[ubuntu/hardy-security] freetype, freetype (delayed) 2.3.5-1ubuntu4.8.04.6 (Accepted)

[Ubuntu Installer]

freetype (2.3.5-1ubuntu4.8.04.6) hardy-security; urgency=low

  * SECURITY UPDATE: denial of service and possible arbitrary code
    execution via libXft overflow.
    - debian/patches/CVE-2010-3311.patch: correctly validate position in
      src/base/ftstream.c.
    - CVE-2010-3311
  * SECURITY UPDATE: denial of service and possible code execution via
    improper error handling of SHZ bytecode instruction
    - debian/patches/CVE-2010-3814.patch: add bounds check to
      src/truetype/ttinterp.c.
    - CVE-2010-3814
  * SECURITY UPDATE: denial of service and possible code execution via
    TrueType GX font
    - debian/patches/CVE-2010-3855.patch: add bounds checks to
      src/truetype/ttgxvar.c.
    - CVE-2010-3855

Date: Tue, 02 Nov 2010 15:01:15 -0400
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Maintainer: Ubuntu Core Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/hardy/+source/freetype/2.3.5-1ubuntu4.8.04.6
-------------- next part --------------
Format: 1.7
Date: Tue, 02 Nov 2010 15:01:15 -0400
Source: freetype
Binary: libfreetype6 libfreetype6-dev freetype2-demos libfreetype6-udeb
Architecture: source
Version: 2.3.5-1ubuntu4.8.04.6
Distribution: hardy-security
Urgency: low
Maintainer: Ubuntu Core Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Description: 
 freetype2-demos - FreeType 2 demonstration programs
 libfreetype6 - FreeType 2 font engine, shared library files
 libfreetype6-dev - FreeType 2 font engine, development files
 libfreetype6-udeb - FreeType 2 font engine for the debian-installer
Changes: 
 freetype (2.3.5-1ubuntu4.8.04.6) hardy-security; urgency=low
 .
   * SECURITY UPDATE: denial of service and possible arbitrary code
     execution via libXft overflow.
     - debian/patches/CVE-2010-3311.patch: correctly validate position in
       src/base/ftstream.c.
     - CVE-2010-3311
   * SECURITY UPDATE: denial of service and possible code execution via
     improper error handling of SHZ bytecode instruction
     - debian/patches/CVE-2010-3814.patch: add bounds check to
       src/truetype/ttinterp.c.
     - CVE-2010-3814
   * SECURITY UPDATE: denial of service and possible code execution via
     TrueType GX font
     - debian/patches/CVE-2010-3855.patch: add bounds checks to
       src/truetype/ttgxvar.c.
     - CVE-2010-3855
Files: 
 ff653c0c0638614078e0add34f8b2caa 1547 libs optional freetype_2.3.5-1ubuntu4.8.04.6.dsc
 423fc30bf2da50ccd1f2d19d45a5c514 41916 libs optional freetype_2.3.5-1ubuntu4.8.04.6.diff.gz
Original-Maintainer: Steve Langasek <vorlon at debian.org>