On Sat, Mar 7, 2015 at 7:28 PM, Ted Unangst <[email protected]> wrote:
> Or you could start with the linked Ubuntu advisory and try to discover where > they hide the relevant patches. Heaven forbid they directly link to them, > somebody might discover Ubuntu is based on open source software. Here are the patches Ubuntu ships with its freetype package (downloaded from http://packages.ubuntu.com/). They're at 2.5.2 as of now. Ciao, David $ tar tzf patches-freetype.tar.gz patches-freetype/ patches-freetype/freetype-2.1.7-backwards.compat.patch patches-freetype/CVE-2014-96xx/ patches-freetype/CVE-2014-96xx/CVE-2014-9670-2.patch patches-freetype/CVE-2014-96xx/CVE-2014-9660.patch patches-freetype/CVE-2014-96xx/CVE-2014-9665-1.patch patches-freetype/CVE-2014-96xx/CVE-2014-9663.patch patches-freetype/CVE-2014-96xx/CVE-2014-9659-1.patch patches-freetype/CVE-2014-96xx/CVE-2014-9664-2.patch patches-freetype/CVE-2014-96xx/CVE-2014-9657.patch patches-freetype/CVE-2014-96xx/CVE-2014-9666.patch patches-freetype/CVE-2014-96xx/CVE-2014-9662.patch patches-freetype/CVE-2014-96xx/CVE-2014-9659-2.patch patches-freetype/CVE-2014-96xx/CVE-2014-9671-2.patch patches-freetype/CVE-2014-96xx/CVE-2014-9670-1.patch patches-freetype/CVE-2014-96xx/CVE-2014-9675-1.patch patches-freetype/CVE-2014-96xx/CVE-2014-9674-1.patch patches-freetype/CVE-2014-96xx/CVE-2014-9658.patch patches-freetype/CVE-2014-96xx/CVE-2014-9665-2.patch patches-freetype/CVE-2014-96xx/CVE-2014-9664-1.patch patches-freetype/CVE-2014-96xx/CVE-2014-9674-4.patch patches-freetype/CVE-2014-96xx/CVE-2014-9671-3.patch patches-freetype/CVE-2014-96xx/CVE-2014-9661-2.patch patches-freetype/CVE-2014-96xx/CVE-2014-9656.patch patches-freetype/CVE-2014-96xx/CVE-2014-9669.patch patches-freetype/CVE-2014-96xx/CVE-2014-9675-2.patch patches-freetype/CVE-2014-96xx/CVE-2014-9671-1.patch patches-freetype/CVE-2014-96xx/CVE-2014-9673.patch patches-freetype/CVE-2014-96xx/CVE-2014-9674-2.patch patches-freetype/CVE-2014-96xx/CVE-2014-9667.patch patches-freetype/CVE-2014-96xx/CVE-2014-9674-3.patch patches-freetype/CVE-2014-96xx/CVE-2014-9668.patch patches-freetype/CVE-2014-96xx/CVE-2014-9672.patch patches-freetype/CVE-2014-96xx/CVE-2014-9661-1.patch patches-freetype/series patches-freetype/enable-old-cff.patch patches-freetype/no-uninitialized-bbox.patch patches-freetype/enable-gxvalid-otvalid.patch patches-freetype/CVE-2014-2240.patch patches-freetype/freetype-config.diff patches-freetype/revert_scalable_fonts_metric.patch patches-freetype/enable-subpixel-rendering.patch patches-freetype/CVE-2014-2241.patch patches-freetype/0002-Fix-Savannah-bug-42418.patch patches-freetype/verbose-libtool.patch patches-freetype/0001-Fix-Savannah-bug-40997.patch patches-freetype/multi-thread-violations.patch
patches-freetype.tar.gz
Description: GNU Zip compressed data
