Security Update: freetype2-2.3.11-2

[Texstar]

Summary
=======

Multiple vulnerabilities have been fixed in FreeType.


Description
===========

CVE-2010-1797:

Buffer  overflow errors   in   the   "cff_decoder_parse_charstrings()" 
[src/cff/cffgload.c] function when processing Compact Font Format (CFF)
opcodes allows remote attackers to crash an affected application linked
against a vulnerable library, or execute arbitrary code via a malicious
font. Stack overflow vulnerability was found allow remote attarckers to
execute arbitrary code.



CVE-2010-2805, CVE-2010-2806, CVE-2010-2807, CVE-2010-2808:

Memory corruption flaws were found in the way FreeType  font  rendering
engine processed certain Adobe Type 1 Mac Font File  (LWFN)  fonts.  An
attacker could use this flaw to create a  specially-crafted  font  file
that, when opened, would cause an application linked against libfreetype
to crash, or, possibly execute arbitrary code.


This package will part of your Synaptic Package Manager updates.