=========================================================== 
Ubuntu Security Notice USN-515-1         September 19, 2007
t1lib vulnerability
CVE-2007-4033
===========================================================

A security issue affects the following Ubuntu releases:

Ubuntu 6.06 LTS
Ubuntu 6.10
Ubuntu 7.04

This advisory also applies to the corresponding versions of
Kubuntu, Edubuntu, and Xubuntu.

The problem can be corrected by upgrading your system to the
following package versions:

Ubuntu 6.06 LTS:
  libt1-5                         5.1.0-2ubuntu0.6.06.1

Ubuntu 6.10:
  libt1-5                         5.1.0-2ubuntu0.6.10.1

Ubuntu 7.04:
  libt1-5                         5.1.0-2ubuntu0.7.04.1

In general, a standard system upgrade is sufficient to affect the
necessary changes.

Details follow:

It was discovered that t1lib does not properly perform bounds checking
which can result in a buffer overflow vulnerability.  An attacker could
send specially crafted input to applications linked against t1lib which
could result in a DoS or arbitrary code execution.


Updated packages for Ubuntu 6.06 LTS:

  Source archives:

    http://security.ubuntu.com/ubuntu/pool/main/t/t1lib/t1lib_5.1.0-2ubuntu0.6.06.1.diff.gz
      Size/MD5:    13706 d9ce103e87af790c5225b09bb03d7385
    http://security.ubuntu.com/ubuntu/pool/main/t/t1lib/t1lib_5.1.0-2ubuntu0.6.06.1.dsc
      Size/MD5:      730 8de933312806448123594efa12bf5cc6
    http://security.ubuntu.com/ubuntu/pool/main/t/t1lib/t1lib_5.1.0.orig.tar.gz
      Size/MD5:  1838635 a05bed4aa63637052e60690ccde70421

  Architecture independent packages:

    http://security.ubuntu.com/ubuntu/pool/main/t/t1lib/libt1-doc_5.1.0-2ubuntu0.6.06.1_all.deb
      Size/MD5:   608928 07320bc9fab519b6cd8dbcd319b09d41

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

    http://security.ubuntu.com/ubuntu/pool/main/t/t1lib/libt1-5_5.1.0-2ubuntu0.6.06.1_amd64.deb
      Size/MD5:   161724 ca9c66df61dae2f76375742d2530503f
    http://security.ubuntu.com/ubuntu/pool/main/t/t1lib/libt1-dev_5.1.0-2ubuntu0.6.06.1_amd64.deb
      Size/MD5:   192954 cda5eca98bc7464350edb7d17ff3f279
    http://security.ubuntu.com/ubuntu/pool/universe/t/t1lib/t1lib-bin_5.1.0-2ubuntu0.6.06.1_amd64.deb
      Size/MD5:    59342 29ccd99dd546473f7fcc07f27f908606

  i386 architecture (x86 compatible Intel/AMD):

    http://security.ubuntu.com/ubuntu/pool/main/t/t1lib/libt1-5_5.1.0-2ubuntu0.6.06.1_i386.deb
      Size/MD5:   140408 0ec3be1685e83742033c0900a1b64a01
    http://security.ubuntu.com/ubuntu/pool/main/t/t1lib/libt1-dev_5.1.0-2ubuntu0.6.06.1_i386.deb
      Size/MD5:   165518 1a55f8734bbdc58151d9b4b17f46dfbe
    http://security.ubuntu.com/ubuntu/pool/universe/t/t1lib/t1lib-bin_5.1.0-2ubuntu0.6.06.1_i386.deb
      Size/MD5:    53286 8e2c1031785c1a13190c6802a45ba063

  powerpc architecture (Apple Macintosh G3/G4/G5):

    http://security.ubuntu.com/ubuntu/pool/main/t/t1lib/libt1-5_5.1.0-2ubuntu0.6.06.1_powerpc.deb
      Size/MD5:   156412 53a5770038a14407944a86550e0a2fd2
    http://security.ubuntu.com/ubuntu/pool/main/t/t1lib/libt1-dev_5.1.0-2ubuntu0.6.06.1_powerpc.deb
      Size/MD5:   205980 8c2a48d82f12e8f7ec571854fcca3017
    http://security.ubuntu.com/ubuntu/pool/universe/t/t1lib/t1lib-bin_5.1.0-2ubuntu0.6.06.1_powerpc.deb
      Size/MD5:    54134 d78df8d6e9cdd9f3121386eb31dc3a1f

  sparc architecture (Sun SPARC/UltraSPARC):

