Accepted libxfont 1:2.0.1-3+deb9u1 (source) into proposed-updates->stable-new, proposed-updates
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Fri, 06 Oct 2017 22:26:19 +0200
Source: libxfont
Binary: libxfont2 libxfont2-udeb libxfont-dev
Architecture: source
Version: 1:2.0.1-3+deb9u1
Distribution: stretch-security
Urgency: medium
Maintainer: Debian X Strike Force <debian-x@lists.debian.org>
Changed-By: Julien Cristau <jcristau@debian.org>
Description:
libxfont-dev - X11 font rasterisation library (development headers)
libxfont2 - X11 font rasterisation library
libxfont2-udeb - X11 font rasterisation library (udeb)
Changes:
libxfont (1:2.0.1-3+deb9u1) stretch-security; urgency=medium
.
* Check for end of string in PatternMatch (CVE-2017-13720)
* pcfGetProperties: Check string boundaries (CVE-2017-13722)
Checksums-Sha1:
879be4a7ba9db49064ee294845f961d95b152277 2212 libxfont_2.0.1-3+deb9u1.dsc
d82d69d7f69fd809e3cd731ec2c4a338789dc055 591227 libxfont_2.0.1.orig.tar.gz
3484b5d90557d7b0ba162b76465623653381a460 27288 libxfont_2.0.1-3+deb9u1.diff.gz
Checksums-Sha256:
c3f7c114469d6b7869e2dabfd351b4750cd85f4c26c21cbdef587a4b297a0371 2212 libxfont_2.0.1-3+deb9u1.dsc
381b6b385a69343df48a082523c856aed9042fbbc8ee0a6342fb502e4321230a 591227 libxfont_2.0.1.orig.tar.gz
502d17fd28167a9694a001b824ea499d58c199a4e0f6422dca7f742307d7b2bf 27288 libxfont_2.0.1-3+deb9u1.diff.gz
Files:
d933a98c157f3fc8b7fc0ab6c4da12df 2212 x11 optional libxfont_2.0.1-3+deb9u1.dsc
6ae5ae1f9fb1213b04f14a802a1d721c 591227 x11 optional libxfont_2.0.1.orig.tar.gz
f3869cc6e8866b7532e23b8039696476 27288 x11 optional libxfont_2.0.1-3+deb9u1.diff.gz
-----BEGIN PGP SIGNATURE-----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=JdjI
-----END PGP SIGNATURE-----