Accepted t1utils 1.36-1+deb6u1 (source amd64) into squeeze-lts
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Mon, 29 Jun 2015 09:42:27 +0200
Source: t1utils
Binary: t1utils
Architecture: source amd64
Version: 1.36-1+deb6u1
Distribution: squeeze-lts
Urgency: medium
Maintainer: C.M. Connelly <cmc@debian.org>
Changed-By: Santiago Ruano Rincón <santiagorr@riseup.net>
Description:
t1utils - Collection of simple Type 1 font manipulation programs
Changes:
t1utils (1.36-1+deb6u1) squeeze-lts; urgency=medium
.
* Non-maintainer upload by the Squeeze LTS team.
* Fix CVE-2015-3905: Buffer overflow in the set_cs_start function in
t1disasm.c allowed remote attackers to cause a denial of service (crash)
and possibly execute arbitrary code via a crafted font file. Backported
from jessie, thanks to Niels Thykier (upstream's fix is more complex).
Checksums-Sha1:
fc3c4aa9080969cd7f5eebdcc93b7fb504dcbb59 1627 t1utils_1.36-1+deb6u1.dsc
bbc64e40da9c2ecd459ea6d0223369decce94693 7118 t1utils_1.36-1+deb6u1.debian.tar.gz
c3dee01c2f55ebb3879ac21c5aa1fd3ccc3a40d4 134808 t1utils_1.36-1+deb6u1_amd64.deb
Checksums-Sha256:
92d5273e5f6a41c11353dc329721182c70ecfe47a9a3fe635222742722b1cfaf 1627 t1utils_1.36-1+deb6u1.dsc
90c0431756a7a8101c1c9701d517ef0eb9f0cbf479acc57232f5de1fa83fafed 7118 t1utils_1.36-1+deb6u1.debian.tar.gz
d86e0c41cd1d684fccd35fcd0ced930a2691fe6b9b7f36ae0943611a52dd5f86 134808 t1utils_1.36-1+deb6u1_amd64.deb
Files:
66cc1688b2a25db5df222d4bc78a0466 1627 text optional t1utils_1.36-1+deb6u1.dsc
e72d12ed96d7b388289b5b492d92da96 7118 text optional t1utils_1.36-1+deb6u1.debian.tar.gz
bdb4d5cd20392dfac8151fcd2d43727f 134808 text optional t1utils_1.36-1+deb6u1_amd64.deb
-----BEGIN PGP SIGNATURE-----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=kf5Y
-----END PGP SIGNATURE-----