What is RHSA-2010:0864?

RHSA-2010:0864 is a security advisory published by Red Hat Product Security with High severity. Red Hat Security Advisory: freetype security update

Which CVE IDs does RHSA-2010:0864 cover?

RHSA-2010:0864 covers the following CVE IDs: CVE-2010-2805, CVE-2010-2806, CVE-2010-2808, CVE-2010-3311. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

RHSA-2010:0864High

Red Hat Security Advisory: freetype security update

Vendor

Red Hat Product Security

Published

November 10, 2010

Last Modified

June 27, 2026

🔗 CVE IDs covered (4)

CVE-2010-2805 →CVE-2010-2806 →CVE-2010-2808 →CVE-2010-3311 →

📋 Description

CVE-2010-2805 — freetype: FT_Stream_EnterFrame() does not properly validate certain position values CVE-2010-2806 — FreeType: Heap-based buffer overflow by processing FontType42 fonts with negative length of SFNT strings (FT bug #30656) CVE-2010-2808 — FreeType: Stack-based buffer overflow by processing certain LWFN fonts CVE-2010-3311 — freetype: Input stream position error by processing Compact Font Format (CFF) font files

🔗 References (7)

selfhttps://access.redhat.com/errata/RHSA-2010:0864
externalhttps://access.redhat.com/security/updates/classification/#important
externalhttps://bugzilla.redhat.com/show_bug.cgi?id=621907
externalhttps://bugzilla.redhat.com/show_bug.cgi?id=621980
externalhttps://bugzilla.redhat.com/show_bug.cgi?id=623625
externalhttps://bugzilla.redhat.com/show_bug.cgi?id=625626
selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0864.json