Accepted freetype 2.4.2-2.1+squeeze5 (i386 source) into squeeze-lts
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Tue, 31 Mar 2015 01:03:33 +0100
Source: freetype
Binary: libfreetype6 libfreetype6-dev freetype2-demos libfreetype6-udeb
Architecture: i386 source
Version: 2.4.2-2.1+squeeze5
Distribution: squeeze-lts
Urgency: medium
Maintainer: Steve Langasek <vorlon@debian.org>
Changed-By: Ben Hutchings <ben@decadent.org.uk>
Closes: 777656
Description:
freetype2-demos - FreeType 2 demonstration programs
libfreetype6-dev - FreeType 2 font engine, development files
libfreetype6 - FreeType 2 font engine, shared library files
libfreetype6-udeb - FreeType 2 font engine for the debian-installer (udeb)
Changes:
freetype (2.4.2-2.1+squeeze5) squeeze-lts; urgency=medium
.
* Non-maintainer upload by the Squeeze LTS team
* Fix recent applicable CVEs (Closes: #777656):
- [sfnt] Fix Savannah bug #43680. CVE-2014-9656
- [truetype] Fix Savannah bug #43679. CVE-2014-9657
- [sfnt] Fix Savannah bug #43672. CVE-2014-9658
- [bdf] Fix Savannah bug #43660. CVE-2014-9660
- [type42] Allow only embedded TrueType fonts. CVE-2014-9661
- [sfnt] Fix Savannah bug #43656. CVE-2014-9663
- [type1, type42] Fix Savannah bug #43655. CVE-2014-9664
- Change some fields in `FT_Bitmap' to unsigned type. CVE-2014-9665
- Make `FT_Bitmap_Convert' correctly handle negative `pitch' values.
CVE-2014-9665-fixup
- Fix uninitialized variable warning. CVE-2014-9665-fixup-2
- [sfnt] Fix Savannah bug #43591. CVE-2014-9666
- [sfnt] Fix Savannah bug #43590. CVE-2014-9667
- [sfnt] Fix Savannah bug #43588. CVE-2014-9669
- Fix Savannah bug #43548. CVE-2014-9670
- Fix Savannah bug #43547. CVE-2014-9671
- Fix Savannah bug #43540. CVE-2014-9672
- Fix Savannah bug #43539. CVE-2014-9673
- src/base/ftobjs.c (Mac_Read_POST_Resource): Avoid memory leak by
a broken POST table in resource-fork. CVE-2014-9673-fixup
- Fix Savannah bug #43538. CVE-2014-9674-part-1
- src/base/ftobj.c (Mac_Read_POST_Resource): Additional overflow check
in the summation of POST fragment lengths. CVE-2014-9674-part-2
- src/base/ftobjs.c (Mac_Read_POST_Resource): Use unsigned long variables
to read the lengths in POST fragments. CVE-2014-9674-fixup-1
- src/base/ftobjs.c (Mac_Read_POST_Resource): Insert comments and fold
too long tracing messages. CVS-2014-9674-fixup-2
- Fix Savannah bug #43535. CVE-2014-9675
- [bdf] Fix Savannah bug #41692. CVE-2014-9675-fixup-1
Checksums-Sha1:
c10d952e6a4644b212e986956178b54fda6e17f4 1850 freetype_2.4.2-2.1+squeeze5.dsc
b21027bfc1136f2fe9cf8e60cfd3b38cd60b1eb1 57737 freetype_2.4.2-2.1+squeeze5.diff.gz
4023217f472b304dee7def9ceec8257d54f6379a 361166 libfreetype6_2.4.2-2.1+squeeze5_i386.deb
7396a0b21df02d8a78790d21d204bb1752c33a8b 713820 libfreetype6-dev_2.4.2-2.1+squeeze5_i386.deb
c187a97375c9d21622bbc0529670c06949dbe15b 189094 freetype2-demos_2.4.2-2.1+squeeze5_i386.deb
58d7ad63283ae35fa373561f126d1efe60f87147 266216 libfreetype6-udeb_2.4.2-2.1+squeeze5_i386.udeb
Checksums-Sha256:
6a6bf075e6c4beee2da373dc2b174e0d7755c0a9ef4fb7f62eb6a06b1d3f82b9 1850 freetype_2.4.2-2.1+squeeze5.dsc
1ab2b5e5b404b9825e96ae4a4f4e53a8d119ee08a7ea26d2a7e8fe5bb0dada21 57737 freetype_2.4.2-2.1+squeeze5.diff.gz
e4216c6d15d00e44022a9e1fd72feb0fd7a84c67123db7eb4815d90762c7218c 361166 libfreetype6_2.4.2-2.1+squeeze5_i386.deb
f706f90cbac313fb689594f683bcf39ca1f78ab521ec4ae1d0665ea636da6111 713820 libfreetype6-dev_2.4.2-2.1+squeeze5_i386.deb
1b74d4c6f770fa9975a1af3f01d66f66fe44369dbe5b4a40dcf6bb7f8394ddb9 189094 freetype2-demos_2.4.2-2.1+squeeze5_i386.deb
75ec03efc6025982734192d2406f1cf95125ea1e0be4a9aa7611cc05c8467e03 266216 libfreetype6-udeb_2.4.2-2.1+squeeze5_i386.udeb
Files:
563f56bc5946e9785cc61e796c21f716 1850 libs optional freetype_2.4.2-2.1+squeeze5.dsc
cd9e711516d03f0627d9d07b23dc81a0 57737 libs optional freetype_2.4.2-2.1+squeeze5.diff.gz
11df34c1a13e24b1ed788c0885bf2357 361166 libs optional libfreetype6_2.4.2-2.1+squeeze5_i386.deb
535dcb027b6b2c7c275b94b7d6cc9607 713820 libdevel optional libfreetype6-dev_2.4.2-2.1+squeeze5_i386.deb
096614832d2a80f50dc4a77a8915308d 189094 utils optional freetype2-demos_2.4.2-2.1+squeeze5_i386.deb
deb83ceba10fa34996492bb1fb94779a 266216 debian-installer extra libfreetype6-udeb_2.4.2-2.1+squeeze5_i386.udeb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=uOyQ
-----END PGP SIGNATURE-----