Ubuntu
freetype package

freetype 2.8.1-2ubuntu2.2 source package in Ubuntu

Changelog

freetype (2.8.1-2ubuntu2.2) bionic-security; urgency=medium

  * SECURITY UPDATE: Heap buffer overflow in sfnt_init_face
    - debian/patches-freetype/CVE-2022-27404.patch: avoid invalid face
      index in src/sfnt/sfobjs.c.
    - CVE-2022-27404
  * SECURITY UPDATE: Segmentation violation in FNT_Size_Request
    - debian/patches-freetype/CVE-2022-27405.patch: properly guard
      face_index in src/base/ftobjs.c.
    - CVE-2022-27405
  * SECURITY UPDATE: Segmentation violation in FT_Request_Size
    - debian/patches-freetype/CVE-2022-27406.patch: guard face->size in
      src/base/ftobjs.c.
    - CVE-2022-27406
  * SECURITY UPDATE: Heap-based buffer overflow in ftbench demo
    - debian/patches-ft2demos/CVE-2022-31782.patch: check the number of
      glyphs in src/ftbench.c.
    - CVE-2022-31782

 -- Marc Deslauriers <email address hidden>  Tue, 19 Jul 2022 12:39:11 -0400

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Bionic
Original maintainer:
Ubuntu Developers
Architectures:
any
Section:
libs
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Bionic updates main libs
Bionic security main libs

Downloads

File Size SHA-256 Checksum
freetype_2.8.1.orig.tar.gz 4.0 MiB a7531cb8c2f6b709896f018380ad97e677e243847ff8a098d1b8b5d23e9d74d7
freetype_2.8.1-2ubuntu2.2.diff.gz 45.1 KiB d73b87ba710215c1af7df782750b129a9eecd23b6db5b402b90fbf5835deebac
freetype_2.8.1-2ubuntu2.2.dsc 2.2 KiB 45db8693d2832092f6f078e42d0b280b6c1fe85f5c49ecae93ee7304e55a764f

View changes file

Binary packages built by this source

freetype2-demos: FreeType 2 demonstration programs

 This package contains some demonstration programs and utilities
 which showcase the features of the FreeType 2 font engine.

freetype2-demos-dbgsym: debug symbols for freetype2-demos
libfreetype6: FreeType 2 font engine, shared library files

 The FreeType project is a team of volunteers who develop free,
 portable and high-quality software solutions for digital typography.
 They specifically target embedded systems and focus on bringing small,
 efficient and ubiquitous products.
 .
 The FreeType 2 library is their new software font engine. It has been
 designed to provide the following important features:
  * A universal and simple API to manage font files
  * Support for several font formats through loadable modules
  * High-quality anti-aliasing
  * High portability & performance
 .
 Supported font formats include:
  * TrueType files (.ttf) and collections (.ttc)
  * Type 1 font files both in ASCII (.pfa) or binary (.pfb) format
  * Type 1 Multiple Master fonts. The FreeType 2 API also provides
    routines to manage design instances easily
  * Type 1 CID-keyed fonts
  * OpenType/CFF (.otf) fonts
  * CFF/Type 2 fonts
  * Adobe CEF fonts (.cef), used to embed fonts in SVG documents with
    the Adobe SVG viewer plugin.
  * Windows FNT/FON bitmap fonts
 .
 This package contains the files needed to run programs that use the
 FreeType 2 library.
 .
  Home Page: http://www.freetype.org/
  Authors: David Turner <david.turner@freetype.org>
           Robert Wilhelm <robert.wilhelm@freetype.org>
           Werner Lemberg <werner.lemberg@freetype.org>

libfreetype6-dbgsym: debug symbols for libfreetype6
libfreetype6-dev: FreeType 2 font engine, development files

 The FreeType project is a team of volunteers who develop free,
 portable and high-quality software solutions for digital typography.
 They specifically target embedded systems and focus on bringing small,
 efficient and ubiquitous products.
 .
 This package contains all supplementary files (static library, headers
 and documentation) you need to develop your own programs using the
 FreeType 2 library.

libfreetype6-udeb: FreeType 2 font engine for the debian-installer

 The FreeType project is a team of volunteers who develop free,
 portable and high-quality software solutions for digital typography.
 They specifically target embedded systems and focus on bringing small,
 efficient and ubiquitous products.
 .
 This is the udeb package for use with the debian-installer.