~mait/freetype/freetype-infinality : changes

~mait/freetype/freetype-infinality » Changes from revision 52

From Revision 52 to 33

Rev	Summary	Authors	Tags	Date
52	edit changelog edit changelog	CheolHan Yoon	2.4.10-0ubuntu1ppa1	11 years ago
51	add additional symbol info add additional symbol info	CheolHan Yoon		11 years ago
50	Ignore compiler warning Ignore compiler warning	CheolHan Yoon		11 years ago
49	infinality font rendering patches applied infinality font rendering patches applied http://www.infinality.net/blog/infinality-freetype-patches/ http://www.infinality.net/fedora/linux/zips/freetype-infinality-2.4.10-20120616_01-x86_64.tar.bz2	CheolHan Yoon		11 years ago
48	* New upstream version * New upstream version * debian/libfreetype6.symbols: - new version update * debian/patches-freetype/savannah-bug-35847.patch, debian/patches-freetype/savannah-bug-35833.patch: - dropped, the fixes are in the new version * Resynchronize on Debian, remaining diff: * debian/patches-freetype/revert_scalable_fonts_metric.patch: - revert commit "Fix metrics on size request for scalable fonts.", it's breaking gtk underlining markups and creating some other issues as well (lp: #972223)	Sebastien Bacher	2.4.10-0ubuntu1	11 years ago
47	* debian/patches-freetype/revert_scalable_fonts_metric.patch... * debian/patches-freetype/revert_scalable_fonts_metric.patch: - revert commit "Fix metrics on size request for scalable fonts.", it's breaking gtk underlining markups and creating some other issues as well (lp: #972223)	Sebastien Bacher	2.4.8-1ubuntu2	12 years ago
46	* SECURITY UPDATE: Denial of service via crafted BDF font (L... * SECURITY UPDATE: Denial of service via crafted BDF font (LP: #963283) - debian/patches-freetype/CVE-2012-1126.patch: Perform better input sanitization when parsing properties. Based on upstream patch. - CVE-2012-1126 * SECURITY UPDATE: Denial of service via crafted BDF font - debian/patches-freetype/CVE-2012-1127.patch: Perform better input sanitization when parsing glyphs. Based on upstream patch. - CVE-2012-1127 * SECURITY UPDATE: Denial of service via crafted TrueType font - debian/patches-freetype/CVE-2012-1128.patch: Improve loop logic to avoid NULL pointer dereference. Based on upstream patch. - CVE-2012-1128 * SECURITY UPDATE: Denial of service via crafted Type42 font - debian/patches-freetype/CVE-2012-1129.patch: Perform better input sanitization when parsing SFNT strings. Based on upstream patch. - CVE-2012-1129 * SECURITY UPDATE: Denial of service via crafted PCF font - debian/patches-freetype/CVE-2012-1130.patch: Allocate enough memory to properly NULL-terminate parsed properties strings. Based on upstream patch. - CVE-2012-1130 * SECURITY UPDATE: Denial of service via crafted TrueType font - debian/patches-freetype/CVE-2012-1131.patch: Use appropriate data type to prevent integer truncation on 64 bit systems when rendering fonts. Based on upstream patch. - CVE-2012-1131 * SECURITY UPDATE: Denial of service via crafted Type1 font - debian/patches-freetype/CVE-2012-1132.patch: Ensure strings are of appropriate length when loading Type1 fonts. Based on upstream patch. - CVE-2012-1132 * SECURITY UPDATE: Denial of service and arbitrary code execution via crafted BDF font - debian/patches-freetype/CVE-2012-1133.patch: Limit range of negative glyph encoding values to prevent invalid array indexes. Based on upstream patch. - CVE-2012-1133 * SECURITY UPDATE: Denial of service and arbitrary code execution via crafted Type1 font - debian/patches-freetype/CVE-2012-1134.patch: Enforce a minimum Type1 private dictionary size to prevent writing past array bounds. Based on upstream patch. - CVE-2012-1134 * SECURITY UPDATE: Denial of service via crafted TrueType font - debian/patches-freetype/CVE-2012-1135.patch: Perform proper bounds checks when interpreting TrueType bytecode. Based on upstream patch. - CVE-2012-1135 * SECURITY UPDATE: Denial of service and arbitrary code execution via crafted BDF font - debian/patches-freetype/CVE-2012-1136.patch: Ensure encoding field is defined when parsing glyphs. Based on upstream patch. - CVE-2012-1136 * SECURITY UPDATE: Denial of service via crafted BDF font - debian/patches-freetype/CVE-2012-1137.patch: Allocate sufficient number of array elements to prevent reading past array bounds. Based on upstream patch. - CVE-2012-1137 * SECURITY UPDATE: Denial of service via crafted TrueType font - debian/patches-freetype/CVE-2012-1138.patch: Correct typo resulting in invalid read from wrong memory location. Based on upstream patch. - CVE-2012-1138 * SECURITY UPDATE: Denial of service via crafted BDF font - debian/patches-freetype/CVE-2012-1139.patch: Check array index values to prevent reading invalid memory. Based on upstream patch. - CVE-2012-1139 * SECURITY UPDATE: Denial of service via crafted PostScript font - debian/patches-freetype/CVE-2012-1140.patch: Fix off-by-one error in boundary