U radu programskog paketa t1lib uočeno je više sigurnosnih propusta. Udaljeni ih napadač može iskoristiti za izvršavanje proizvoljnog programskog koda te DoS (eng. Denial of Service) napad.

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2012-0266
2012-01-11 05:13:14
--------------------------------------------------------------------------------

Name        : t1lib
Product     : Fedora 15
Version     : 5.1.2
Release     : 9.fc15
URL         : ftp://sunsite.unc.edu/pub/Linux/libs/graphics/t1lib-5.1.2.lsm
Summary     : PostScript Type 1 font rasterizer
Description :
T1lib is a rasterizer library for Adobe Type 1 Fonts. It supports
rotation and transformation, kerning underlining and antialiasing. It
does not depend on X11, but does provides some special functions for
X11.

AFM-files can be generated from Type 1 font files and font subsetting
is possible.

--------------------------------------------------------------------------------
Update Information:

This update fixes several security flaws in t1lib (flaws in AFM parser and when
handling specially crafted Type1 fonts).

--------------------------------------------------------------------------------
ChangeLog:

* Tue Jan 10 2012 Jaroslav Ĺ karvada <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> - 5.1.2-9
- Add patch to fix CVE-2010-2642, CVE-2011-0433 (afm-fix patch)
- New version of patch for CVE-2011-0764, also fixes CVE-2011-1552,
  CVE-2011-1553, CVE-2011-1554 (type1-inv-rw-fix patch)
  Resolves: rhbz#772899
- Add explicit NVR requires to apps subpackage (consumes libt1(x).so)
- Fix rpmlint warning (mixed-use-of-spaces-and-tabs)
* Tue Jan  3 2012 JosÄ