-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Wed, 26 Jul 2017 21:07:06 +0000 Source: t1utils Binary: t1utils Architecture: source Version: 1.40-2 Distribution: unstable Urgency: medium Maintainer: Niels Thykier <niels@thykier.net> Changed-By: Niels Thykier <niels@thykier.net> Description: t1utils - Collection of simple Type 1 font manipulation programs Closes: 869756 869797 Changes: t1utils (1.40-2) unstable; urgency=medium . * Define _GNU_SOURCE to ensure we get memmem() defined. Otherwise, t1utils is miscompiled and ends up being broken. Thanks to Steve Langasek for the report and the analysis. (Closes: #869756) * Add temporary patch to gracefully terminate on known off-by-one error condition (rather than do a buffer overflow). Bug is reported upstream (https://github.com/kohler/t1utils/issues/9) and we hope to have a better fix in a later release. (Closes: #869797) * Make the build fail hard on implicitly defined C functions to avoid repeating #869756 in the future. Checksums-Sha1: c1dfb930711a24d26e9a5682c591dc3f569f6a3c 1703 t1utils_1.40-2.dsc 76264a3a06da93020ddfa84c39c932ce3c23710a 6516 t1utils_1.40-2.debian.tar.xz ed9e4da7b5fd2efd7dabaf3b156cdcdd14fa5174 5085 t1utils_1.40-2_source.buildinfo Checksums-Sha256: a5f88779c3e4d1be9462af33c7118974e93ab1d6dde8f03a3b62628d62fbbb27 1703 t1utils_1.40-2.dsc 8e0b116dfa22b0bbb3246d8293f70a721693cd0f1fda5b5c56fc787588a29998 6516 t1utils_1.40-2.debian.tar.xz 7d8d9a531fe1b0fc05ff99c9219a5a1d4be334fd77336f7f7da202de3933785d 5085 t1utils_1.40-2_source.buildinfo Files: 6250d29b195a9d7a576cc09b2d792e19 1703 text optional t1utils_1.40-2.dsc ae69a4815cb02ca5e323d675e30ffacd 6516 text optional t1utils_1.40-2.debian.tar.xz b8e0422ee84cf9a368754957bc961b75 5085 text optional t1utils_1.40-2_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEsxMaRR2/33ygW0GXBUu7n32AZEIFAll5BMAACgkQBUu7n32A ZEKSaRAAtH0mxqmJK5jPMSXbLLVx68x16EjNGFShZIBnTvfCrLRFL2HjzSfN6fcS cfqjW7Qw+wxOl7ZXNAS2mvgFMthPXksQX4kYQ++t1z7sr9nxXZDVLPdBKsZZJqCW EP7x8hr4z3I0a8G4CQnSivxzEDHWYevSpP07zVMCiZOlJAgEigS7StgXCw4Y399+ S0DbfsKVghsU/p+tkb5WAMy8YfWeerYUnacOztcaOXpKAePE2sUfivZ0189DNy0L zCpXZUFUz7seFdSicprqJGJ6acHxGjWp3kMYhWLIvfi6JAhyiOIgRfgAYEHmLvf9 dbAucfoD0b2isFMcpTC2VBS0J1XzlcviT+v1u+N37AbneA6eNsOleuvXXb5zHy3m a7QErJMtywcWfqrZXqy+aHuQD7rEngB7lYCZ5F4WBGzQDQlZc9e742UYurnDDyw6 W4SPjkWggTdtpItvB6alNgZSbkkofxVJShKQ3+VOodvJSew8DhOiU+5YEvfUf3rX t1r2mbmsg6dUivbruXSunt51Xv1VNnLZ3GMeSOe7jFGr6a/g/S2q7gV6zUZ2tNT6 cPeFfiQ1NL9OzToTRTiLZaYiLE6oURUND7JIEIc+HnIxXgy8vC875QrueLsiYO9A 1c1msz9cFnx7xwsyI/JApZsUhBhy2/LXKn1c/0PQmYfcEOTvDCA= =+1Gg -----END PGP SIGNATURE-----
