Test ID:	1.3.6.1.4.1.25623.1.0.58229
Category:	Slackware Local Security Checks
Title:	Slackware: Security Advisory (SSA:2007-109-01)
Summary:	The remote host is missing an update for the 'freetype' package(s) announced via the SSA:2007-109-01 advisory.
Description:	Summary: The remote host is missing an update for the 'freetype' package(s) announced via the SSA:2007-109-01 advisory. Vulnerability Insight: New x11 and/or freetype and fontconfig packages are available for Slackware 10.1, 10.2, 11.0, and -current to fix security issues in freetype. Freetype was packaged with X11 prior to Slackware version 11.0. More details about this issue may be found in the Common Vulnerabilities and Exposures (CVE) database: [link moved to references] Here are the details from the Slackware 11.0 ChangeLog: +--------------------------+ patches/packages/freetype-2.3.4-i486-1_slack11.0.tgz: Fixed an overflow parsing BDF fonts. For more information, see: [link moved to references] (* Security fix *) +--------------------------+ Affected Software/OS: 'freetype' package(s) on Slackware 10.1, Slackware 10.2, Slackware 11.0, Slackware current. Solution: Please install the updated package(s). CVSS Score: 8.5 CVSS Vector: AV:N/AC:M/Au:S/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2007-1351 http://lists.apple.com/archives/Security-announce/2007/Nov/msg00003.html http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html BugTraq ID: 23283 http://www.securityfocus.com/bid/23283 BugTraq ID: 23300 http://www.securityfocus.com/bid/23300 BugTraq ID: 23402 http://www.securityfocus.com/bid/23402 Bugtraq: 20070404 rPSA-2007-0065-1 freetype xorg-x11 xorg-x11-fonts xorg-x11-tools xorg-x11-xfs (Google Search) http://www.securityfocus.com/archive/1/464686/100/0/threaded Bugtraq: 20070405 FLEA-2007-0009-1: xorg-x11 freetype (Google Search) http://www.securityfocus.com/archive/1/464816/100/0/threaded Debian Security Information: DSA-1294 (Google Search) http://www.debian.org/security/2007/dsa-1294 Debian Security Information: DSA-1454 (Google Search) http://www.debian.org/security/2008/dsa-1454 http://security.gentoo.org/glsa/glsa-200705-02.xml http://security.gentoo.org/glsa/glsa-200705-10.xml http://www.gentoo.org/security/en/glsa/glsa-200805-07.xml http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=501 http://www.mandriva.com/security/advisories?name=MDKSA-2007:079 http://www.mandriva.com/security/advisories?name=MDKSA-2007:080 http://www.mandriva.com/security/advisories?name=MDKSA-2007:081 http://lists.freedesktop.org/archives/xorg-announce/2007-April/000286.html OpenBSD Security Advisory: [3.9] 021: SECURITY FIX: April 4, 2007 http://www.openbsd.org/errata39.html#021_xorg OpenBSD Security Advisory: [4.0] 011: SECURITY FIX: April 4, 2007 http://www.openbsd.org/errata40.html#011_xorg https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11266 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1810 RedHat Security Advisories: RHSA-2007:0125 http://rhn.redhat.com/errata/RHSA-2007-0125.html http://www.redhat.com/support/errata/RHSA-2007-0126.html http://www.redhat.com/support/errata/RHSA-2007-0132.html http://www.redhat.com/support/errata/RHSA-2007-0150.html http://www.securitytracker.com/id?1017857 http://secunia.com/advisories/24741 http://secunia.com/advisories/24745 http://secunia.com/advisories/24756 http://secunia.com/advisories/24758 http://secunia.com/advisories/24765 http://secunia.com/advisories/24768 http://secunia.com/advisories/24770 http://secunia.com/advisories/24771 http://secunia.com/advisories/24772 http://secunia.com/advisories/24776 http://secunia.com/advisories/24791 http://secunia.com/advisories/24885 http://secunia.com/advisories/24889 http://secunia.com/advisories/24921 http://secunia.com/advisories/24996 http://secunia.com/advisories/25004 http://secunia.com/advisories/25006 http://secunia.com/advisories/25096 http://secunia.com/advisories/25195 http://secunia.com/advisories/25216 http://secunia.com/advisories/25305 http://secunia.com/advisories/25495 http://secunia.com/advisories/28333 http://secunia.com/advisories/30161 http://secunia.com/advisories/33937 http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.626733 http://sunsolve.sun.com/search/document.do?assetkey=1-26-102886-1 SuSE Security Announcement: SUSE-SA:2007:027 (Google Search) http://www.novell.com/linux/security/advisories/2007_27_x.html SuSE Security Announcement: SUSE-SR:2007:006 (Google Search) http://www.novell.com/linux/security/advisories/2007_6_sr.html http://www.trustix.org/errata/2007/0013/ http://www.ubuntu.com/usn/usn-448-1 http://www.vupen.com/english/advisories/2007/1217 http://www.vupen.com/english/advisories/2007/1264 http://www.vupen.com/english/advisories/2007/1548 XForce ISS Database: xorg-bdf-font-bo(33417) https://exchange.xforce.ibmcloud.com/vulnerabilities/33417
Copyright	Copyright (C) 2012 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.