    http://security.ubuntu.com/ubuntu/pool/main/t/t1lib/libt1-5_5.1.0-2ubuntu0.6.06.1_sparc.deb
      Size/MD5:   152790 314234020da17d3e68fa69c38e0eb38b
    http://security.ubuntu.com/ubuntu/pool/main/t/t1lib/libt1-dev_5.1.0-2ubuntu0.6.06.1_sparc.deb
      Size/MD5:   190472 d69c5aa2d085380b27da2ac72abacf66
    http://security.ubuntu.com/ubuntu/pool/universe/t/t1lib/t1lib-bin_5.1.0-2ubuntu0.6.06.1_sparc.deb
      Size/MD5:    55842 8610e26e19137d02180f7815576581b7

Updated packages for Ubuntu 6.10:

  Source archives:

    http://security.ubuntu.com/ubuntu/pool/main/t/t1lib/t1lib_5.1.0-2ubuntu0.6.10.1.diff.gz
      Size/MD5:    13722 e6ab67a2a5bc7117870b14c1f4bb3369
    http://security.ubuntu.com/ubuntu/pool/main/t/t1lib/t1lib_5.1.0-2ubuntu0.6.10.1.dsc
      Size/MD5:      730 bc5cb1797c225c7c916acae84de33b48
    http://security.ubuntu.com/ubuntu/pool/main/t/t1lib/t1lib_5.1.0.orig.tar.gz
      Size/MD5:  1838635 a05bed4aa63637052e60690ccde70421

  Architecture independent packages:

    http://security.ubuntu.com/ubuntu/pool/main/t/t1lib/libt1-doc_5.1.0-2ubuntu0.6.10.1_all.deb
      Size/MD5:   608968 ef34d3b6c3c59710c19bc7e6641a2c20

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

    http://security.ubuntu.com/ubuntu/pool/main/t/t1lib/libt1-5_5.1.0-2ubuntu0.6.10.1_amd64.deb
      Size/MD5:   159858 e603e28bd73fcff74a451eb6b57ff0bb
    http://security.ubuntu.com/ubuntu/pool/main/t/t1lib/libt1-dev_5.1.0-2ubuntu0.6.10.1_amd64.deb
      Size/MD5:   191042 2f1a62881dd960e18ff39768f244f9d2
    http://security.ubuntu.com/ubuntu/pool/universe/t/t1lib/t1lib-bin_5.1.0-2ubuntu0.6.10.1_amd64.deb
      Size/MD5:    59230 4f1f7d130d602c57e562ebb35d239b21

  i386 architecture (x86 compatible Intel/AMD):

    http://security.ubuntu.com/ubuntu/pool/main/t/t1lib/libt1-5_5.1.0-2ubuntu0.6.10.1_i386.deb
      Size/MD5:   144432 fb141c326b3123ea65aa854fc7665866
    http://security.ubuntu.com/ubuntu/pool/main/t/t1lib/libt1-dev_5.1.0-2ubuntu0.6.10.1_i386.deb
      Size/MD5:   169758 19f31c36af6bdfba26e1208c39fc66c8
    http://security.ubuntu.com/ubuntu/pool/universe/t/t1lib/t1lib-bin_5.1.0-2ubuntu0.6.10.1_i386.deb
      Size/MD5:    53190 7b303362b227c0371af4b026c7148572

  powerpc architecture (Apple Macintosh G3/G4/G5):

    http://security.ubuntu.com/ubuntu/pool/main/t/t1lib/libt1-5_5.1.0-2ubuntu0.6.10.1_powerpc.deb
      Size/MD5:   156066 80e45861de1bc2406b45c30c23bc3033
    http://security.ubuntu.com/ubuntu/pool/main/t/t1lib/libt1-dev_5.1.0-2ubuntu0.6.10.1_powerpc.deb
      Size/MD5:   205860 b48b7054189d15e4777b67799f2fa2e8
    http://security.ubuntu.com/ubuntu/pool/universe/t/t1lib/t1lib-bin_5.1.0-2ubuntu0.6.10.1_powerpc.deb
      Size/MD5:    55120 82e6be926434ebd0b98aa4241aa96c77

  sparc architecture (Sun SPARC/UltraSPARC):

    http://security.ubuntu.com/ubuntu/pool/main/t/t1lib/libt1-5_5.1.0-2ubuntu0.6.10.1_sparc.deb
      Size/MD5:   153334 6765c87f8cfe73b6aab375d1a919ca1b
    http://security.ubuntu.com/ubuntu/pool/main/t/t1lib/libt1-dev_5.1.0-2ubuntu0.6.10.1_sparc.deb
      Size/MD5:   191080 b0b298207b519b2f7a183255471f6906
    http://security.ubuntu.com/ubuntu/pool/universe/t/t1lib/t1lib-bin_5.1.0-2ubuntu0.6.10.1_sparc.deb
      Size/MD5:    55598 236347f949366e2c9a53bb875328b369

