Test ID:	1.3.6.1.4.1.25623.1.0.61611
Category:	Ubuntu Local Security Checks
Title:	Ubuntu USN-643-1 (freetype)
Summary:	Ubuntu USN-643-1 (freetype)
Description:	The remote host is missing an update to freetype announced via advisory USN-643-1. A security issue affects the following Ubuntu releases: Ubuntu 6.06 LTS Ubuntu 7.04 Ubuntu 7.10 Ubuntu 8.04 LTS This advisory also applies to the corresponding versions of Kubuntu, Edubuntu, and Xubuntu. Details follow: Multiple flaws were discovered in the PFB and TTF font handling code in freetype. If a user were tricked into using a specially crafted font file, a remote attacker could execute arbitrary code with user privileges or cause the application linked against freetype to crash, leading to a denial of service. Solution: The problem can be corrected by upgrading your system to the following package versions: Ubuntu 6.06 LTS: libfreetype6 2.1.10-1ubuntu2.5 Ubuntu 7.04: libfreetype6 2.2.1-5ubuntu1.2 Ubuntu 7.10: libfreetype6 2.3.5-1ubuntu4.7.10.1 Ubuntu 8.04 LTS: libfreetype6 2.3.5-1ubuntu4.8.04.1 After a standard system upgrade you need to restart your session to effect the necessary changes. http://www.securityspace.com/smysecure/catid.html?in=USN-643-1 Risk factor : High
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2008-1806 http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=715 Bugtraq: 20080814 rPSA-2008-0255-1 freetype (Google Search) http://www.securityfocus.com/archive/1/archive/1/495497/100/0/threaded Bugtraq: 20080830 VMSA-2008-0014 Updates to VMware Workstation, VMware Player, VMware ACE, VMware Server, VMware ESX address information disclosure, privilege escalation and other security issues. (Google Search) http://www.securityfocus.com/archive/1/archive/1/495869/100/0/threaded http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/064118.html http://sourceforge.net/project/shownotes.php?group_id=3157&release_id=605780 http://lists.apple.com/archives/security-announce//2008/Sep/msg00003.html http://lists.apple.com/archives/security-announce//2008/Sep/msg00004.html http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00717.html https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00721.html http://security.gentoo.org/glsa/glsa-200806-10.xml http://www.mandriva.com/security/advisories?name=MDVSA-2008:121 http://www.redhat.com/support/errata/RHSA-2008-0556.html http://www.redhat.com/support/errata/RHSA-2008-0558.html http://sunsolve.sun.com/search/document.do?assetkey=1-26-239006-1 SuSE Security Announcement: SUSE-SR:2008:014 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00001.html http://www.ubuntu.com/usn/usn-643-1 BugTraq ID: 29640 http://www.securityfocus.com/bid/29640 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9321 http://www.vupen.com/english/advisories/2008/1794 http://www.vupen.com/english/advisories/2008/1876/references http://www.vupen.com/english/advisories/2008/2423 http://www.vupen.com/english/advisories/2008/2466 http://www.vupen.com/english/advisories/2008/2558 http://www.vupen.com/english/advisories/2008/2525 http://securitytracker.com/id?1020238 http://secunia.com/advisories/30600 http://secunia.com/advisories/30740 http://secunia.com/advisories/30766 http://secunia.com/advisories/30721 http://secunia.com/advisories/30821 http://secunia.com/advisories/30819 http://secunia.com/advisories/30967 http://secunia.com/advisories/31707 http://secunia.com/advisories/31709 http://secunia.com/advisories/31711 http://secunia.com/advisories/31712 http://secunia.com/advisories/31856 http://secunia.com/advisories/31900 http://secunia.com/advisories/31823 http://secunia.com/advisories/31577 http://secunia.com/advisories/31479 http://secunia.com/advisories/33937 Common Vulnerability Exposure (CVE) ID: CVE-2008-1807 http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=716 BugTraq ID: 29641 http://www.securityfocus.com/bid/29641 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9767 http://securitytracker.com/id?1020239 Common Vulnerability Exposure (CVE) ID: CVE-2008-1808 http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=717 http://www.redhat.com/support/errata/RHSA-2009-0329.html BugTraq ID: 29637 http://www.securityfocus.com/bid/29637 BugTraq ID: 29639 http://www.securityfocus.com/bid/29639 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11188 http://secunia.com/advisories/35204 http://securitytracker.com/id?1020240
Copyright	Copyright (c) 2008 E-Soft Inc. http://www.securityspace.com

This is only one of 32582 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.

New User Registration Email: UserID: Passwd: Please email me your monthly newsletters, informing the latest services, improvements & surveys. Please email me a vulnerability test announcement whenever a new test is added.     Privacy

Registered User Login   UserID:     Passwd:     Forgot userid or passwd? Email/Userid: