Ubuntu
freetype package

freetype 2.3.5-1ubuntu4.8.04.7 source package in Ubuntu

Changelog

freetype (2.3.5-1ubuntu4.8.04.7) hardy-security; urgency=low

  * SECURITY UPDATE: Arbitrary code execution via crafted Type 1 font
    - debian/patches-freetype/CVE-2011-3256.patch: Sanitize Type 1 font inputs
      in src/base/ftbitmap.c, src/psaux/t1decode.c, src/raster/ftrend1.c, and
      src/truetype/ttgxvar.c. Based on upstream patch.
    - CVE-2011-3256
  * SECURITY UPDATE: Arbitrary code execution via crafted CID-keyed PS font
    - debian/patches-freetype/CVE-2011-3439.patch: Sanitize CID-keyed
      PostScript font inputs in src/cid/cidload.c. Based on upstream patch.
    - CVE-2011-3439
 -- Tyler Hicks <email address hidden>   Thu, 17 Nov 2011 13:59:42 -0600

Upload details

Uploaded by:
Tyler Hicks
Uploaded to:
Hardy
Original maintainer:
Ubuntu Developers
Architectures:
any
Section:
libs
Urgency:
Low Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
freetype_2.3.5.orig.tar.gz 1.5 MiB 19a37dd2f5f1d1bed42040601581c5ca660708f25bf64703ab0444e376ad4927
freetype_2.3.5-1ubuntu4.8.04.7.diff.gz 42.8 KiB 61ab42bc8f24d88a86628ca9e8c358e047e52f1edaf37f7dc7b80af4315cf491
freetype_2.3.5-1ubuntu4.8.04.7.dsc 1.5 KiB 3b672abcb3bf072aee92e8738a7369c726974c33351bc7fab7f3e2463625a3fa

View changes file

Binary packages built by this source

freetype2-demos: No summary available for freetype2-demos in ubuntu hardy.

No description available for freetype2-demos in ubuntu hardy.

libfreetype6: No summary available for libfreetype6 in ubuntu hardy.

No description available for libfreetype6 in ubuntu hardy.

libfreetype6-dev: No summary available for libfreetype6-dev in ubuntu hardy.

No description available for libfreetype6-dev in ubuntu hardy.

libfreetype6-udeb: No summary available for libfreetype6-udeb in ubuntu hardy.

No description available for libfreetype6-udeb in ubuntu hardy.