Debian Package Tracker

general

source: fontforge (source, fonts)
version: 1:20161005~dfsg-4
maintainer: Debian Fonts Task Force (archive) [DMD]
uploaders: Hideki Yamane [DMD] – Christian Perrier [DMD] – Daniel Kahn Gillmor [DMD] – Vasudev Kamath [DMD] – Davide Viti [DMD] – Rogério Brito [DMD] [dm]
arch: all any
std-ver: 3.9.8
VCS: Git (Browse)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 0.0.20120101+git-2
oldstable: 20120731.b-5
stable: 1:20161005~dfsg-4
testing: 1:20161005~dfsg-4
unstable: 1:20161005~dfsg-4

versioned links

0.0.20120101+git-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
20120731.b-5: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
20120731.b-7.2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1:20161005~dfsg-4: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

fontforge
fontforge-common
fontforge-dbg
fontforge-nox
libfontforge-dev
libfontforge2
libgdraw5
python-fontforge

action needed

A new upstream version is available: 20170731

high

A new upstream version 20170731 is available, you should consider packaging it.

Created: 2017-08-12 Last update: 2017-08-17 13:17

10 security issues in sid

high

There are 10 open security issues in sid.

10 important issues:

CVE-2017-11569: FontForge 20161012 is vulnerable to a heap-based buffer over-read in readttfcopyrights (parsettf.c) resulting in DoS or code execution via a crafted otf file.
CVE-2017-11568: FontForge 20161012 is vulnerable to a heap-based buffer over-read in PSCharStringToSplines (psread.c) resulting in DoS or code execution via a crafted otf file.
CVE-2017-11570: FontForge 20161012 is vulnerable to a buffer over-read in umodenc (parsettf.c) resulting in DoS or code execution via a crafted otf file.
CVE-2017-11571: FontForge 20161012 is vulnerable to a stack-based buffer overflow in addnibble (parsettf.c) resulting in DoS or code execution via a crafted otf file.
CVE-2017-11572: FontForge 20161012 is vulnerable to a heap-based buffer over-read in readcfftopdicts (parsettf.c) resulting in DoS or code execution via a crafted otf file.
CVE-2017-11573: FontForge 20161012 is vulnerable to a buffer over-read in ValidatePostScriptFontName (parsettf.c) resulting in DoS or code execution via a crafted otf file.
CVE-2017-11574: FontForge 20161012 is vulnerable to a heap-based buffer overflow in readcffset (parsettf.c) resulting in DoS or code execution via a crafted otf file.
CVE-2017-11575: FontForge 20161012 is vulnerable to a buffer over-read in strnmatch (char.c) resulting in DoS or code execution via a crafted otf file, related to a call from the readttfcopyrights function in parsettf.c.
CVE-2017-11576: FontForge 20161012 does not ensure a positive size in a weight vector memcpy call in readcfftopdict (parsettf.c) resulting in DoS via a crafted otf file.
CVE-2017-11577: FontForge 20161012 is vulnerable to a buffer over-read in getsid (parsettf.c) resulting in DoS or code execution via a crafted otf file.

Please fix them.

Created: 2017-07-24 Last update: 2017-07-30 06:18

10 security issues in wheezy

high

There are 10 open security issues in wheezy.

10 important issues:

