I've attached a patch that changes grace to use its embedded t1lib copy. This is not at all ideal since probably most of the t1lib security patches aren't included, but grace is the last package remaining to drop support for t1lib, so it needs a change.
Switching to freetype, isn't straightforward, and I spent some time on it today, but it would be the ideal solution. The other option is removing grace from testing, and eventually unstable. Maybe that makes a some sense since upstream is not very active. Best wishes, Mike
diff -Nru grace-5.1.23/debian/changelog grace-5.1.23/debian/changelog --- grace-5.1.23/debian/changelog 2013-09-28 20:19:53.000000000 +0000 +++ grace-5.1.23/debian/changelog 2014-03-09 23:32:35.000000000 +0000 @@ -1,3 +1,10 @@ +grace (1:5.1.23-3+nmu1) unstable; urgency=medium + + * Non-maintainer upload. + * Use embedded t1lib (closes: #638760). + + -- Michael Gilbert <mgilb...@debian.org> Sun, 09 Mar 2014 23:26:05 +0000 + grace (1:5.1.23-3) unstable; urgency=low * rules: Automatically update config.{sub,guess} at build time. Add diff -Nru grace-5.1.23/debian/control grace-5.1.23/debian/control --- grace-5.1.23/debian/control 2013-09-28 20:25:03.000000000 +0000 +++ grace-5.1.23/debian/control 2014-03-09 23:27:10.000000000 +0000 @@ -6,7 +6,7 @@ Standards-Version: 3.9.4 Build-Depends: debhelper (>= 9), libmotif-dev, libxpm-dev, libfftw3-dev, libjpeg-dev, libpng-dev | libpng12-dev, libnetcdf-dev, - gfortran | fortran-compiler, xmhtml1-dev (>= 1.1.7-19) , libt1-dev, fontconfig, + gfortran | fortran-compiler, xmhtml1-dev (>= 1.1.7-19), fontconfig, linuxdoc-tools, libxau-dev, texlive-latex-base, texlive-latex-recommended, libxbae-dev (>= 4.60.4-4), autotools-dev Vcs-Browser: http://anonscm.debian.org/viewvc/collab-maint/deb-maint/grace/trunk/ diff -Nru grace-5.1.23/debian/rules grace-5.1.23/debian/rules --- grace-5.1.23/debian/rules 2013-09-28 20:18:52.000000000 +0000 +++ grace-5.1.23/debian/rules 2014-03-09 23:31:27.000000000 +0000 @@ -1,7 +1,7 @@ #!/usr/bin/make -f export DEB_LDFLAGS_MAINT_APPEND = -Wl,--as-needed -export DEB_BUILD_MAINT_OPTIONS = hardening=+bindnow +export DEB_BUILD_MAINT_OPTIONS = hardening=+bindnow,-format %: dh $@ --with autotools_dev @@ -13,7 +13,8 @@ --with-helpviewer="sensible-browser %s" \ --with-f77=gfortran \ --disable-pdfdrv \ - --without-bundled-xbae + --without-bundled-xbae \ + --with-bundled-t1lib=yes \ # "make check" is more of a series of demos, requires X override_dh_auto_test: