lp:ubuntu/oneiric-security/freetype
- Get this branch:
- bzr branch lp:ubuntu/oneiric-security/freetype
Branch merges
Branch information
Recent revisions
- 44. By Marc Deslauriers
-
* SECURITY UPDATE: denial of service and possible code execution via NULL
pointer dereference
- debian/patches- freetype/ CVE-2012- 5668.patch: reset props_size in case
of allocation error in src/bdf/bdflib.c.
- CVE-2012-5668
* SECURITY UPDATE: denial of service and possible code execution via heap
buffer over-read in BDF parsing
- debian/patches- freetype/ CVE-2012- 5669.patch: use correct array size
in src/bdf/bdflib.c.
- CVE-2012-5669 - 43. By Tyler Hicks
-
* SECURITY UPDATE: Denial of service via crafted BDF font
- debian/patches- freetype/ CVE-2012- 1126.patch: Perform better input
sanitization when parsing properties. Based on upstream patch.
- CVE-2012-1126
* SECURITY UPDATE: Denial of service via crafted BDF font
- debian/patches- freetype/ CVE-2012- 1127.patch: Perform better input
sanitization when parsing glyphs. Based on upstream patch.
- CVE-2012-1127
* SECURITY UPDATE: Denial of service via crafted TrueType font
- debian/patches- freetype/ CVE-2012- 1128.patch: Improve loop logic to avoid
NULL pointer dereference. Based on upstream patch.
- CVE-2012-1128
* SECURITY UPDATE: Denial of service via crafted Type42 font
- debian/patches- freetype/ CVE-2012- 1129.patch: Perform better input
sanitization when parsing SFNT strings. Based on upstream patch.
- CVE-2012-1129
* SECURITY UPDATE: Denial of service via crafted PCF font
- debian/patches- freetype/ CVE-2012- 1130.patch: Allocate enough memory to
properly NULL-terminate parsed properties strings. Based on upstream
patch.
- CVE-2012-1130
* SECURITY UPDATE: Denial of service via crafted TrueType font
- debian/patches- freetype/ CVE-2012- 1131.patch: Use appropriate data type to
prevent integer truncation on 64 bit systems when rendering fonts. Based
on upstream patch.
- CVE-2012-1131
* SECURITY UPDATE: Denial of service via crafted Type1 font
- debian/patches- freetype/ CVE-2012- 1132.patch: Ensure strings are of
appropriate length when loading Type1 fonts. Based on upstream patch.
- CVE-2012-1132
* SECURITY UPDATE: Denial of service and arbitrary code execution via
crafted BDF font
- debian/patches- freetype/ CVE-2012- 1133.patch: Limit range of negative
glyph encoding values to prevent invalid array indexes. Based on
upstream patch.
- CVE-2012-1133
* SECURITY UPDATE: Denial of service and arbitrary code execution via
crafted Type1 font
- debian/patches- freetype/ CVE-2012- 1134.patch: Enforce a minimum Type1
private dictionary size to prevent writing past array bounds. Based on
upstream patch.
- CVE-2012-1134
* SECURITY UPDATE: Denial of service via crafted TrueType font
- debian/patches- freetype/ CVE-2012- 1135.patch: Perform proper bounds
checks when interpreting TrueType bytecode. Based on upstream patch.
- CVE-2012-1135
* SECURITY UPDATE: Denial of service and arbitrary code execution via
crafted BDF font
- debian/patches- freetype/ CVE-2012- 1136.patch: Ensure encoding field is
defined when parsing glyphs. Based on upstream patch.
- CVE-2012-1136
* SECURITY UPDATE: Denial of service via crafted BDF font
- debian/patches- freetype/ CVE-2012- 1137.patch: Allocate sufficient number
of array elements to prevent reading past array bounds. Based on
upstream patch.
- CVE-2012-1137
* SECURITY UPDATE: Denial of service via crafted TrueType font
- debian/patches- freetype/ CVE-2012- 1138.patch: Correct typo resulting in
invalid read from wrong memory location. Based on upstream patch.
- CVE-2012-1138
* SECURITY UPDATE: Denial of service via crafted BDF font
- debian/patches- freetype/ CVE-2012- 1139.patch: Check array index values to
prevent reading invalid memory. Based on upstream patch.
- CVE-2012-1139
* SECURITY UPDATE: Denial of service via crafted PostScript font
- debian/patches- freetype/ CVE-2012- 1140.patch: Fix off-by-one error in
boundary checks. Based on upstream patch.
- CVE-2012-1140
* SECURITY UPDATE: Denial of service via crafted BDF font
- debian/patches- freetype/ CVE-2012- 1141.patch: Initialize field elements
to prevent invalid read. Based on upstream patch.
- CVE-2012-1141
* SECURITY UPDATE: Denial of service via crafted Windows FNT/FON font
- debian/patches- freetype/ CVE-2012- 1142.patch: Perform input sanitization
on first and last character code fields. Based on upstream patch.
- CVE-2012-1142
* SECURITY UPDATE: Denial of service via crafted font
- debian/patches- freetype/ CVE-2012- 1143.patch: Protect against divide by
zero when dealing with 32 bit types. Based on upstream patch.
- CVE-2012-1143
* SECURITY UPDATE: Denial of service and arbitrary code execution via
crafted TrueType font
- debian/patches- freetype/ CVE-2012- 1144.patch: Perform input sanitization
on the first glyph outline point value. Based on upstream patch.
- CVE-2012-1144 - 42. By Tyler Hicks
-
* SECURITY UPDATE: Arbitrary code execution via crafted Type 1 font
- debian/patches- freetype/ CVE-2011- 3256.patch: Sanitize Type 1 font inputs
in src/base/ftbitmap. c, src/psaux/ t1decode. c, src/raster/ ftrend1. c, and
src/truetype/ ttgxvar. c. Based on upstream patch.
- CVE-2011-3256
* SECURITY UPDATE: Arbitrary code execution via crafted CID-keyed PS font
- debian/patches- freetype/ CVE-2011- 3439.patch: Sanitize CID-keyed
PostScript font inputs in src/cid/cidload.c. Based on upstream patch.
- CVE-2011-3439 - 41. By Marc Deslauriers
-
* SECURITY UPDATE: arbitrary code execution via crafted Type 1 font
- debian/patches- freetype/ CVE-2011- 0226.patch: check for proper
signedness in src/psaux/t1decode. c.
- CVE-2011-0226
* debian/rules: fix FTBFS with gcc 4.6 by adding
-Wno-unused- but-set- variable to CFLAGS to downgrade it to a warning. - 40. By Steve Langasek
-
* Build for multiarch, using debhelper compat 9.
* Add Pre-Depends: ${misc:Pre-Depends} to pick up multiarch-support
dependency. - 39. By Steve Langasek
-
No-change rebuild against fixed pkgbinarymangler, to get correct
multiarch-safe changelogs - 35. By Steve Langasek
-
* FFe LP: #733501.
* Build for multiarch, using debhelper compat 9.
* Add Pre-Depends: ${misc:Pre-Depends} to pick up multiarch-support
dependency.
Branch metadata
- Branch format:
- Branch format 7
- Repository format:
- Bazaar repository format 2a (needs bzr 1.16 or later)
- Stacked on:
- lp:ubuntu/precise/freetype