Updated packages for Ubuntu 7.04:

  Source archives:

    http://security.ubuntu.com/ubuntu/pool/main/t/t1lib/t1lib_5.1.0-2ubuntu0.7.04.1.diff.gz
      Size/MD5:    13778 2d18ded62941fe63cf07cea11b94c473
    http://security.ubuntu.com/ubuntu/pool/main/t/t1lib/t1lib_5.1.0-2ubuntu0.7.04.1.dsc
      Size/MD5:      814 5f6115c702fc0f4cbc2921dd634d52b1
    http://security.ubuntu.com/ubuntu/pool/main/t/t1lib/t1lib_5.1.0.orig.tar.gz
      Size/MD5:  1838635 a05bed4aa63637052e60690ccde70421

  Architecture independent packages:

    http://security.ubuntu.com/ubuntu/pool/main/t/t1lib/libt1-doc_5.1.0-2ubuntu0.7.04.1_all.deb
      Size/MD5:   609006 c1b94d42f80cf0872c16803f35708e66

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

    http://security.ubuntu.com/ubuntu/pool/main/t/t1lib/libt1-5_5.1.0-2ubuntu0.7.04.1_amd64.deb
      Size/MD5:   162000 93299291d55d1d766c56d39b4b0798cb
    http://security.ubuntu.com/ubuntu/pool/main/t/t1lib/libt1-dev_5.1.0-2ubuntu0.7.04.1_amd64.deb
      Size/MD5:   191176 6ec71612dc9565b434ed22db4ae05abe
    http://security.ubuntu.com/ubuntu/pool/universe/t/t1lib/t1lib-bin_5.1.0-2ubuntu0.7.04.1_amd64.deb
      Size/MD5:    60170 a812326450f93a0163919726f7e02a15

  i386 architecture (x86 compatible Intel/AMD):

    http://security.ubuntu.com/ubuntu/pool/main/t/t1lib/libt1-5_5.1.0-2ubuntu0.7.04.1_i386.deb
      Size/MD5:   146962 257494ee2f5eaa3a4e26c3421c330746
    http://security.ubuntu.com/ubuntu/pool/main/t/t1lib/libt1-dev_5.1.0-2ubuntu0.7.04.1_i386.deb
      Size/MD5:   169794 048e0b6a507071578ab91b19208ca38c
    http://security.ubuntu.com/ubuntu/pool/universe/t/t1lib/t1lib-bin_5.1.0-2ubuntu0.7.04.1_i386.deb
      Size/MD5:    54696 819cb56786b7556a1d8a561fbd88a6ef

  powerpc architecture (Apple Macintosh G3/G4/G5):

    http://security.ubuntu.com/ubuntu/pool/main/t/t1lib/libt1-5_5.1.0-2ubuntu0.7.04.1_powerpc.deb
      Size/MD5:   162466 ef11b5d8956475e4bc79faec7bac4607
    http://security.ubuntu.com/ubuntu/pool/main/t/t1lib/libt1-dev_5.1.0-2ubuntu0.7.04.1_powerpc.deb
      Size/MD5:   205674 b1d0b8c09f86721d81363f0c560efb83
    http://security.ubuntu.com/ubuntu/pool/universe/t/t1lib/t1lib-bin_5.1.0-2ubuntu0.7.04.1_powerpc.deb
      Size/MD5:    58292 1fabfed321d1d7b732aed3b5fcc0a501

  sparc architecture (Sun SPARC/UltraSPARC):

    http://security.ubuntu.com/ubuntu/pool/main/t/t1lib/libt1-5_5.1.0-2ubuntu0.7.04.1_sparc.deb
      Size/MD5:   155778 7f916ff82c6d05c995a4ce76d130703f
    http://security.ubuntu.com/ubuntu/pool/main/t/t1lib/libt1-dev_5.1.0-2ubuntu0.7.04.1_sparc.deb
      Size/MD5:   191048 517dbfb86bf112e634c2681591ed1628
    http://security.ubuntu.com/ubuntu/pool/universe/t/t1lib/t1lib-bin_5.1.0-2ubuntu0.7.04.1_sparc.deb
      Size/MD5:    57492 542e025fa07660a20d322681a61de387