checks. Based on upstream patch. - CVE-2012-1140 * SECURITY UPDATE: Denial of service via crafted BDF font - debian/patches-freetype/CVE-2012-1141.patch: Initialize field elements to prevent invalid read. Based on upstream patch. - CVE-2012-1141 * SECURITY UPDATE: Denial of service via crafted Windows FNT/FON font - debian/patches-freetype/CVE-2012-1142.patch: Perform input sanitization on first and last character code fields. Based on upstream patch. - CVE-2012-1142 * SECURITY UPDATE: Denial of service via crafted font - debian/patches-freetype/CVE-2012-1143.patch: Protect against divide by zero when dealing with 32 bit types. Based on upstream patch. - CVE-2012-1143 * SECURITY UPDATE: Denial of service and arbitrary code execution via crafted TrueType font - debian/patches-freetype/CVE-2012-1144.patch: Perform input sanitization on the first glyph outline point value. Based on upstream patch. - CVE-2012-1144	Tyler Hicks	2.4.8-1ubuntu1	12 years ago
45	* New upstream release * New upstream release - upstream fix for CVE-2011-3439. Closes: #649122. - adjust libfreetype6.symbols for a newly-exported function.	Steve Langasek	2.4.8-1	12 years ago
44	* Use dpkg-buildflags through debhelper. * Use dpkg-buildflags through debhelper. * Don't set -Werror in CFLAGS on alpha or m68k, to work around a compiler bug. Closes: #646334.	Steve Langasek	2.4.7-2	12 years ago
43	* New upstream release * New upstream release - upstream fix for CVE-2011-3256. Closes: #646120. - drop debian/patches-freetype/0001-Fix-Savannah-bug-33992.patch, included upstream. * Pass --without-bzip2 to configure, to avoid unwanted dependency on libbz2. Closes: #639638. * Standards-Version 3.9.2.	Steve Langasek	2.4.7-1	12 years ago
42	debian/patches-freetype/0001-Fix-Savannah-bug-33992.patch: [... debian/patches-freetype/0001-Fix-Savannah-bug-33992.patch: [PATCH] Fix Savannah bug #33992. Thanks to David Bevan <david.bevan@pb.com>. Closes: #638348.	Steve Langasek	2.4.6-2	12 years ago
41	* SECURITY UPDATE: arbitrary code execution via crafted Type... * SECURITY UPDATE: arbitrary code execution via crafted Type 1 font - debian/patches-freetype/CVE-2011-0226.patch: check for proper signedness in src/psaux/t1decode.c. - CVE-2011-0226 * debian/rules: fix FTBFS with gcc 4.6 by adding -Wno-unused-but-set-variable to CFLAGS to downgrade it to a warning.	Marc Deslauriers	2.4.4-2ubuntu1	12 years ago
40	* Build for multiarch, using debhelper compat 9. * Build for multiarch, using debhelper compat 9. * Add Pre-Depends: ${misc:Pre-Depends} to pick up multiarch-support dependency.	Steve Langasek	2.4.4-2	12 years ago
39	No-change rebuild against fixed pkgbinarymangler, to get cor... No-change rebuild against fixed pkgbinarymangler, to get correct multiarch-safe changelogs	Steve Langasek	2.4.4-1ubuntu2	13 years ago
38	releasing version 2.4.4-1ubuntu1 releasing version 2.4.4-1ubuntu1	Steve Langasek	2.4.4-1ubuntu1	13 years ago
37	run update-maintainer run update-maintainer	Steve Langasek		13 years ago
36	install udeb libs to /usr/lib, not the multiarch path install udeb libs to /usr/lib, not the multiarch path	Steve Langasek		13 years ago
35	* FFe LP: #733501. * FFe LP: #733501. * Build for multiarch, using debhelper compat 9. * Add Pre-Depends: ${misc:Pre-Depends} to pick up multiarch-support dependency.	Steve Langasek		13 years ago
34	* Acknowledge security NMU - thanks, Moritz! * Acknowledge security NMU - thanks, Moritz! * New upstream release, closes: #606286, #600321 - fixes PDF rendering issues. Closes: #612484, LP: #709229. - fixes a rendering issue with 'S' glyphs in certain fonts. LP: #654010. - drop patches for CVE-2010-3855 and CVE-2010-3814, applied upstream. - drop patch ft2demos-2.1.7-ftbench.patch; doesn't apply cleanly, the code has changed significantly, patch never forwarded upstream. If this is still an issue, someone will provide a fixed patch. - drop patch ft2demos-grkey.patch, fixed upstream. * debian/patches-freetype/enable-gxvalid-otvalid.patch: enable the otvalid and gxvalid table validation modules. Thanks to Paul Wise <pabs@debian.org>. Closes: #520879, LP: #239626. * debian/libfreetype6.symbols: update the symbols file for the same. * debian/rules et al.: convert to dh 7 * drop INSTALL.* from the libfreetype6-dev docs. Closes: #550971. * move homepage out of debian/copyright and into debian/control. * fix GPL link to point to GPL-2 explicitly. * clean up long-obsolete conflicts/replaces. * drop debian/README.quilt, redundant with debian/README.source. * drop debian/README.Debian, which talks about the long-finished transition from freetype1. * strip dependency_libs out of /usr/lib/libfreetype.la. * bump standards-version to 3.9.1.	Steve Langasek	2.4.4-1	13 years ago
33	* Non-maintainer upload by the Security Team. * Non-maintainer upload by the Security Team. * Fix CVE-2010-3855 and CVE-2010-3814 (Closes: #602221)	Moritz Muehlenhoff	2.4.2-2.1	13 years ago

Older »