Format: 1.8 Date: Thu, 13 Dec 2018 14:39:37 -0500 Source: fontforge Binary: fontforge fontforge-nox fontforge-common libfontforge-dev libfontforge1 libgdraw4 python-fontforge fontforge-dbg Architecture: ppc64el Version: 20120731.b-7.1ubuntu0.1 Distribution: xenial Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Mike Salvatore Description: fontforge - font editor fontforge-common - font editor (common files) fontforge-dbg - debugging symbols for fontforge fontforge-nox - font editor - non-X version libfontforge-dev - font editor - runtime library (development files) libfontforge1 - font editor - runtime library libgdraw4 - font editor - runtime graphics and widget library python-fontforge - font editor - Python bindings Changes: fontforge (20120731.b-7.1ubuntu0.1) xenial-security; urgency=medium . * SECURITY UPDATE: heap-based buffer over-read - debian/patches/CVE-2017-11568.patch: fix out of bounds read condition and buffer overflow in fontforge/parsettf.c, fontforge/psread.c, fontforge/tottf.c. - CVE-2017-11568 * SECURITY UPDATE: heap-based buffer over-read in readttfcopyrights - debian/patches/CVE-2017-11569-and-2017-11575.patch: fix out of bounds read condition in fontforge/parsettf.c. - CVE-2017-11569 - CVE-2017-11575 * SECURITY UPDATE: stack-based buffer overflow - debian/patches/CVE-2017-11571.patch: fix buffer overflow in fontforge/parsettf.c. - CVE-2017-11571 * SECURITY UPDATE: stack underflow condition in readcfftopdicts - debian/patches/CVE-2017-11572-and-2017-11576.patch: prevent stack uderflow condition in fontforge/parsettf.c. - CVE-2017-11572 - CVE-2017-11576 * SECURITY UPDATE: heap-based buffer overflow in readcffset - debian/patches/CVE-2017-11574.patch: fix buffer condition in fontforge/parsetff.c. - CVE-2017-11574 * SECURITY UPDATE: buffer over-read in getsid - debian/patches/CVE-2017-11577.patch: fix out of bounds read in fontforge/parsettf.c - CVE-2017-11577 Checksums-Sha1: 0a7e83b140ca4e4873c7387a23f1bca00986a679 8034648 fontforge-dbg_20120731.b-7.1ubuntu0.1_ppc64el.deb 34f035b4b2861332bc449413a27c4659a61153c0 1064 fontforge-dbgsym_20120731.b-7.1ubuntu0.1_ppc64el.ddeb 2eebd290be4cb937ac33e96c6c6a04407788213d 1140 fontforge-nox-dbgsym_20120731.b-7.1ubuntu0.1_ppc64el.ddeb 6d7aa5a3d3558e69ffe48091552f09e1762b26d0 8940 fontforge-nox_20120731.b-7.1ubuntu0.1_ppc64el.deb 5b0c11d403fe1f2a99771d5c22618788c338f956 928468 fontforge_20120731.b-7.1ubuntu0.1_ppc64el.deb 5c7b0ce65c484748a18a3aea84cbd3d7973a0c3b 996 libfontforge-dev-dbgsym_20120731.b-7.1ubuntu0.1_ppc64el.ddeb 8aabb3c544a0c42eb267fd7b57f3910826582df9 103344 libfontforge-dev_20120731.b-7.1ubuntu0.1_ppc64el.deb e2a06789cb181cf2b9abcd843afc0c4e108bb2e8 980 libfontforge1-dbgsym_20120731.b-7.1ubuntu0.1_ppc64el.ddeb 7f1600d9b372064a7ceaca995358d121ace43418 1880440 libfontforge1_20120731.b-7.1ubuntu0.1_ppc64el.deb 18d13113efbca9be9f3d2536c845cdb24b9ffcc8 996 libgdraw4-dbgsym_20120731.b-7.1ubuntu0.1_ppc64el.ddeb f5df1d3dfef0bc7381c7e59da5546533362a9e68 