[SECURITY] [DLA 847-1] texlive-base security update

2017-03-07 Thread Brian May
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Package: texlive-base Version: 2012.20120611-5+deb7u1 CVE ID : CVE-2016-10243 The TeX system allows for calling external programs from within the TeX source code. This has been restricted to a small set of programs since a

[SECURITY] [DLA 848-1] freetype security update

2017-03-07 Thread Chris Lamb
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Package: freetype Version: 2.4.9-1.1+deb7u4 CVE ID : CVE-2016-10244 Debian Bug : #856971 It was discovered that there was a denial of service vulnerability in freetype, a font rendering library. The parse_charstrings