来源:Ubuntu官网
发布日期:2020-10-20
阅读次数:1371
评论:0
更新标题
USN-4593-1: FreeType vulnerability
更新详情
freetype vulnerability
A security issue affects these releases of Ubuntu and its derivatives:
Ubuntu 20.04 LTS
Ubuntu 18.04 LTS
Ubuntu 16.04 LTS
Summary
FreeType could be made to crash or run programs as your login if it opened a specially crafted file.
Software Description
freetype - FreeType 2 is a font engine library
Details
Sergei Glazunov discovered that FreeType did not correctly handle certain malformed font files. If a user were tricked into using a specially crafted font file, a remote attacker could cause FreeType to crash or possibly execute arbitrary code with user privileges.
Update instructions
The problem can be corrected by updating your system to the following package versions:
Ubuntu 20.04 LTS
libfreetype6 - 2.10.1-2ubuntu0.1
Ubuntu 18.04 LTS
libfreetype6 - 2.8.1-2ubuntu2.1
Ubuntu 16.04 LTS
libfreetype6 - 2.6.1-0.1ubuntu2.5
To update your system, please follow these instructions: https://wiki.ubuntu.com/Security/Upgrades.
After a standard system update you need to restart your session to make all the necessary changes.
References
CVE-2020-15999
]]>
软件描述
Ubuntu是一个以桌面应用为主的Linux操作系统
评论