336694 libgdraw4_20120731.b-7.1ubuntu0.1_ppc64el.deb 09843f6c4a5899602ea94d382210193ff6722adc 5032 python-fontforge_20120731.b-7.1ubuntu0.1_ppc64el.deb Checksums-Sha256: ac10991e1b7c64d6a54b0cc35572a3dfd40f2dcc1930a52173d40bc32d0b936c 8034648 fontforge-dbg_20120731.b-7.1ubuntu0.1_ppc64el.deb 127875b205efb1793aaa13b77915aabcff4c12a9ff1ff672021afe47343179eb 1064 fontforge-dbgsym_20120731.b-7.1ubuntu0.1_ppc64el.ddeb b8c636530cf27296170888ace5323a7f56e1b6fdaf79b48aee476ec8cf37f47c 1140 fontforge-nox-dbgsym_20120731.b-7.1ubuntu0.1_ppc64el.ddeb d78da72394747ca242c773f266808bf034fb7ba4cb78732aa235bfd895440b21 8940 fontforge-nox_20120731.b-7.1ubuntu0.1_ppc64el.deb 6c30e41f7f7517fa31d4bb44acc42ce756c96a322fe2344f69323943ed45bb6e 928468 fontforge_20120731.b-7.1ubuntu0.1_ppc64el.deb 05e302004614fd82b0f12f1dd29c26fa38a9466d240c672d945b50eff26627e2 996 libfontforge-dev-dbgsym_20120731.b-7.1ubuntu0.1_ppc64el.ddeb 8b95f477b329ff50c5eb46e9d2523a626576ea2893c0319487d9492806bc7557 103344 libfontforge-dev_20120731.b-7.1ubuntu0.1_ppc64el.deb 33bed34dcee4571b95417b7c72738b497200e6e918ed779f1a11633bdf3087a5 980 libfontforge1-dbgsym_20120731.b-7.1ubuntu0.1_ppc64el.ddeb 512901c05e03cac93ca0787c9179e0a8e63f903cfb6e1ea61e09ac84c95e3ef4 1880440 libfontforge1_20120731.b-7.1ubuntu0.1_ppc64el.deb 3617da80fef9df4ce25e4a3773cba6346c69f7fa81a5df64148827ceb8120cc0 996 libgdraw4-dbgsym_20120731.b-7.1ubuntu0.1_ppc64el.ddeb c9ba7e21c593eefa61d20079422c1f86d9c160e2d45b937fb9cd772284daf660 336694 libgdraw4_20120731.b-7.1ubuntu0.1_ppc64el.deb e9092f8aa0d87ecf21d66e7b64a03d01ddabdfe3ade7c5d9da87dc1a3676284b 5032 python-fontforge_20120731.b-7.1ubuntu0.1_ppc64el.deb Files: dc7ffb877af22dc8dd1332e3284a466c 8034648 debug extra fontforge-dbg_20120731.b-7.1ubuntu0.1_ppc64el.deb 96487b23e4224cfd3eb74f07acad5016 1064 fonts extra fontforge-dbgsym_20120731.b-7.1ubuntu0.1_ppc64el.ddeb 245f0a02a9295cfbc68a0a6620fd45fd 1140 fonts extra fontforge-nox-dbgsym_20120731.b-7.1ubuntu0.1_ppc64el.ddeb 72f1f17c174c6bff198ba90f40766786 8940 fonts optional fontforge-nox_20120731.b-7.1ubuntu0.1_ppc64el.deb e8850d33b3c8a2ecac066353ad1cd7ef 928468 fonts optional fontforge_20120731.b-7.1ubuntu0.1_ppc64el.deb 54611c0984beed399fe28750693406dd 996 libdevel extra libfontforge-dev-dbgsym_20120731.b-7.1ubuntu0.1_ppc64el.ddeb 96031e9cbbf02fecec5483d0424f7df4 103344 libdevel optional libfontforge-dev_20120731.b-7.1ubuntu0.1_ppc64el.deb 49e7e3dfee3d071136de3cfb3bf38b5d 980 libs extra libfontforge1-dbgsym_20120731.b-7.1ubuntu0.1_ppc64el.ddeb 28ed3eea22320e8317fab197546bb99b 1880440 libs optional libfontforge1_20120731.b-7.1ubuntu0.1_ppc64el.deb a8db531fb8bddc58524dc481f14f6911 996 libs extra libgdraw4-dbgsym_20120731.b-7.1ubuntu0.1_ppc64el.ddeb c0d32082d4a1b4590ef722d93ec967d4 336694 libs optional libgdraw4_20120731.b-7.1ubuntu0.1_ppc64el.deb 314c8da3661a89d7117e2ecb21e269e6 5032 python optional python-fontforge_20120731.b-7.1ubuntu0.1_ppc64el.deb Original-Maintainer: Debian Fonts Task Force