Package: freetype Version: 2.7.1-0.1 Severity: normal Tags: patch pending Dear maintainer,
I've prepared an NMU for freetype (versioned as 2.8-0.1). The diff is attached to this message. Regards. diff -Nru freetype-2.7.1/debian/changelog freetype-2.8/debian/changelog --- freetype-2.7.1/debian/changelog 2017-05-29 13:35:21.000000000 +0200 +++ freetype-2.8/debian/changelog 2017-05-29 13:35:21.000000000 +0200 @@ -1,3 +1,16 @@ +freetype (2.8-0.1) experimental; urgency=medium + + * Non-maintainer upload. + * New upstream release + - Better protect `flex' handling (CVE-2017-8105) (Closes: #861220) + - t1_builder_close_contour: Add safety guard (CVE-2017-8287) + (Closes: #861308) + - tt_size_reset: Do nothing for CFF2 (CVE-2017-7864) (Closes: #860313) + - Improve handling for buggy variation fonts (CVE-2017-7857 CVE-2017-7858) + (Closes: #860307) + + -- Laurent Bigonville <bi...@debian.org> Fri, 26 May 2017 17:39:07 +0200 + freetype (2.7.1-0.1) experimental; urgency=medium * Non-maintainer upload. diff -Nru freetype-2.7.1/debian/libfreetype6.symbols freetype-2.8/debian/libfreetype6.symbols --- freetype-2.7.1/debian/libfreetype6.symbols 2017-05-29 13:35:21.000000000 +0200 +++ freetype-2.8/debian/libfreetype6.symbols 2017-05-29 13:35:21.000000000 +0200 @@ -50,6 +50,7 @@ FT_Face_GetCharsOfVariant@Base 2.3.5 FT_Face_GetVariantSelectors@Base 2.3.5 FT_Face_GetVariantsOfChar@Base 2.3.5 + FT_Face_Properties@Base 2.8 FT_Face_SetUnpatentedHinting@Base 2.3.5 FT_FloorFix@Base 2.2.1 FT_Forget_Frame@Base 0 1 @@ -87,6 +88,7 @@ FT_Get_PS_Font_Value@Base 2.4.8 FT_Get_Postscript_Name@Base 2.2.1 FT_Get_Renderer@Base 2.2.1 + FT_Get_Sfnt_LangTag@Base 2.8 FT_Get_Sfnt_Name@Base 2.2.1 FT_Get_Sfnt_Name_Count@Base 2.2.1 FT_Get_Sfnt_Table@Base 2.2.1 @@ -194,6 +196,7 @@ FT_Set_Char_Size@Base 2.2.1 FT_Set_Charmap@Base 2.2.1 FT_Set_Debug_Hook@Base 2.2.1 + FT_Set_Default_Properties@Base 2.8 FT_Set_MM_Blend_Coordinates@Base 2.2.1 FT_Set_MM_Design_Coordinates@Base 2.2.1 FT_Set_Pixel_Sizes@Base 2.2.1 @@ -264,6 +267,10 @@ FT_Vector_Unit@Base 2.2.1 TT_New_Context@Base 2.2.1 TT_RunIns@Base 2.2.1 + af_adlm_dflt_style_class@Base 0 1 + af_adlm_nonbase_uniranges@Base 0 1 + af_adlm_script_class@Base 0 1 + af_adlm_uniranges@Base 0 1 af_arab_dflt_style_class@Base 0 1 af_arab_nonbase_uniranges@Base 0 1 af_arab_script_class@Base 0 1 @@ -273,17 +280,49 @@ af_armn_script_class@Base 0 1 af_armn_uniranges@Base 0 1 af_autofitter_interface@Base 0 1 + af_avst_dflt_style_class@Base 0 1 + af_avst_nonbase_uniranges@Base 0 1 + af_avst_script_class@Base 0 1 + af_avst_uniranges@Base 0 1 + af_bamu_dflt_style_class@Base 0 1 + af_bamu_nonbase_uniranges@Base 0 1 + af_bamu_script_class@Base 0 1 + af_bamu_uniranges@Base 0 1 af_beng_dflt_style_class@Base 0 1 af_beng_nonbase_uniranges@Base 0 1 af_beng_script_class@Base 0 1 af_beng_uniranges@Base 0 1 af_blue_strings@Base 0 1 af_blue_stringsets@Base 0 1 + af_buhd_dflt_style_class@Base 0 1 + af_buhd_nonbase_uniranges@Base 0 1 + af_buhd_script_class@Base 0 1 + af_buhd_uniranges@Base 0 1 + af_cakm_dflt_style_class@Base 