FEDORA-EPEL-2012-0069 — security update for t1lib

stable

t1lib-5.1.1-9.el5

FEDORA-EPEL-2012-0069 created by jskarvad 12 years ago for Fedora EPEL 5

This update fixes several security flaws in t1lib (flaws in AFM parser and when handling specially crafted Type1 fonts).

This update has been submitted for testing by jskarvad.

12 years ago

This update is currently being pushed to the Fedora EPEL 5 testing updates repository.

12 years ago

This update has been pushed to testing

12 years ago

This update has reached 14 days in testing and can be pushed to stable now if the maintainer wishes

12 years ago

This update has been submitted for stable by jskarvad.

12 years ago

This update is currently being pushed to the Fedora EPEL 5 stable updates repository.

12 years ago

This update has been pushed to stable

12 years ago

Please login to add feedback.

Metadata

Type

security

Karma

Signed

Content Type

RPM

Test Gating

None

Builds

t1lib-5.1.1-9.el5

Settings

Unstable by Karma

-3

Stable by Karma

disabled

Stable by Time

disabled

Dates

submitted

12 years ago

in testing

12 years ago

in stable

12 years ago

modified

12 years ago

BZ#666318 CVE-2010-2642 evince, t1lib: Heap based buffer overflow in DVI file AFM font parser

BZ#679010 CVE-2010-2642 evince, t1lib: Heap based buffer overflow in DVI file AFM font parser [epel-5]

BZ#679732 CVE-2011-0433 evince, t1lib: Heap-based buffer overflow DVI file AFM font parser

BZ#679734 CVE-2011-0433 CVE-2011-0764 CVE-2011-1552 CVE-2011-1553 CVE-2011-1554 t1lib various flaws [epel-5]

BZ#692853 CVE-2011-1552 t1lib: invalid read crash via crafted Type 1 font

BZ#692854 CVE-2011-1553 t1lib: Use-after-free via crafted Type 1 font

BZ#692856 CVE-2011-1554 t1lib: Off-by-one via crafted Type 1 font

BZ#692909 CVE-2011-0764 t1lib: Invalid pointer dereference via crafted Type 1 font

t1lib-5.1.1-9.el5

Automated Test Results

None