Accepted libxfont 1:1.2.0-0ubuntu3 (source)

Martin Pitt martin.pitt at ubuntu.com
Tue Sep 12 19:15:09 BST 2006


Accepted:
 OK: libxfont_1.2.0-0ubuntu3.dsc
     -> Component: main Section: x11
 OK: libxfont_1.2.0-0ubuntu3.diff.gz

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.7
Date: Mon, 11 Sep 2006 14:21:10 +0200
Source: libxfont
Binary: libxfont1-dbg libxfont1 libxfont-dev
Architecture: source
Version: 1:1.2.0-0ubuntu3
Distribution: edgy
Urgency: low
Maintainer: Debian X Strike Force <debian-x at lists.debian.org>
Changed-By: Martin Pitt <martin.pitt at ubuntu.com>
Description: 
 libxfont-dev - X11 font rasterisation library (development headers)
 libxfont1  - X11 font rasterisation library
 libxfont1-dbg - X11 font rasterisation library (debug package)
Changes: 
 libxfont (1:1.2.0-0ubuntu3) edgy; urgency=low
 .
   * SECURITY UPDATE: Root privilege escalation with crafted Type1 CID fonts.
   * Add debian/patches/cid-int-overflows.diff:
     - lib/font/Type1/afm.c: Fix integer overflow in CIDAFM(). [CVE-2006-3739]
     - lib/font/Type1/scanfont.c: Fix integer overflow in scan_cidfont().
       [CVE-2006-3740]
Files: 
 c76a0e09c2438d0766f8a4350d67d75e 919 x11 optional libxfont_1.2.0-0ubuntu3.dsc
 6e5f1adc6e1ac85d5e0954d1f32a4dff 20570 x11 optional libxfont_1.2.0-0ubuntu3.diff.gz

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.3 (GNU/Linux)

iD8DBQFFBVTeDecnbV4Fd/IRAkgbAKD6HsQjBqavUuiAwVeP18ryH1TAWACcDwnk
qdd55DI5Cxldpx3RDylEo9g=
=qqBf
-----END PGP SIGNATURE-----





More information about the edgy-changes mailing list