0 1 + af_cakm_nonbase_uniranges@Base 0 1 + af_cakm_script_class@Base 0 1 + af_cakm_uniranges@Base 0 1 + af_cans_dflt_style_class@Base 0 1 + af_cans_nonbase_uniranges@Base 0 1 + af_cans_script_class@Base 0 1 + af_cans_uniranges@Base 0 1 + af_cari_dflt_style_class@Base 0 1 + af_cari_nonbase_uniranges@Base 0 1 + af_cari_script_class@Base 0 1 + af_cari_uniranges@Base 0 1 af_cher_dflt_style_class@Base 0 1 af_cher_nonbase_uniranges@Base 0 1 af_cher_script_class@Base 0 1 af_cher_uniranges@Base 0 1 af_cjk_writing_system_class@Base 0 1 + af_copt_dflt_style_class@Base 0 1 + af_copt_nonbase_uniranges@Base 0 1 + af_copt_script_class@Base 0 1 + af_copt_uniranges@Base 0 1 + af_cprt_dflt_style_class@Base 0 1 + af_cprt_nonbase_uniranges@Base 0 1 + af_cprt_script_class@Base 0 1 + af_cprt_uniranges@Base 0 1 af_cyrl_c2cp_style_class@Base 0 1 af_cyrl_c2sc_style_class@Base 0 1 af_cyrl_dflt_style_class@Base 0 1 @@ -301,6 +340,10 @@ af_deva_nonbase_uniranges@Base 0 1 af_deva_script_class@Base 0 1 af_deva_uniranges@Base 0 1 + af_dsrt_dflt_style_class@Base 0 1 + af_dsrt_nonbase_uniranges@Base 0 1 + af_dsrt_script_class@Base 0 1 + af_dsrt_uniranges@Base 0 1 af_dummy_writing_system_class@Base 0 1 af_ethi_dflt_style_class@Base 0 1 af_ethi_nonbase_uniranges@Base 0 1 @@ -314,6 +357,14 @@ af_geor_nonbase_uniranges@Base 0 1 af_geor_script_class@Base 0 1 af_geor_uniranges@Base 0 1 + af_glag_dflt_style_class@Base 0 1 + af_glag_nonbase_uniranges@Base 0 1 + af_glag_script_class@Base 0 1 + af_glag_uniranges@Base 0 1 + af_goth_dflt_style_class@Base 0 1 + af_goth_nonbase_uniranges@Base 0 1 + af_goth_script_class@Base 0 1 + af_goth_uniranges@Base 0 1 af_grek_c2cp_style_class@Base 0 1 af_grek_c2sc_style_class@Base 0 1 af_grek_dflt_style_class@Base 0 1 @@ -344,6 +395,10 @@ af_hebr_script_class@Base 0 1 af_hebr_uniranges@Base 0 1 af_indic_writing_system_class@Base 0 1 + af_kali_dflt_style_class@Base 0 1 + af_kali_nonbase_uniranges@Base 0 1 + af_kali_script_class@Base 0 1 + af_kali_uniranges@Base 0 1 af_khmr_dflt_style_class@Base 0 1 af_khmr_nonbase_uniranges@Base 0 1 af_khmr_script_class@Base 0 1 @@ -386,6 +441,10 @@ af_limb_nonbase_uniranges@Base 0 1 af_limb_script_class@Base 0 1 af_limb_uniranges@Base 0 1 + af_lisu_dflt_style_class@Base 0 1 + af_lisu_nonbase_uniranges@Base 0 1 + af_lisu_script_class@Base 0 1 + af_lisu_uniranges@Base 0 1 af_mlym_dflt_style_class@Base 0 1 af_mlym_nonbase_uniranges@Base 0 1 af_mlym_script_class@Base 0 1 @@ -394,20 +453,48 @@ af_mymr_nonbase_uniranges@Base 0 1 af_mymr_script_class@Base 0 1 af_mymr_uniranges@Base 0 1 + af_nkoo_dflt_style_class@Base 0 1 + af_nkoo_nonbase_uniranges@Base 0 1 + af_nkoo_script_class@Base 0 1 + af_nkoo_uniranges@Base 0 1 af_none_dflt_style_class@Base 0 1 af_none_nonbase_uniranges@Base 0 1 af_none_script_class@Base 0 1 af_none_uniranges@Base 0 1 + af_olck_dflt_style_class@Base 0 1 + af_olck_nonbase_uniranges@Base 0 1 + af_olck_script_class@Base 0 1 + af_olck_uniranges@Base 0 1 + af_orkh_dflt_style_class@Base 0 1 + af_orkh_nonbase_uniranges@Base 0 1 + af_orkh_script_class@Base 0 1 + af_orkh_uniranges@Base 0 1 af_orya_dflt_style_class@Base 0 1 af_orya_nonbase_uniranges@Base 0 1 af_orya_script_class@Base 0 1 af_orya_uniranges@Base 0 1 + af_osge_dflt_style_class@Base 0 1 + af_osge_nonbase_uniranges@Base 0 1 + af_osge_script_class@Base 0 1 + af_osge_uniranges@Base 0 1 + af_osma_dflt_style_class@Base 0 1 + af_osma_nonbase_uniranges@Base 0 1 + af_osma_script_class@Base 0 1 + af_osma_uniranges@Base 0 1 + af_saur_dflt_style_class@Base 0 1 + af_saur_nonbase_uniranges@Base 0 1 + af_saur_script_class@Base 0 1 + af_saur_uniranges@Base 0 1 af_script_classes@Base 0 1 af_shaper_buf_create@Base 0 1 af_shaper_buf_destroy@Base 0 1 af_shaper_get_cluster@Base 0 1 af_shaper_get_coverage@Base 0 1 af_shaper_get_elem@Base 0 1 + af_shaw_dflt_style_class@Base 0 1 + af_shaw_nonbase_uniranges@Base 0 1 + af_shaw_script_class@Base 0 1 + af_shaw_uniranges@Base 0 1 af_sinh_dflt_style_class@Base 0 1 af_sinh_nonbase_uniranges@Base 0 1 af_sinh_script_class@Base 0 1 @@ -425,10 +512,18 @@ af_taml_nonbase_uniranges@Base 0 1 af_taml_script_class@Base 0 1 af_taml_uniranges@Base 0 1 + af_tavt_dflt_style_class@Base 0 1 + af_tavt_nonbase_uniranges@Base 0 1 + af_tavt_script_class@Base 0 1 + af_tavt_uniranges@Base 0 1 af_telu_dflt_style_class@Base 0 1 af_telu_nonbase_uniranges@Base 0 1 af_telu_script_class@Base 0 1 af_telu_uniranges@Base 0 1 + af_tfng_dflt_style_class@Base 0 1 + af_tfng_nonbase_uniranges@Base 0 1 + af_tfng_script_class@Base 0 1 + af_tfng_uniranges@Base 0 1 af_thai_dflt_style_class@Base 0 1 af_thai_nonbase_uniranges@Base 0 1 af_thai_script_class@Base 0 1 @@ -437,6 +532,10 @@ af_tibt_nonbase_uniranges@Base 0 1 af_tibt_script_class@Base 0 1 af_tibt_uniranges@Base 0 1 + af_vaii_dflt_style_class@Base 0 1 + af_vaii_nonbase_uniranges@Base 0 1 + af_vaii_script_class@Base 0 1 + af_vaii_uniranges@Base 0 1 af_writing_system_classes@Base 0 1 afm_parser_funcs@Base 0 1 autofit_module_class@Base 0 1 @@ -460,6 +559,7 @@ ft_hash_str_init@Base 0 1 ft_hash_str_insert@Base 0 1 ft_hash_str_lookup@Base 0 1 + ft_lcd_filter_fir@Base 0 1 ft_lzwstate_done@Base 0 1 ft_lzwstate_init@Base 0 1 ft_lzwstate_io@Base 0 1 Les fichiers binaires /tmp/rhyMwKxR0E/freetype-2.7.1/freetype-2.7.1.tar.bz2 et /tmp/7KO7dJsAQi/freetype-2.8/freetype-2.7.1.tar.bz2 sont différents Les fichiers binaires /tmp/rhyMwKxR0E/freetype-2.7.1/freetype-2.8.tar.bz2 et /tmp/7KO7dJsAQi/freetype-2.8/freetype-2.8.tar.bz2 sont différents Les fichiers binaires /tmp/rhyMwKxR0E/freetype-2.7.1/freetype-doc-2.7.1.tar.bz2 et /tmp/7KO7dJsAQi/freetype-2.8/freetype-doc-2.7.1.tar.bz2 sont différents Les fichiers binaires /tmp/rhyMwKxR0E/freetype-2.7.1/freetype-doc-2.8.tar.bz2 et /tmp/7KO7dJsAQi/freetype-2.8/freetype-doc-2.8.tar.bz2 sont différents Les fichiers binaires /tmp/rhyMwKxR0E/freetype-2.7.1/ft2demos-2.7.1.tar.bz2 et /tmp/7KO7dJsAQi/freetype-2.8/ft2demos-2.7.1.tar.bz2 sont différents Les fichiers binaires /tmp/rhyMwKxR0E/freetype-2.7.1/ft2demos-2.8.tar.bz2 et /tmp/7KO7dJsAQi/freetype-2.8/ft2demos-2.8.tar.bz2 sont différents