Test ID:	1.3.6.1.4.1.25623.1.0.71978
Category:	Slackware Local Security Checks
Title:	Slackware: Security Advisory (SSA:2012-176-01)
Summary:	The remote host is missing an update for the 'freetype' package(s) announced via the SSA:2012-176-01 advisory.
Description:	Summary: The remote host is missing an update for the 'freetype' package(s) announced via the SSA:2012-176-01 advisory. Vulnerability Insight: New freetype packages are available for Slackware 11.0, 12.0, 12.1, 12.2, 13.0, 13.1, 13.37, and -current to fix security issues. Here are the details from the Slackware 13.37 ChangeLog: +--------------------------+ Since freetype-2.4.8 many fixes were made to better handle invalid fonts. Many of them are vulnerabilities (see CVE-2012-1126 up to CVE-2012-1144 and SA48320) so all users should upgrade. (* Security fix *) +--------------------------+ Affected Software/OS: 'freetype' package(s) on Slackware 11.0, Slackware 12.0, Slackware 12.1, Slackware 12.2, Slackware 13.0, Slackware 13.1, Slackware 13.37, Slackware current. Solution: Please install the updated package(s). CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2012-1126 1026765 http://www.securitytracker.com/id?1026765 48508 http://secunia.com/advisories/48508 48758 http://secunia.com/advisories/48758 48797 http://secunia.com/advisories/48797 48822 http://secunia.com/advisories/48822 48918 http://secunia.com/advisories/48918 48951 http://secunia.com/advisories/48951 48973 http://secunia.com/advisories/48973 52318 http://www.securityfocus.com/bid/52318 APPLE-SA-2012-09-19-1 http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html GLSA-201204-04 http://security.gentoo.org/glsa/glsa-201204-04.xml MDVSA-2012:057 http://www.mandriva.com/security/advisories?name=MDVSA-2012:057 RHSA-2012:0467 http://rhn.redhat.com/errata/RHSA-2012-0467.html SUSE-SU-2012:0483 http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00002.html SUSE-SU-2012:0484 http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00003.html SUSE-SU-2012:0521 http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00015.html USN-1403-1 http://www.ubuntu.com/usn/USN-1403-1 [oss-security] 20120306 Re: CVE Request -- FreeType: Multiple security flaws to be fixed in v2.4.9 http://www.openwall.com/lists/oss-security/2012/03/06/16 http://support.apple.com/kb/HT5503 http://www.mozilla.org/security/announce/2012/mfsa2012-21.html https://bugzilla.mozilla.org/show_bug.cgi?id=733512 https://bugzilla.redhat.com/show_bug.cgi?id=800581 openSUSE-SU-2012:0489 http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00004.html Common Vulnerability Exposure (CVE) ID: CVE-2012-1144 48300 http://secunia.com/advisories/48300 DSA-2428 http://www.debian.org/security/2012/dsa-2428 https://bugzilla.redhat.com/show_bug.cgi?id=800607
Copyright	Copyright (C) 2012 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.