Document CVE-2017-8105.

2017-04-26 09:16:45 +02:00 · 2017-04-26 09:16:45 +02:00 · 7752c68c50
parent 7fa5743ae6
commit 7752c68c50
1 changed files with 5 additions and 0 deletions
--- a/docs/CHANGES
+++ b/docs/CHANGES
@ -29,6 +29,11 @@ CHANGES BETWEEN 2.7.1 and 2.8
      now scales  the font linearly  again (bug introduced  in version
      2.4.6).

+    - CVE-2017-8105: Older FreeType versions has an out-of-bounds write
+      caused by a heap-based buffer overflow related to the Type 1 fonts.
+
+        http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8105
+

  III. MISCELLANEOUS