Your message dated Thu, 05 Oct 2023 08:51:38 +0000 with message-id <[email protected]> and subject line Bug#1003327: fixed in xdvik-ja 22.87.06+j1.42-1 has caused the Debian Bug report #1003327, regarding xdvik-ja has use-after-free bug to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact [email protected] immediately.) -- 1003327: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1003327 Debian Bug Tracking System Contact [email protected] with problems
--- Begin Message ---Package: xdvik-ja Version: 22.87.05+j1.42-2 Severity: normal Tags: patch Dear Maintainer, xdvik-ja has use-after-free bug. For details, see the patch below. diff -ru xdvik-ja-22.87.05+j1.42.orig/texk/xdvik/ft2.c xdvik-ja-22.87.05+j1.42/texk/xdvik/ft2.c --- xdvik-ja-22.87.05+j1.42.orig/texk/xdvik/ft2.c 2022-01-08 21:31:22.000000000 +0900 +++ xdvik-ja-22.87.05+j1.42/texk/xdvik/ft2.c 2022-01-08 21:32:25.059932304 +0900 @@ -137,11 +137,12 @@ memset(font, 0, sizeof(*font)); ft_error = FT_New_Face(library, fontpath, map->face_index, &font->face); - free(fontpath); if (ft_error != 0) { XDVI_WARNING(( stderr, "FreeType2: Open Font Error (%s). " "Error code = %d \n", fontpath, ft_error )); + free(fontpath); } else { + free(fontpath); font->encoding = map->encoding; if (map->encoding == ENC_JIS_V || map->encoding == ENC_UNICODE_V) { font->ft2vert = ft2vert_init(font->face); -- System Information: Debian Release: 11.2 APT prefers stable-updates APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 5.14.0-0.bpo.2-amd64 (SMP w/2 CPU threads) Locale: LANG=C, LC_CTYPE=C.UTF-8 (charmap=UTF-8), LANGUAGE not set Shell: /bin/sh linked to /usr/bin/bash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled Versions of packages xdvik-ja depends on: ii fontconfig 2.13.1-4.2 ii fonts-ipaexfont-gothic [fonts-japanese-gothic] 00401-3 ii fonts-ipaexfont-mincho [fonts-japanese-mincho] 00401-3 ii fonts-ipafont-gothic [fonts-japanese-gothic] 00303-21 ii fonts-ipafont-mincho [fonts-japanese-mincho] 00303-21 ii fonts-vlgothic [fonts-japanese-gothic] 20200720-1 ii libc6 2.31-13+deb11u2 ii libfreetype6 2.10.4+dfsg-1 ii libkpathsea6 2020.20200327.54578-7 ii libx11-6 2:1.7.2-1 ii libxaw7 2:1.0.13-1.1 ii libxi6 2:1.7.10-1 ii libxmu6 2:1.1.2-2+b3 ii libxpm4 1:3.5.12-1 ii libxt6 1:1.2.0-1 ii texlive-binaries 2020.20200327.54578-7 xdvik-ja recommends no packages. xdvik-ja suggests no packages. -- no debconf information
--- End Message ---
--- Begin Message ---Source: xdvik-ja Source-Version: 22.87.06+j1.42-1 Done: Youhei SASAKI <[email protected]> We believe that the bug you reported is fixed in the latest version of xdvik-ja, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to [email protected], and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Youhei SASAKI <[email protected]> (supplier of updated xdvik-ja package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing [email protected]) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 05 Oct 2023 15:44:56 +0900 Source: xdvik-ja Architecture: source Version: 22.87.06+j1.42-1 Distribution: unstable Urgency: medium Maintainer: Youhei SASAKI <[email protected]> Changed-By: Youhei SASAKI <[email protected]> Closes: 993597 1003327 1003328 Changes: xdvik-ja (22.87.06+j1.42-1) unstable; urgency=medium . * Bump Standards-Version to 4.6.2 (no changes needed) * New upstream version 22.87.06+j1.42 * Change location config.xdvi * Update README.Debian (Closes: #993597) * debian/control: Remove empty control field Recommends in package xdvik-ja. * d/control: Add build-depends libfreetype1-dev (Closes: #1003328) * d/control: Update Build-Depends * Typo. fixed * Refresh patches * d/patches: Add DEP-3 tag * Fix use-after-free bug (Closes: #1003327) Thanks to NIDE-san! * Add source/lintian-overrides: source-is-missing Checksums-Sha1: be57aebb03d70d712d0d4437ffbb419cb2efd2e0 2081 xdvik-ja_22.87.06+j1.42-1.dsc f5f2e4a46ef3e0048ead9e8d4bff3e60c1417a35 686956 xdvik-ja_22.87.06+j1.42.orig.tar.xz 6952d260ae7f23a3b279b0d3e720c046c41ceaea 129456 xdvik-ja_22.87.06+j1.42-1.debian.tar.xz 7897a7fb2a9f933656ab2aec0b4f3a3f1b376726 9081 xdvik-ja_22.87.06+j1.42-1_amd64.buildinfo Checksums-Sha256: 75afaa8dcaefe767bbc7ac22953535a2e643241ed63a4e50a27ab4a78a0d1117 2081 xdvik-ja_22.87.06+j1.42-1.dsc 64842403e74847743099c971e1bdaa0a8c6d6ceeba42403ee9a74a3e4fc474d3 686956 xdvik-ja_22.87.06+j1.42.orig.tar.xz 37ba29adbb193c3d3ecf53c950103a4cf1641ceb57d7564db6db6cbc052126b8 129456 xdvik-ja_22.87.06+j1.42-1.debian.tar.xz 4bad39905458085b7fa7fabed126510847d72d47769c1e159242ec1a94591cf5 9081 xdvik-ja_22.87.06+j1.42-1_amd64.buildinfo Files: df814daa23de1e5a0198693bc1740963 2081 tex optional xdvik-ja_22.87.06+j1.42-1.dsc 3782c1d4f0f3d8447f5807bd1d1b5983 686956 tex optional xdvik-ja_22.87.06+j1.42.orig.tar.xz 5f1734e5b817512b5428de16db103609 129456 tex optional xdvik-ja_22.87.06+j1.42-1.debian.tar.xz 2c056acf2c56ada017e1426e7c2fd277 9081 tex optional xdvik-ja_22.87.06+j1.42-1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEZqTqcE/iQFWNasLmk5TzVIkdfgcFAmUedNwACgkQk5TzVIkd fgf5LQ//e9nYJ5tIcYU6LQJRd/duIipn9RJm5IFpF9lbwBkdN0JiZFckoQgorRQL geADRyHHHf7pwpu50fJ0dPCX3DsAS3IOsxLNOWusl53J9lehyeacI2gPXE5lX7IC lgphb4VLZLF2apfNeIcaQvGb6ZOgJdiio4JN5kIjGtOiM4Ba0zKMw8c1waR55eCQ Gy5xCChhOxbUbOi1xjOEe6thgIO/LxjUozKdPcpuvuCE7x2h5EE0O7r5Yxckk+jw YQB1nJj62SPkfHGE8Y9d0KZFTjM9r98qPaYkMbgxdMj1bShX8p0y7RzLUTxUdFxd UVm7n5zkLnpdp5AEWkxTYYTKlE3e8i5VFrlz3CDT6Wj05nF4cvxWT9s0moz8ZcJh UNiL20RPmzaoPGSKFLa2o+298JcsSDVcaIAb+YlsvSUHW+orwDPenP5344t68qZU XOab5VnZS+4gzoEDx3NR3se5IHf++8qj17yYM0k1RVPgHccUQ42Jww5fOycStEXA 3vIaPtfybSFjuvSFGUT+QXKAkaDERJ5dJf1ZGgVyShbN3EwcMlURA68E11/0J9W0 dwWegf4WpU92Cc72Ij2s3yFKSRQhmMEmnEmtE7tV4WdLx7j/lnw47o2RcPbnxJcx h4URmfQhoXNgioI51yvBY6R6bP3JViZPUKsS/kkVLhMkNc6pPLw= =fkIg -----END PGP SIGNATURE-----
--- End Message ---
