freetype (2.6.1-0.1ubuntu2.5) xenial-security; urgency=medium
* SECURITY UPDATE: heap buffer overflow via integer truncation in
Load_SBit_Png
- debian/patches-freetype/CVE-2020-15999.patch: Update
src/sfnt/pngshim.c to test and reject invalid bitmap size earlier in
Load_SBit_Png. Based on upstream patch.
- CVE-2020-15999
Date: 2020-10-20 04:04:24.603479+00:00
Changed-By: Alex Murray <[email protected]>
https://launchpad.net/ubuntu/+source/freetype/2.6.1-0.1ubuntu2.5
Sorry, changesfile not available.
--
Xenial-changes mailing list
[email protected]
Modify settings or unsubscribe at:
https://lists.ubuntu.com/mailman/listinfo/xenial-changes