Ubuntu
libxfont package

[Sync request] Sync libxfont (1:1.3.1-2) from Debian unstable (main)

Bug #183893 reported by Michael Bienia
4
Affects Status Importance Assigned to Milestone
libxfont (Ubuntu)
Fix Released
Wishlist
Unassigned

Bug Description

Please sync libxfont (1:1.3.1-2) from Debian unstable (main).

The current Ubuntu package has no changes.
The new package builds cleanly in a hardy pbuilder.

Thanks.

Changelog:

libxfont (1:1.3.1-2) unstable; urgency=high

  * High urgency upload for security fix.
  * Fix a buffer overflow in the PCF font parser (CVE-2008-0006).
  * debian/control updates
    + add myself to Uploaders, and remove Branden and Fabio with their
      permission
    + s/^XS-Vcs/Vcs/
    + bump Standards-Version to 3.7.3 (no changes)
    + libxfont1 is Section: libs
    + libxfont-dev and libxfont1-dbg are Section: libdevel

 -- Julien Cristau <email address hidden> Thu, 17 Jan 2008 00:09:38 +0100

CVE References

Timo Aaltonen (tjaalton)
Changed in libxfont:
importance: Undecided → Wishlist
status: New → Confirmed
Revision history for this message
Daniel Holbach (dholbach) wrote :

ACKed.

Revision history for this message
Martin Pitt (pitti) wrote :

synced

Changed in libxfont:
status: Confirmed → Fix Released
Revision history for this message
Martin Pitt (pitti) wrote :

We do have Ubuntu changes. Please give a rationale why they can be dropped.

Changed in libxfont:
status: Fix Released → Incomplete
Revision history for this message
Timo Aaltonen (tjaalton) wrote :

they were added after this sync request, and the same security patch is in the debian version.

Revision history for this message
Sebastien Bacher (seb128) wrote :

[Updating] libxfont (1:1.3.1-1ubuntu1 [Ubuntu] < 1:1.3.1-2 [Debian])
 * Trying to add libxfont...
  - <libxfont_1.3.1.orig.tar.gz: already in distro - downloading from librarian>
  - <libxfont_1.3.1-2.diff.gz: downloading from http://ftp.uk.debian.org/debian/>
  - <libxfont_1.3.1-2.dsc: downloading from http://ftp.uk.debian.org/debian/>
I: libxfont [main] -> libxfont1-dbg_1:1.3.1-1ubuntu1 [main].
I: libxfont [main] -> libxfont-dev_1:1.3.1-1ubuntu1 [main].
I: libxfont [main] -> libxfont1_1:1.3.1-1ubuntu1 [main].

Changed in libxfont:
status: Incomplete → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.