[Bug 892277] Sync freetype 2.4.8-1 (main) from Debian unstable (main)

[Jamie Strandboge]

2011-11-18 19:23:40 INFO    Creating lockfile: /var/lock/launchpad-sync-source.lock
[Updating] freetype (2.4.7-2 [Ubuntu] < 2.4.8-1 [Debian])
 * Trying to add freetype...
2011-11-18 19:24:01 INFO      - <freetype_2.4.8.orig.tar.gz: downloading from http://ftp.debian.org/debian/>
2011-11-18 19:24:03 INFO      - <freetype_2.4.8-1.dsc: downloading from http://ftp.debian.org/debian/>
2011-11-18 19:24:03 INFO      - <freetype_2.4.8-1.diff.gz: downloading from http://ftp.debian.org/debian/>
2011-11-18 19:24:04 DEBUG   Removing lock file: /var/lock/launchpad-sync-source.lock
I: freetype [main] -> libfreetype6_2.4.7-2 [main].
I: freetype [main] -> libfreetype6-dev_2.4.7-2 [main].
I: freetype [main] -> freetype2-demos_2.4.7-2 [universe].
I: freetype [main] -> libfreetype6-udeb_2.4.7-2 [main].


** Changed in: freetype (Ubuntu)
       Status: New => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Sponsors Team, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/892277

Title:
  Sync freetype 2.4.8-1 (main) from Debian unstable (main)

Status in “freetype” package in Ubuntu:
  Fix Released

Bug description:
  Please sync freetype 2.4.8-1 (main) from Debian unstable (main)

  FreeType 2.4.8 fixes an arbitrary code execution vulnerability when
  loading specially crafted CID-keyed PostScript font files.

  FreeType 2.4.8 is primarily a security release:

  http://freetype.sourceforge.net/index2.html#release-freetype-2.4.8

  Changelog entries since current precise version 2.4.7-2:

  freetype (2.4.8-1) unstable; urgency=high

    * New upstream release
      - upstream fix for CVE-2011-3439.  Closes: #649122.
      - adjust libfreetype6.symbols for a newly-exported function.

   -- Steve Langasek <vorlon at debian.org>  Thu, 17 Nov 2011 22:28:14
  +0000

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/freetype/+bug/892277/+subscriptions