Ubuntu
freetype package

freetype 2.4.4-1ubuntu2.2 source package in Ubuntu

Changelog

freetype (2.4.4-1ubuntu2.2) natty-security; urgency=low

  * SECURITY UPDATE: Arbitrary code execution via crafted Type 1 font
    - debian/patches-freetype/CVE-2011-3256.patch: Sanitize Type 1 font inputs
      in src/base/ftbitmap.c, src/psaux/t1decode.c, src/raster/ftrend1.c, and
      src/truetype/ttgxvar.c. Based on upstream patch.
    - CVE-2011-3256
  * SECURITY UPDATE: Arbitrary code execution via crafted CID-keyed PS font
    - debian/patches-freetype/CVE-2011-3439.patch: Sanitize CID-keyed
      PostScript font inputs in src/cid/cidload.c. Based on upstream patch.
    - CVE-2011-3439
 -- Tyler Hicks <email address hidden>   Thu, 17 Nov 2011 13:58:59 -0600

Upload details

Uploaded by:
Tyler Hicks
Uploaded to:
Natty
Original maintainer:
Ubuntu Developers
Architectures:
any
Section:
libs
Urgency:
Low Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
freetype_2.4.4.orig.tar.gz 1.6 MiB 7db9b8ce20569399fb3a82d91db079b3eab97f7008f14a7b038b238b5814d75e
freetype_2.4.4-1ubuntu2.2.diff.gz 36.6 KiB db95b81b72039f4a1e8ee5470ba5f0146348310df377fd60936b4faf7c1a7613
freetype_2.4.4-1ubuntu2.2.dsc 1.9 KiB 4cd21e1bd1dcf23914480532161c953dba3883e3aae2bf521618082a5677ea71

View changes file

Binary packages built by this source

freetype2-demos: No summary available for freetype2-demos in ubuntu natty.

No description available for freetype2-demos in ubuntu natty.

libfreetype6: No summary available for libfreetype6 in ubuntu natty.

No description available for libfreetype6 in ubuntu natty.

libfreetype6-dev: No summary available for libfreetype6-dev in ubuntu natty.

No description available for libfreetype6-dev in ubuntu natty.

libfreetype6-udeb: No summary available for libfreetype6-udeb in ubuntu natty.

No description available for libfreetype6-udeb in ubuntu natty.