-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 05 Oct 2015 11:35:21 +0200 Source: freetype Binary: libfreetype6 libfreetype6-dev freetype2-demos libfreetype6-udeb Architecture: source Version: 2.5.2-3+deb8u1 Distribution: jessie-security Urgency: high Maintainer: Steve Langasek <vorlon@debian.org> Changed-By: Santiago Ruano Rincón <santiagorr@riseup.net> Description: freetype2-demos - FreeType 2 demonstration programs libfreetype6 - FreeType 2 font engine, shared library files libfreetype6-dev - FreeType 2 font engine, development files libfreetype6-udeb - FreeType 2 font engine for the debian-installer (udeb) Changes: freetype (2.5.2-3+deb8u1) jessie-security; urgency=high . * Non-maintainer upload. * CVE-2014-9745: Fix Savannah bug #41590. Protect against invalid number in t1load.c parse_encoding(). * CVE-2014-9746, CVE-2014-9747: Fix Savannah bug #41309. Correct use of uninitialized data in t1load.c, cidload.c, t42parse.c and psobjs.c. Checksums-Sha1: d870f6e7c4a1c448a747eac42710a49964c7e1d1 2096 freetype_2.5.2-3+deb8u1.dsc cd585a224b742e769f4b14a8028b5d0889474a82 1971155 freetype_2.5.2.orig.tar.gz 1bbc5329e415b6f3f62f9853c3efea5462b86046 68796 freetype_2.5.2-3+deb8u1.diff.gz Checksums-Sha256: a56cdf04463a7d9b13c1a2fd1c257b9626f28516efc7243fd2ee34eae2f14a13 2096 freetype_2.5.2-3+deb8u1.dsc 5fda4996e43cfdf9b602a0eb5abde014f1a3c3b2d82bbb9b86942011c63f5c3a 1971155 freetype_2.5.2.orig.tar.gz 196918fc99a74441d7f7e6e85133b0ba7d6b85b2d5b5cd764fc32edd7dd97923 68796 freetype_2.5.2-3+deb8u1.diff.gz Files: 8904cc6ccf3d612e2731ff53002c0c5b 2096 libs optional freetype_2.5.2-3+deb8u1.dsc cd5d3efcc73e221e68992b7b062d77ac 1971155 libs optional freetype_2.5.2.orig.tar.gz 2ab7551775a93da69080897e92aab3ac 68796 libs optional freetype_2.5.2-3+deb8u1.diff.gz -----BEGIN PGP SIGNATURE----- iQIcBAEBCgAGBQJWElLCAAoJEN5v/bjI1ki90vUP/3qz9ipxgyRPyaKoVGUv8/S3 zJI/qomTfeyPTKFYbkBrhJFnBV9SY2YytWd1K/TvPLOeGHU3Cs4ZYieecThFdvjk WQ81NVjrrrAq501UTrDPUMLfZC2706jOLHPgBG9JNWgQ4BXgWdkz65U8sNjGAzl3 dGimN4aKtB4/iyq6CbtnAmzdno7TBAsIs8KDaI+BxU8MHsZoK2UgKlgHOZba9Nky qsmhjMtQ8Y20wd40Z57VXMSODbmmUhPUFgp/XYW1GLi0P+S1QDZGsFXasvK5IjVi WF6pdRmkq4aOSMj8w7aO0W1QVsILXyobu6COaoNxc5pP+NDqDisY0AeA43MJiNUm DogS2XHg3SlJLJKz1KK8H8H1y4Kvf8puPiEX3kQ69+JQvBROizLWMAJGKHVS3WHA EwSLnbqvMaLGOjNFWtHJAQqlD7BwoxtEfhQIfFbtODLsIq3yJ4x+m4IcEblyDk14 5/BzjnEBskCToTpn6d/r3Er2EvUBC+P/5VrMpMlNUpUlCxax964aZCFWcVV7zzsc Ygl8V893rcNCeytaVWKKRZ+icfoCSyp1zQclG7AEyF/OZq3tKWXrLgDFERBGB/oj 0DlyEVRPDKPlDegnVlSvDFxatlz6JngvZFGAoz8NZvHSu3uHGVVpAZCpcwvOLq17 2mtrpWYIJX5RT2QMTKmM =jgCn -----END PGP SIGNATURE-----