Debian Linux Security Advisory 3477-1 - Holger Fuhrmannek discovered that missing input sanitising in the Graphite font rendering engine could result in the execution of arbitrary code.
f8fcce3447a12964a1c43791e3575e4eace08da6d78d9e251dbdcc8024254b2b