[ubuntu/maverick-security] libxfont 1:1.4.2-1ubuntu0.1 (Accepted)

[Marc Deslauriers]

libxfont (1:1.4.2-1ubuntu0.1) maverick-security; urgency=low

  * SECURITY UPDATE: arbitrary code execution via overflow
    - debian/patches/CVE-2011-2895.patch: check remaining length in
      src/fontfile/decompress.c.
    - CVE-2011-2895

Date: Thu, 11 Aug 2011 10:30:10 -0400
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/maverick/+source/libxfont/1:1.4.2-1ubuntu0.1
-------------- next part --------------
Format: 1.8
Date: Thu, 11 Aug 2011 10:30:10 -0400
Source: libxfont
Binary: libxfont1 libxfont1-udeb libxfont1-dbg libxfont-dev
Architecture: source
Version: 1:1.4.2-1ubuntu0.1
Distribution: maverick-security
Urgency: low
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Description: 
 libxfont-dev - X11 font rasterisation library (development headers)
 libxfont1  - X11 font rasterisation library
 libxfont1-dbg - X11 font rasterisation library (debug package)
 libxfont1-udeb - X11 font rasterisation library (udeb)
Changes: 
 libxfont (1:1.4.2-1ubuntu0.1) maverick-security; urgency=low
 .
   * SECURITY UPDATE: arbitrary code execution via overflow
     - debian/patches/CVE-2011-2895.patch: check remaining length in
       src/fontfile/decompress.c.
     - CVE-2011-2895
Checksums-Sha1: 
 fe8924e057846f91a432d35b347ae799cad6279f 2220 libxfont_1.4.2-1ubuntu0.1.dsc
 34543d8b992235f3520aef7b266d20273d545d73 18956 libxfont_1.4.2-1ubuntu0.1.diff.gz
Checksums-Sha256: 
 696abe0dff0423c6ddf46998af39e5acec7095780de6ea3168077c8e9eff033d 2220 libxfont_1.4.2-1ubuntu0.1.dsc
 ad0fff007cf4683c5d3c9ec08df3f1a25ee5940ce8dec5d439a089c77bc8c869 18956 libxfont_1.4.2-1ubuntu0.1.diff.gz
Files: 
 aeeee17eb61e20f48b4642f03fd5aba8 2220 x11 optional libxfont_1.4.2-1ubuntu0.1.dsc
 f284203485031fb34f176deb224b2001 18956 x11 optional libxfont_1.4.2-1ubuntu0.1.diff.gz
Original-Maintainer: Debian X Strike Force <debian-x at lists.debian.org>