CVE-2017-11569: FontForge 20161012 is vulnerable to a heap-based buffer over-read in readttfcopyrights (parsettf.c) resulting in DoS or code execution via a crafted otf file.
CVE-2017-11568: FontForge 20161012 is vulnerable to a heap-based buffer over-read in PSCharStringToSplines (psread.c) resulting in DoS or code execution via a crafted otf file.
CVE-2017-11570: FontForge 20161012 is vulnerable to a buffer over-read in umodenc (parsettf.c) resulting in DoS or code execution via a crafted otf file.
CVE-2017-11571: FontForge 20161012 is vulnerable to a stack-based buffer overflow in addnibble (parsettf.c) resulting in DoS or code execution via a crafted otf file.
CVE-2017-11572: FontForge 20161012 is vulnerable to a heap-based buffer over-read in readcfftopdicts (parsettf.c) resulting in DoS or code execution via a crafted otf file.
CVE-2017-11573: FontForge 20161012 is vulnerable to a buffer over-read in ValidatePostScriptFontName (parsettf.c) resulting in DoS or code execution via a crafted otf file.
CVE-2017-11574: FontForge 20161012 is vulnerable to a heap-based buffer overflow in readcffset (parsettf.c) resulting in DoS or code execution via a crafted otf file.
CVE-2017-11575: FontForge 20161012 is vulnerable to a buffer over-read in strnmatch (char.c) resulting in DoS or code execution via a crafted otf file, related to a call from the readttfcopyrights function in parsettf.c.
CVE-2017-11576: FontForge 20161012 does not ensure a positive size in a weight vector memcpy call in readcfftopdict (parsettf.c) resulting in DoS via a crafted otf file.
CVE-2017-11577: FontForge 20161012 is vulnerable to a buffer over-read in getsid (parsettf.c) resulting in DoS or code execution via a crafted otf file.

Please fix them.

Created: 2017-07-24 Last update: 2017-07-30 06:18

10 security issues in buster

high

There are 10 open security issues in buster.

10 important issues:

CVE-2017-11569: FontForge 20161012 is vulnerable to a heap-based buffer over-read in readttfcopyrights (parsettf.c) resulting in DoS or code execution via a crafted otf file.
CVE-2017-11568: FontForge 20161012 is vulnerable to a heap-based buffer over-read in PSCharStringToSplines (psread.c) resulting in DoS or code execution via a crafted otf file.
CVE-2017-11570: FontForge 20161012 is vulnerable to a buffer over-read in umodenc (parsettf.c) resulting in DoS or code execution via a crafted otf file.
CVE-2017-11571: FontForge 20161012 is vulnerable to a stack-based buffer overflow in addnibble (parsettf.c) resulting in DoS or code execution via a crafted otf file.
CVE-2017-11572: FontForge 20161012 is vulnerable to a heap-based buffer over-read in readcfftopdicts (parsettf.c) resulting in DoS or code execution via a crafted otf file.
CVE-2017-11573: FontForge 20161012 is vulnerable to a buffer over-read in ValidatePostScriptFontName (parsettf.c) resulting in DoS or code execution via a crafted otf file.
CVE-2017-11574: FontForge 20161012 is vulnerable to a heap-based buffer overflow in readcffset (parsettf.c) resulting in DoS or code execution via a crafted otf file.
CVE-2017-11575: FontForge 20161012 is vulnerable to a buffer over-read in strnmatch (char.c) resulting in DoS or code execution via a crafted otf file, related to a call from the readttfcopyrights function in parsettf.c.
CVE-2017-11576: FontForge 20161012 does not ensure a positive size in a weight vector memcpy call in readcfftopdict (parsettf.c) resulting in DoS via a crafted otf file.
CVE-2017-11577: FontForge 20161012 is vulnerable to a buffer over-read in getsid (parsettf.c) resulting in DoS or code execution via a crafted otf file.

Please fix them.

Created: 2017-07-24 Last update: 2017-07-30 06:18

10 security issues in jessie

high

There are 10 open security issues in jessie.

10 important issues:

