Format: 1.8 Date: Thu, 13 Dec 2018 14:39:37 -0500 Source: fontforge Binary: fontforge fontforge-nox fontforge-common libfontforge-dev libfontforge1 libgdraw4 python-fontforge fontforge-dbg Architecture: armhf Version: 20120731.b-7.1ubuntu0.1 Distribution: xenial Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Mike Salvatore Description: fontforge - font editor fontforge-common - font editor (common files) fontforge-dbg - debugging symbols for fontforge fontforge-nox - font editor - non-X version libfontforge-dev - font editor - runtime library (development files) libfontforge1 - font editor - runtime library libgdraw4 - font editor - runtime graphics and widget library python-fontforge - font editor - Python bindings Changes: fontforge (20120731.b-7.1ubuntu0.1) xenial-security; urgency=medium . * SECURITY UPDATE: heap-based buffer over-read - debian/patches/CVE-2017-11568.patch: fix out of bounds read condition and buffer overflow in fontforge/parsettf.c, fontforge/psread.c, fontforge/tottf.c. - CVE-2017-11568 * SECURITY UPDATE: heap-based buffer over-read in readttfcopyrights - debian/patches/CVE-2017-11569-and-2017-11575.patch: fix out of bounds read condition in fontforge/parsettf.c. - CVE-2017-11569 - CVE-2017-11575 * SECURITY UPDATE: stack-based buffer overflow - debian/patches/CVE-2017-11571.patch: fix buffer overflow in fontforge/parsettf.c. - CVE-2017-11571 * SECURITY UPDATE: stack underflow condition in readcfftopdicts - debian/patches/CVE-2017-11572-and-2017-11576.patch: prevent stack uderflow condition in fontforge/parsettf.c. - CVE-2017-11572 - CVE-2017-11576 * SECURITY UPDATE: heap-based buffer overflow in readcffset - debian/patches/CVE-2017-11574.patch: fix buffer condition in fontforge/parsetff.c. - CVE-2017-11574 * SECURITY UPDATE: buffer over-read in getsid - debian/patches/CVE-2017-11577.patch: fix out of bounds read in fontforge/parsettf.c - CVE-2017-11577 Checksums-Sha1: 70e717454a93c3693db42c963ce71efd262dfa6a 6989992 fontforge-dbg_20120731.b-7.1ubuntu0.1_armhf.deb 4e04ba18d42f5f9fcb29c1d9de507bb020cf1c13 1060 fontforge-dbgsym_20120731.b-7.1ubuntu0.1_armhf.ddeb 2306c682f0f4ac3766f8a6522118b6e3db66f02e 1136 fontforge-nox-dbgsym_20120731.b-7.1ubuntu0.1_armhf.ddeb 6f0b598f69af4cb825b90976384610da7ebea88b 8638 fontforge-nox_20120731.b-7.1ubuntu0.1_armhf.deb 80f5c66063d8e188e213d101b0417756ee192742 819756 fontforge_20120731.b-7.1ubuntu0.1_armhf.deb 54712a8abc9e240ff0ef38aa74f574515eb8c7fc 990 libfontforge-dev-dbgsym_20120731.b-7.1ubuntu0.1_armhf.ddeb a93a885c34c9947c9c4d86c75cf34e844f36be5b 103378 libfontforge-dev_20120731.b-7.1ubuntu0.1_armhf.deb 1a3abd28d8624d9f73e38137bf622e4aa572fcae 978 libfontforge1-dbgsym_20120731.b-7.1ubuntu0.1_armhf.ddeb 68d8210c45eaa41534b7eb67c66f6b503bd1b164 1585448 libfontforge1_20120731.b-7.1ubuntu0.1_armhf.deb 256df9494432681ca2605636bbf8fbebc1eef3a0 994 libgdraw4-dbgsym_20120731.b-7.1ubuntu0.1_armhf.ddeb b179b9a6448c90efdc8e632094c60ccf40986a66 