com/ubuntu/pool/main/f/freetype/libfreetype6_2. 2.1-5ubuntu1.2_amd64.deb

Ubuntu Ubuntu Linux 8.04 LTS lpia

Ubuntu freetype2-demos_2.3.5-1ubuntu4.8.04.1_lpia.deb
http://ports.ubuntu.com/pool/universe/f/freetype/freetype2-demos_2.3.5 -1ubuntu4.8.04.1_lpia.deb

Ubuntu libfreetype6-dev_2.3.5-1ubuntu4.8.04.1_lpia.deb
http://ports.ubuntu.com/pool/main/f/freetype/libfreetype6-dev_2.3.5-1u buntu4.8.04.1_lpia.deb

Ubuntu libfreetype6-udeb_2.3.5-1ubuntu4.8.04.1_lpia.udeb
http://ports.ubuntu.com/pool/universe/f/freetype/libfreetype6-udeb_2.3 .5-1ubuntu4.8.04.1_lpia.udeb

Ubuntu libfreetype6_2.3.5-1ubuntu4.8.04.1_lpia.deb
http://ports.ubuntu.com/pool/main/f/freetype/libfreetype6_2.3.5-1ubunt u4.8.04.1_lpia.deb

Ubuntu Ubuntu Linux 7.10 lpia

Ubuntu freetype2-demos_2.3.5-1ubuntu4.7.10.1_lpia.deb
http://ports.ubuntu.com/pool/universe/f/freetype/freetype2-demos_2.3.5 -1ubuntu4.7.10.1_lpia.deb

Ubuntu libfreetype6-dev_2.3.5-1ubuntu4.7.10.1_lpia.deb
http://ports.ubuntu.com/pool/main/f/freetype/libfreetype6-dev_2.3.5-1u buntu4.7.10.1_lpia.deb

Ubuntu libfreetype6-udeb_2.3.5-1ubuntu4.7.10.1_lpia.udeb
http://ports.ubuntu.com/pool/universe/f/freetype/libfreetype6-udeb_2.3 .5-1ubuntu4.7.10.1_lpia.udeb

Ubuntu libfreetype6_2.3.5-1ubuntu4.7.10.1_lpia.deb
http://ports.ubuntu.com/pool/main/f/freetype/libfreetype6_2.3.5-1ubunt u4.7.10.1_lpia.deb

Ubuntu Ubuntu Linux 6.06 LTS i386

Ubuntu freetype2-demos_2.1.10-1ubuntu2.5_i386.deb
http://security.ubuntu.com/ubuntu/pool/universe/f/freetype/freetype2-d emos_2.1.10-1ubuntu2.5_i386.deb

Ubuntu libfreetype6-dev_2.1.10-1ubuntu2.5_i386.deb
http://security.ubuntu.com/ubuntu/pool/main/f/freetype/libfreetype6-de v_2.1.10-1ubuntu2.5_i386.deb

Ubuntu libfreetype6-udeb_2.1.10-1ubuntu2.5_i386.udeb
http://security.ubuntu.com/ubuntu/pool/universe/f/freetype/libfreetype 6-udeb_2.1.10-1ubuntu2.5_i386.udeb

Ubuntu libfreetype6_2.1.10-1ubuntu2.5_i386.deb
http://security.ubuntu.com/ubuntu/pool/main/f/freetype/libfreetype6_2. 1.10-1ubuntu2.5_i386.deb

Debian Linux 4.0 sparc

Debian freetype2-demos_2.2.1-5+etch3_sparc.deb
http://security.debian.org/pool/updates/main/f/freetype/freetype2-demo s_2.2.1-5+etch3_sparc.deb

Debian libfreetype6-dev_2.2.1-5+etch3_sparc.deb
http://security.debian.org/pool/updates/main/f/freetype/libfreetype6-d ev_2.2.1-5+etch3_sparc.deb

Debian libfreetype6-udeb_2.2.1-5+etch3_sparc.udeb
http://security.debian.org/pool/updates/main/f/freetype/libfreetype6-u deb_2.2.1-5+etch3_sparc.udeb

Debian libfreetype6_2.2.1-5+etch3_sparc.deb
http://security.debian.org/pool/updates/main/f/freetype/libfreetype6_2 .2.1-5+etch3_sparc.deb

Ubuntu Ubuntu Linux 7.10 amd64

Ubuntu freetype2-demos_2.3.5-1ubuntu4.7.10.1_amd64.deb
http://security.ubuntu.com/ubuntu/pool/universe/f/freetype/freetype2-d emos_2.3.5-1ubuntu4.7.10.1_amd64.deb

Ubuntu libfreetype6-dev_2.3.5-1ubuntu4.7.10.1_amd64.deb
http://security.ubuntu.com/ubuntu/pool/main/f/freetype/libfreetype6-de v_2.3.5-1ubuntu4.7.10.1_amd64.deb

Ubuntu libfreetype6-udeb_2.3.5-1ubuntu4.7.10.1_amd64.udeb
http://security.ubuntu.com/ubuntu/pool/universe/f/freetype/libfreetype 6-udeb_2.3.5-1ubuntu4.7.10.1_amd64.udeb

Ubuntu libfreetype6_2.3.5-1ubuntu4.7.10.1_amd64.deb
http://security.ubuntu.com/ubuntu/pool/main/f/freetype/libfreetype6_2. 3.5-1ubuntu4.7.10.1_amd64.deb

Ubuntu Ubuntu Linux 8.04 LTS i386

Ubuntu freetype2-demos_2.3.5-1ubuntu4.8.04.1_i386.deb
http://security.ubuntu.com/ubuntu/pool/universe/f/freetype/freetype2-d emos_2.3.5-1ubuntu4.8.04.1_i386.deb

Ubuntu libfreetype6-dev_2.3.5-1ubuntu4.8.04.1_i386.deb
http://security.ubuntu.com/ubuntu/pool/main/f/freetype/libfreetype6-de v_2.3.5-1ubuntu4.8.04.1_i386.deb

Ubuntu libfreetype6-udeb_2.3.5-1ubuntu4.8.04.1_i386.udeb
http://security.ubuntu.com/ubuntu/pool/universe/f/freetype/libfreetype 6-udeb_2.3.5-1ubuntu4.8.04.1_i386.udeb

Ubuntu libfreetype6_2.3.5-1ubuntu4.8.04.1_i386.deb
http://security.ubuntu.com/ubuntu/pool/main/f/freetype/libfreetype6_2. 3.5-1ubuntu4.8.04.1_i386.deb

FreeType FreeType 2.0.9

FreeType ft236.zip
http://download.savannah.gnu.org/releases/freetype/ft236.zip

FreeType FreeType 2.1.7

FreeType ft236.zip
http://download.savannah.gnu.org/releases/freetype/ft236.zip

FreeType FreeType 2.3.3

FreeType ft236.zip
http://download.savannah.gnu.org/releases/freetype/ft236.zip

MandrakeSoft Corporate Server 3.0

Mandriva libfreetype6-2.1.7-4.7.C30mdk.i586.rpm
http://www.mandriva.com/en/download/

Mandriva libfreetype6-devel-2.1.7-4.7.C30mdk.i586.rpm
http://www.mandriva.com/en/download/

Mandriva libfreetype6-static-devel-2.1.7-4.7.C30mdk.i586.rpm
http://www.mandriva.com/en/download/