CVE-2017-11569: FontForge 20161012 is vulnerable to a heap-based buffer over-read in readttfcopyrights (parsettf.c) resulting in DoS or code execution via a crafted otf file.
CVE-2017-11568: FontForge 20161012 is vulnerable to a heap-based buffer over-read in PSCharStringToSplines (psread.c) resulting in DoS or code execution via a crafted otf file.
CVE-2017-11570: FontForge 20161012 is vulnerable to a buffer over-read in umodenc (parsettf.c) resulting in DoS or code execution via a crafted otf file.
CVE-2017-11571: FontForge 20161012 is vulnerable to a stack-based buffer overflow in addnibble (parsettf.c) resulting in DoS or code execution via a crafted otf file.
CVE-2017-11572: FontForge 20161012 is vulnerable to a heap-based buffer over-read in readcfftopdicts (parsettf.c) resulting in DoS or code execution via a crafted otf file.
CVE-2017-11573: FontForge 20161012 is vulnerable to a buffer over-read in ValidatePostScriptFontName (parsettf.c) resulting in DoS or code execution via a crafted otf file.
CVE-2017-11574: FontForge 20161012 is vulnerable to a heap-based buffer overflow in readcffset (parsettf.c) resulting in DoS or code execution via a crafted otf file.
CVE-2017-11575: FontForge 20161012 is vulnerable to a buffer over-read in strnmatch (char.c) resulting in DoS or code execution via a crafted otf file, related to a call from the readttfcopyrights function in parsettf.c.
CVE-2017-11576: FontForge 20161012 does not ensure a positive size in a weight vector memcpy call in readcfftopdict (parsettf.c) resulting in DoS via a crafted otf file.
CVE-2017-11577: FontForge 20161012 is vulnerable to a buffer over-read in getsid (parsettf.c) resulting in DoS or code execution via a crafted otf file.

Please fix them.

Created: 2017-07-24 Last update: 2017-07-30 06:18

10 security issues in stretch

high

There are 10 open security issues in stretch.

10 important issues:

CVE-2017-11569: FontForge 20161012 is vulnerable to a heap-based buffer over-read in readttfcopyrights (parsettf.c) resulting in DoS or code execution via a crafted otf file.
CVE-2017-11568: FontForge 20161012 is vulnerable to a heap-based buffer over-read in PSCharStringToSplines (psread.c) resulting in DoS or code execution via a crafted otf file.
CVE-2017-11570: FontForge 20161012 is vulnerable to a buffer over-read in umodenc (parsettf.c) resulting in DoS or code execution via a crafted otf file.
CVE-2017-11571: FontForge 20161012 is vulnerable to a stack-based buffer overflow in addnibble (parsettf.c) resulting in DoS or code execution via a crafted otf file.
CVE-2017-11572: FontForge 20161012 is vulnerable to a heap-based buffer over-read in readcfftopdicts (parsettf.c) resulting in DoS or code execution via a crafted otf file.
CVE-2017-11573: FontForge 20161012 is vulnerable to a buffer over-read in ValidatePostScriptFontName (parsettf.c) resulting in DoS or code execution via a crafted otf file.
CVE-2017-11574: FontForge 20161012 is vulnerable to a heap-based buffer overflow in readcffset (parsettf.c) resulting in DoS or code execution via a crafted otf file.
CVE-2017-11575: FontForge 20161012 is vulnerable to a buffer over-read in strnmatch (char.c) resulting in DoS or code execution via a crafted otf file, related to a call from the readttfcopyrights function in parsettf.c.
CVE-2017-11576: FontForge 20161012 does not ensure a positive size in a weight vector memcpy call in readcfftopdict (parsettf.c) resulting in DoS via a crafted otf file.
CVE-2017-11577: FontForge 20161012 is vulnerable to a buffer over-read in getsid (parsettf.c) resulting in DoS or code execution via a crafted otf file.

Please fix them.

Created: 2017-07-24 Last update: 2017-07-30 06:18

lintian reports 252 errors and 2 warnings

high

Lintian reports 252 errors and 2 warnings about this package. You should make the package lintian clean getting rid of them.

Created: 2017-06-21 Last update: 2017-07-24 07:14

Multiarch hinter reports 3 issue(s)

normal

There are issues with the multiarch metadata for this package.

fontforge-common could be marked Multi-Arch: foreign
fontforge-dbg could be marked Multi-Arch: same
python-fontforge could be marked Multi-Arch: same

Created: 2016-09-14 Last update: 2017-08-17 13:27

Depends on packages which need a new maintainer

normal

The packages that fontforge depends on which need a new maintainer are:

giflib (#834410)
- Depends: libgif-dev libgif7 libgif7
- Build-Depends: libgif-dev
gnulib (#847043)
- Build-Depends: gnulib

Created: 2016-08-14 Last update: 2017-08-17 13:22

2 bugs tagged patch in the BTS

normal

The BTS contains patches fixing 2 bugs, consider including or untagging them.