259542 libgdraw4_20120731.b-7.1ubuntu0.1_armhf.deb f56f9da1f8e015b7bb32e983aa6c9871bde00bf6 4922 python-fontforge_20120731.b-7.1ubuntu0.1_armhf.deb Checksums-Sha256: 9032dd641eeecf869a767aefc8f1ad578745d2eb1ab49c5bdfd3dc5366aeea5f 6989992 fontforge-dbg_20120731.b-7.1ubuntu0.1_armhf.deb 2e3d594497f8579ba704568bf3fa5763543d2134ce4972b426d21d669ed83a7c 1060 fontforge-dbgsym_20120731.b-7.1ubuntu0.1_armhf.ddeb c70cb5ef76d53a1ec1e293b9f8457287b82d513e6e8040393721fb118bf6a5ac 1136 fontforge-nox-dbgsym_20120731.b-7.1ubuntu0.1_armhf.ddeb dd8bbdc6deb6a70d89cb7725ea58b5cae97cff75a6cdfacd96cf9a4ebdceae8a 8638 fontforge-nox_20120731.b-7.1ubuntu0.1_armhf.deb 7cb3fffaaea3376f66d5849eedb1e2a14a2893d08c43962ddb72c78660996a66 819756 fontforge_20120731.b-7.1ubuntu0.1_armhf.deb 5d7a41ff0baaa7966617461a944787f09171c0cabe2fde71b1e4110c80e68a72 990 libfontforge-dev-dbgsym_20120731.b-7.1ubuntu0.1_armhf.ddeb fd34eddd842ca5a9c406634c7b5ed67770b99b7b8f6a19bcaf5eac5dcca33456 103378 libfontforge-dev_20120731.b-7.1ubuntu0.1_armhf.deb c293769872f1c1127cf2ab5545d0da5db6b75a49e7c8239362f15fa6bf23b484 978 libfontforge1-dbgsym_20120731.b-7.1ubuntu0.1_armhf.ddeb 6f5d887f5ea4531151ed9317d2b681222bc9fa104d79e5590b255f0ff369b11d 1585448 libfontforge1_20120731.b-7.1ubuntu0.1_armhf.deb ad332582d2a4a1e56dfdf5c0c8409dec1d9d4216a240fc53d3516aa66f449d12 994 libgdraw4-dbgsym_20120731.b-7.1ubuntu0.1_armhf.ddeb 6a5a64a1c8af12a819421307f079b9ff84fd6cc1d29771482d3c4047bf0d1173 259542 libgdraw4_20120731.b-7.1ubuntu0.1_armhf.deb 3bc2f84c461c7d5a8fcaa26f6ccf63da996fb4098553457a928b263908fcad93 4922 python-fontforge_20120731.b-7.1ubuntu0.1_armhf.deb Files: 10ee16093bfa10eaf9504133917abd12 6989992 debug extra fontforge-dbg_20120731.b-7.1ubuntu0.1_armhf.deb 57cb7cf9de7559eb2a31345a3673d675 1060 fonts extra fontforge-dbgsym_20120731.b-7.1ubuntu0.1_armhf.ddeb dbb1ed696ef388bb428f4c9abe07a3d7 1136 fonts extra fontforge-nox-dbgsym_20120731.b-7.1ubuntu0.1_armhf.ddeb 2a9417303c2f020d3ece92ed6b69d31d 8638 fonts optional fontforge-nox_20120731.b-7.1ubuntu0.1_armhf.deb b3b2c8d95decc34bc48171aef12a0579 819756 fonts optional fontforge_20120731.b-7.1ubuntu0.1_armhf.deb ed63223196ae6fc668901a198daec0b3 990 libdevel extra libfontforge-dev-dbgsym_20120731.b-7.1ubuntu0.1_armhf.ddeb 60101186f626a3c3a1de84cb197aa571 103378 libdevel optional libfontforge-dev_20120731.b-7.1ubuntu0.1_armhf.deb 72596dfeba6b163eafc98b0c3b98530b 978 libs extra libfontforge1-dbgsym_20120731.b-7.1ubuntu0.1_armhf.ddeb 64bcc50b1fd79dd83a79f4d9a92297a9 1585448 libs optional libfontforge1_20120731.b-7.1ubuntu0.1_armhf.deb a7cfea8107eb40cb8fc2a79a842b72e8 994 libs extra libgdraw4-dbgsym_20120731.b-7.1ubuntu0.1_armhf.ddeb 776e1eb7dac685246088fbc68ebf7f28 259542 libs optional libgdraw4_20120731.b-7.1ubuntu0.1_armhf.deb 2590d4de954eb06a82578e433f51371b 4922 python optional python-fontforge_20120731.b-7.1ubuntu0.1_armhf.deb Original-Maintainer: Debian Fonts Task Force