[ubuntu/hardy-security] pango1.0, pango1.0 (delayed) 1.20.5-0ubuntu1.2 (Accepted)
Ubuntu Installer
archive at ubuntu.com
Wed Mar 2 15:04:08 UTC 2011
pango1.0 (1.20.5-0ubuntu1.2) hardy-security; urgency=low
* SECURITY UPDATE: denial of service via crafted font file
- debian/patches/14_security_CVE-2010-0421.patch: validate glyphs in
pango/opentype/harfbuzz-gdef.c.
- CVE-2010-0421
* SECURITY UPDATE: denial of service and possible code execution via
crafted font file (LP: #696616)
- debian/patches/15_security_CVE-2011-0020.patch: check for overflow in
pango/pangoft2-render.c.
- CVE-2011-0020
Date: Tue, 01 Mar 2011 11:02:04 -0500
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/hardy/+source/pango1.0/1.20.5-0ubuntu1.2
-------------- next part --------------
Format: 1.7
Date: Tue, 01 Mar 2011 11:02:04 -0500
Source: pango1.0
Binary: libpango1.0-0 libpango1.0-udeb libpango1.0-common libpango1.0-dev libpango1.0-0-dbg libpango1.0-doc
Architecture: source
Version: 1.20.5-0ubuntu1.2
Distribution: hardy-security
Urgency: low
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Description:
libpango1.0-0 - Layout and rendering of internationalized text
libpango1.0-0-dbg - The Pango library and debugging symbols
libpango1.0-common - Modules and configuration files for the Pango
libpango1.0-dev - Development files for the Pango
libpango1.0-doc - Documentation files for the Pango
libpango1.0-udeb - Layout and rendering of internationalized text - minimal runtime
Launchpad-Bugs-Fixed: 696616
Changes:
pango1.0 (1.20.5-0ubuntu1.2) hardy-security; urgency=low
.
* SECURITY UPDATE: denial of service via crafted font file
- debian/patches/14_security_CVE-2010-0421.patch: validate glyphs in
pango/opentype/harfbuzz-gdef.c.
- CVE-2010-0421
* SECURITY UPDATE: denial of service and possible code execution via
crafted font file (LP: #696616)
- debian/patches/15_security_CVE-2011-0020.patch: check for overflow in
pango/pangoft2-render.c.
- CVE-2011-0020
Files:
e7149a352c41661d963850b43fac0a61 1963 libs optional pango1.0_1.20.5-0ubuntu1.2.dsc
fd1e290b69055e2145aaf035b9e76ef1 29970 libs optional pango1.0_1.20.5-0ubuntu1.2.diff.gz
Original-Maintainer: Sebastien Bacher <seb128 at debian.org>
More information about the Hardy-changes
mailing list