Package        : freetype
Version        : 2.5.2-3+deb8u3
CVE ID         : CVE-2015-9290


A buffer over-read in the t1-parser of freetype, a font engine, has been 
found and fixed by checking limits more sensible.


For Debian 8 "Jessie", this problem has been fixed in version
2.5.2-3+deb8u3.

We recommend that you upgrade your freetype packages.

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS

Debian LTS: DLA-1887-1: freetype security update

August 15, 2019
A buffer over-read in the t1-parser of freetype, a font engine, has been found and fixed by checking limits more sensible

Summary


For Debian 8 "Jessie", this problem has been fixed in version
2.5.2-3+deb8u3.

We recommend that you upgrade your freetype packages.

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS



Severity
Package : freetype
Version : 2.5.2-3+deb8u3
CVE ID : CVE-2015-9290

Related News