Accepted t1lib 5.1.2-3+squeeze1 (source all amd64)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sat, 14 Jan 2012 21:55:47 +0100
Source: t1lib
Binary: libt1-5 libt1-dev t1lib-bin libt1-doc libt1-5-dbg
Architecture: source all amd64
Version: 5.1.2-3+squeeze1
Distribution: stable-security
Urgency: high
Maintainer: Ruben Molina <rmolina@udea.edu.co>
Changed-By: Yves-Alexis Perez <corsac@debian.org>
Description:
libt1-5 - Type 1 font rasterizer library - runtime
libt1-5-dbg - Type 1 font rasterizer library - debugging runtime
libt1-dev - Type 1 font rasterizer library - development
libt1-doc - Type 1 font rasterizer library - developers documentation
t1lib-bin - Type 1 font rasterizer library - user binaries
Closes: 652996
Changes:
t1lib (5.1.2-3+squeeze1) stable-security; urgency=high
.
* Non-maintainer upload by the Security Team.
* debian/patches:
- CVE-2010-2642 added, fix heap-based buffer overflow first found in
evince but applicable to the embedded afmparse library found in t1lib
too. Fixes CVE-2011-0433 too on the same patch.
- CVE-2011-0764 added, fix arbitrary code execution by only using ppoints
when it is a valid pointer. closes: #652996
This fixes CVE-2011-0764, CVE-2011-1552, CVE-2011-1553 and CVE-2011-1554
* format-string added, fix a format string error IfTrace0 macro and another
in T1_SubfsetFont().
Checksums-Sha1:
4e1dff94b71f461a27361ced4ef5cd0bbc5e9b4e 1803 t1lib_5.1.2-3+squeeze1.dsc
4b4fc22c8688eefaaa8cfc990f0039f95f4287de 1872534 t1lib_5.1.2.orig.tar.gz
0a5da8d9f5fed62e715527d4e341188fd5907817 19084 t1lib_5.1.2-3+squeeze1.diff.gz
c554d06bb99bcd2363f6bc3f2bead01808243580 610678 libt1-doc_5.1.2-3+squeeze1_all.deb
4f30ff90daa6fef4329446e7d2eae7beaea5cc43 171790 libt1-5_5.1.2-3+squeeze1_amd64.deb
389c66b03f424f95ccf2775979351e970df62b16 198552 libt1-dev_5.1.2-3+squeeze1_amd64.deb
9c5d17df2ee88dc7eab3cfdbca26d4ad6a5f13c1 61608 t1lib-bin_5.1.2-3+squeeze1_amd64.deb
9d25aeb098f4c859763700b10f9464aa85b5ebae 216768 libt1-5-dbg_5.1.2-3+squeeze1_amd64.deb
Checksums-Sha256:
25f41d5da8aadfe3625906ec43f4fe5ea70b299215feba65c97463722119ae6a 1803 t1lib_5.1.2-3+squeeze1.dsc
821328b5054f7890a0d0cd2f52825270705df3641dbd476d58d17e56ed957b59 1872534 t1lib_5.1.2.orig.tar.gz
b1f48e3aab44d724fcc2ca27b2ff44151dfd410616302ba8e54f749c358c4ba8 19084 t1lib_5.1.2-3+squeeze1.diff.gz
0c7e6d10185562dd260b8336dc6cf0a0ad4835ca832a02621f84b8add2ab29df 610678 libt1-doc_5.1.2-3+squeeze1_all.deb
237059183ded56498234c0229eb5549d1f6cff9bc288af8b27932f272325134c 171790 libt1-5_5.1.2-3+squeeze1_amd64.deb
a0f599b8ad18cb046191c362cff5d1c16c3d2d3feb6e598d4eb5e827e03198c3 198552 libt1-dev_5.1.2-3+squeeze1_amd64.deb
9203fef1d6142a7ecf369f5a24a0144197cd17dc0f5a1ca3be4cf5cd27c7f708 61608 t1lib-bin_5.1.2-3+squeeze1_amd64.deb
bfd1a2bdbf33e7197a4155b51eaccfa68759ce0f0c2e8850b54ad4e795d790bd 216768 libt1-5-dbg_5.1.2-3+squeeze1_amd64.deb
Files:
ed598dc987a42843934e79c9b3e14e89 1803 libs optional t1lib_5.1.2-3+squeeze1.dsc
a5629b56b93134377718009df1435f3c 1872534 libs optional t1lib_5.1.2.orig.tar.gz
baf76641399eea88ac3a1f8937ba69eb 19084 libs optional t1lib_5.1.2-3+squeeze1.diff.gz
d7fd6e672b03cc092fa59bdc838b1df5 610678 doc optional libt1-doc_5.1.2-3+squeeze1_all.deb
d66e1f2af733c4156addd44c8963fb12 171790 libs optional libt1-5_5.1.2-3+squeeze1_amd64.deb
d343c14aa322045f7d5072eee3b59389 198552 libdevel optional libt1-dev_5.1.2-3+squeeze1_amd64.deb
e6c5fc1b460c32018f0bdb8ea741f393 61608 misc optional t1lib-bin_5.1.2-3+squeeze1_amd64.deb
114dd281998ead532e045c5b9bc1838c 216768 libdevel extra libt1-5-dbg_5.1.2-3+squeeze1_amd64.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)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=pDhv
-----END PGP SIGNATURE-----
Accepted:
libt1-5-dbg_5.1.2-3+squeeze1_amd64.deb
to main/t/t1lib/libt1-5-dbg_5.1.2-3+squeeze1_amd64.deb
libt1-5_5.1.2-3+squeeze1_amd64.deb
to main/t/t1lib/libt1-5_5.1.2-3+squeeze1_amd64.deb
libt1-dev_5.1.2-3+squeeze1_amd64.deb
to main/t/t1lib/libt1-dev_5.1.2-3+squeeze1_amd64.deb
libt1-doc_5.1.2-3+squeeze1_all.deb
to main/t/t1lib/libt1-doc_5.1.2-3+squeeze1_all.deb
t1lib-bin_5.1.2-3+squeeze1_amd64.deb
to main/t/t1lib/t1lib-bin_5.1.2-3+squeeze1_amd64.deb
t1lib_5.1.2-3+squeeze1.diff.gz
to main/t/t1lib/t1lib_5.1.2-3+squeeze1.diff.gz
t1lib_5.1.2-3+squeeze1.dsc
to main/t/t1lib/t1lib_5.1.2-3+squeeze1.dsc