Ubuntu
freetype package

freetype 2.4.2-2ubuntu0.3 source package in Ubuntu

Changelog

freetype (2.4.2-2ubuntu0.3) maverick-security; urgency=low

  * SECURITY UPDATE: Arbitrary code execution via crafted Type 1 font
    - debian/patches-freetype/CVE-2011-3256.patch: Sanitize Type 1 font inputs
      in src/base/ftbitmap.c, src/psaux/t1decode.c, src/raster/ftrend1.c, and
      src/truetype/ttgxvar.c. Based on upstream patch.
    - CVE-2011-3256
  * SECURITY UPDATE: Arbitrary code execution via crafted CID-keyed PS font
    - debian/patches-freetype/CVE-2011-3439.patch: Sanitize CID-keyed
      PostScript font inputs in src/cid/cidload.c. Based on upstream patch.
    - CVE-2011-3439
 -- Tyler Hicks <email address hidden>   Thu, 17 Nov 2011 13:59:14 -0600

Upload details

Uploaded by:
Tyler Hicks
Uploaded to:
Maverick
Original maintainer:
Ubuntu Developers
Architectures:
any
Section:
libs
Urgency:
Low Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
freetype_2.4.2.orig.tar.gz 1.6 MiB 412f2a071c17562efd6d095a1c52f39036d36ef2c490bf7c1104f83329247f2e
freetype_2.4.2-2ubuntu0.3.diff.gz 38.4 KiB 3ff1cf05348aa9a3812cd9b97c65d5966f740725e5cf06e569b71b8a3fd0de47
freetype_2.4.2-2ubuntu0.3.dsc 1.9 KiB d4a59b8e3563808c45e3eeef94c457c9ba26147e40104fc2d0d204bed464d4d6

View changes file

Binary packages built by this source

freetype2-demos: No summary available for freetype2-demos in ubuntu maverick.

No description available for freetype2-demos in ubuntu maverick.

libfreetype6: No summary available for libfreetype6 in ubuntu maverick.

No description available for libfreetype6 in ubuntu maverick.

libfreetype6-dev: No summary available for libfreetype6-dev in ubuntu maverick.

No description available for libfreetype6-dev in ubuntu maverick.

libfreetype6-udeb: No summary available for libfreetype6-udeb in ubuntu maverick.

No description available for libfreetype6-udeb in ubuntu maverick.