[ubuntu/dapper-security] freetype, freetype (delayed) 2.1.10-1ubuntu2.10 (Accepted)

Ubuntu Installer archive at ubuntu.com
Thu Nov 4 13:11:12 GMT 2010


freetype (2.1.10-1ubuntu2.10) dapper-security; urgency=low

  * SECURITY UPDATE: denial of service and possible arbitrary code
    execution via libXft overflow.
    - debian/patches/425-CVE-2010-3311.patch: correctly validate position
      in src/base/ftstream.c.
    - CVE-2010-3311
  * SECURITY UPDATE: denial of service and possible code execution via
    TrueType GX font
    - debian/patches/426-CVE-2010-3855.patch: add bounds checks to
      src/truetype/ttgxvar.c.
    - CVE-2010-3855

Date: Tue, 02 Nov 2010 15:17:07 -0400
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Maintainer: Will Newton <will at debian.org>
https://launchpad.net/ubuntu/dapper/+source/freetype/2.1.10-1ubuntu2.10
-------------- next part --------------
Format: 1.7
Date: Tue, 02 Nov 2010 15:17:07 -0400
Source: freetype
Binary: freetype2-demos libfreetype6-udeb libfreetype6 libfreetype6-dev
Architecture: source
Version: 2.1.10-1ubuntu2.10
Distribution: dapper-security
Urgency: low
Maintainer: Will Newton <will at debian.org>
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Description: 
 freetype2-demos - FreeType 2 demonstration programs
 libfreetype6 - FreeType 2 font engine, shared library files
 libfreetype6-dev - FreeType 2 font engine, development files
 libfreetype6-udeb - FreeType 2 font engine for the debian-installer
Changes: 
 freetype (2.1.10-1ubuntu2.10) dapper-security; urgency=low
 .
   * SECURITY UPDATE: denial of service and possible arbitrary code
     execution via libXft overflow.
     - debian/patches/425-CVE-2010-3311.patch: correctly validate position
       in src/base/ftstream.c.
     - CVE-2010-3311
   * SECURITY UPDATE: denial of service and possible code execution via
     TrueType GX font
     - debian/patches/426-CVE-2010-3855.patch: add bounds checks to
       src/truetype/ttgxvar.c.
     - CVE-2010-3855
Files: 
 014b2444161d175d000b4a40143bc6db 1361 libs optional freetype_2.1.10-1ubuntu2.10.dsc
 cd55b858aab3f2c897e4fe17cc9aa070 71819 libs optional freetype_2.1.10-1ubuntu2.10.diff.gz


More information about the dapper-changes mailing list