[ubuntu/dapper-security] freetype, freetype (delayed) 2.1.10-1ubuntu2.10 (Accepted)
Ubuntu Installer
archive at ubuntu.com
Thu Nov 4 13:11:12 GMT 2010
freetype (2.1.10-1ubuntu2.10) dapper-security; urgency=low
* SECURITY UPDATE: denial of service and possible arbitrary code
execution via libXft overflow.
- debian/patches/425-CVE-2010-3311.patch: correctly validate position
in src/base/ftstream.c.
- CVE-2010-3311
* SECURITY UPDATE: denial of service and possible code execution via
TrueType GX font
- debian/patches/426-CVE-2010-3855.patch: add bounds checks to
src/truetype/ttgxvar.c.
- CVE-2010-3855
Date: Tue, 02 Nov 2010 15:17:07 -0400
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Maintainer: Will Newton <will at debian.org>
https://launchpad.net/ubuntu/dapper/+source/freetype/2.1.10-1ubuntu2.10
-------------- next part --------------
Format: 1.7
Date: Tue, 02 Nov 2010 15:17:07 -0400
Source: freetype
Binary: freetype2-demos libfreetype6-udeb libfreetype6 libfreetype6-dev
Architecture: source
Version: 2.1.10-1ubuntu2.10
Distribution: dapper-security
Urgency: low
Maintainer: Will Newton <will at debian.org>
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Description:
freetype2-demos - FreeType 2 demonstration programs
libfreetype6 - FreeType 2 font engine, shared library files
libfreetype6-dev - FreeType 2 font engine, development files
libfreetype6-udeb - FreeType 2 font engine for the debian-installer
Changes:
freetype (2.1.10-1ubuntu2.10) dapper-security; urgency=low
.
* SECURITY UPDATE: denial of service and possible arbitrary code
execution via libXft overflow.
- debian/patches/425-CVE-2010-3311.patch: correctly validate position
in src/base/ftstream.c.
- CVE-2010-3311
* SECURITY UPDATE: denial of service and possible code execution via
TrueType GX font
- debian/patches/426-CVE-2010-3855.patch: add bounds checks to
src/truetype/ttgxvar.c.
- CVE-2010-3855
Files:
014b2444161d175d000b4a40143bc6db 1361 libs optional freetype_2.1.10-1ubuntu2.10.dsc
cd55b858aab3f2c897e4fe17cc9aa070 71819 libs optional freetype_2.1.10-1ubuntu2.10.diff.gz
More information about the dapper-changes
mailing list