Created: 2017-08-12 Last update: 2017-08-17 13:02

Build log checks report 2 warnings

low

Build log checks report 2 warnings

Created: 2016-11-13 Last update: 2016-11-13 07:04

news

[rss feed]

[2016-11-19] fontforge 1:20161005~dfsg-4 MIGRATED to testing (Debian testing watch)
[2016-11-12] Accepted fontforge 1:20161005~dfsg-4 (source all i386) into unstable (Vasudev Kamath)
[2016-10-23] Accepted fontforge 1:20161005~dfsg-3 (source all i386) into experimental (Vasudev Kamath)
[2016-10-15] Accepted fontforge 1:20161005~dfsg-2 (source all i386) into experimental (Vasudev Kamath)
[2016-10-10] Accepted fontforge 1:20161005~dfsg-1 (source all i386) into experimental (Vasudev Kamath)
[2016-09-10] Accepted fontforge 1:20160404~dfsg-4 (source all i386) into experimental (Vasudev Kamath)
[2016-08-13] Accepted fontforge 1:20160404~dfsg-3 (source all i386) into experimental (Vasudev Kamath)
[2016-08-07] Accepted fontforge 1:20160404~dfsg-2 (source all i386) into experimental (Vasudev Kamath)
[2016-07-24] Accepted fontforge 1:20160404~dfsg-1 (source all i386) into experimental, experimental (Vasudev Kamath)
[2016-04-26] fontforge 20120731.b-7.2 MIGRATED to testing (Debian testing watch)
[2016-04-21] Accepted fontforge 20120731.b-7.2 (source) into unstable (James Cowgill)
[2015-12-23] fontforge 20120731.b-7.1 MIGRATED to testing (Debian testing watch)
[2015-12-18] Accepted fontforge 20120731.b-7.1 (source all amd64) into unstable (Matthias Klose)
[2015-12-11] fontforge 20120731.b-7 MIGRATED to testing (Debian testing watch)
[2015-12-05] Accepted fontforge 20120731.b-7 (source all amd64) into unstable (Hideki Yamane)
[2015-12-02] fontforge 20120731.b-6 MIGRATED to testing (Britney)
[2015-11-26] Accepted fontforge 20120731.b-6 (source all amd64) into unstable (Hideki Yamane)
[2014-01-12] fontforge 20120731.b-5 MIGRATED to testing (Debian testing watch)
[2014-01-01] Accepted fontforge 20120731.b-5 (source i386 all) (Christian Perrier)
[2013-11-14] fontforge 20120731.b-4 MIGRATED to testing (Debian testing watch)
[2013-11-03] Accepted fontforge 20120731.b-4 (source i386 all) (Christian Perrier)
[2013-07-07] fontforge 20120731.b-3 MIGRATED to testing (Debian testing watch)
[2013-06-25] Accepted fontforge 20120731.b-3 (source amd64 all) (Hideki Yamane)
[2013-06-15] fontforge 20120731.b-2 MIGRATED to testing (Debian testing watch)
[2013-06-05] Accepted fontforge 20120731.b-2 (source amd64 all) (Hideki Yamane)
[2013-05-24] fontforge 0.0.20120101+git-6 MIGRATED to testing (Debian testing watch)
[2013-05-14] Accepted fontforge 20120731.b-1 (source amd64 all) (Hideki Yamane)
[2013-05-14] Accepted fontforge 0.0.20120101+git-6 (source amd64 all) (Hideki Yamane)
[2013-04-22] Accepted fontforge 0.0.20120101+git-5 (source amd64 all) (Hideki Yamane)
[2013-04-21] Accepted fontforge 0.0.20120101+git-4 (source amd64 all) (Hideki Yamane)

bugs [bug history graph]

all: 20
RC: 1
I&N: 11
M&W: 5
F&P: 3

links

homepage
lintian (252, 2)
buildd: logs, checks, clang, reproducibility
popcon
browse source code
edit tags
security tracker
screenshots

ubuntu

[Information about Ubuntu for Debian Developers]

version: 1:20161005~dfsg-4ubuntu2
29 bugs (1 patch)
patches for 1:20161005~dfsg-4ubuntu2