[ft-devel] Freetype updated in today's Mac OS X security patch

[Sean McBride]

For interest:

<http://support.apple.com/kb/HT3438>



CVE-ID: CVE-2006-1861, CVE-2006-3467, CVE-2007-1351, CVE-2008-1806,
CVE-2008-1807, CVE-2008-1808

Available for: Mac OS X v10.4.11, Mac OS X Server v10.4.11

Impact: Multiple vulnerabilities in FreeType v2.1.4

Description: Multiple vulnerabilities exist in FreeType v2.1.4, the most
serious of which may lead to arbitrary code execution when processing a
maliciously crafted font. This update addresses the issues by
incorporating the security fixes from version 2.3.6 of FreeType. Further
information is available via the FreeType site at http://
www.freetype.org/ The issues are already addressed in systems running
Mac OS X v10.5.6.

--
____________________________________________________________
Sean McBride, B. Eng                 address@hidden
Rogue Research                        www.rogue-research.com
Mac Software Developer              Montréal, Québec, Canada