~ubuntu-branches/ubuntu/dapper/freetype/dapper-security

• Changes
• Files

~ubuntu-branches/ubuntu/dapper/freetype/dapper-security » Changes from revision 15

From Revision 15

expand all

collapse all

Rev		Summary	Authors	Tags	Date	Diff	Files
15		* SECURITY UPDATE: denial of service and possible arbitrary ... * SECURITY UPDATE: denial of service and possible arbitrary code   execution via libXft overflow.   - debian/patches/425-CVE-2010-3311.patch: correctly validate position     in src/base/ftstream.c.   - CVE-2010-3311 * SECURITY UPDATE: denial of service and possible code execution via   TrueType GX font   - debian/patches/426-CVE-2010-3855.patch: add bounds checks to     src/truetype/ttgxvar.c.   - CVE-2010-3855	Marc Deslauriers	2.1.10-1ubuntu2.10	13 years ago
14		* SECURITY UPDATE: possible arbitrary code execution via buf... * SECURITY UPDATE: possible arbitrary code execution via buffer overflow   in CFF Type2 CharStrings interpreter (LP: #617019)   - debian/patches/418-CVE-2010-1797.patch: check number of operands     in src/cff/cffgload.c.   - CVE-2010-1797 * SECURITY UPDATE: possible arbitrary code execution via buffer overflow   in the ftmulti demo program (LP: #617019)   - debian/patches/424-CVE-2010-2541.patch: use strncat and adjust     sizes in src/ftmulti.c.   - CVE-2010-2541 * SECURITY UPDATE: possible arbitrary code execution via improper bounds   checking (LP: #617019)   - debian/patches/419-CVE-2010-2805.patch: fix calculation in     src/base/ftstream.c.   - CVE-2010-2805 * SECURITY UPDATE: possible arbitrary code execution via improper bounds   checking (LP: #617019)   - debian/patches/420-CVE-2010-2806.patch: check string sizes in     src/type42/t42parse.c.   - CVE-2010-2806 * SECURITY UPDATE: possible arbitrary code execution via improper type   comparisons (LP: #617019)   - debian/patches/421-CVE-2010-2807.patch: perform better bounds     checking in src/smooth/ftsmooth.c, src/truetype/ttinterp.*.   - CVE-2010-2807 * SECURITY UPDATE: possible arbitrary code execution via memory   corruption in Adobe Type 1 Mac Font File (LWFN) fonts (LP: #617019)   - debian/patches/422-CVE-2010-2808.patch: check rlen in     src/base/ftobjs.c.   - CVE-2010-2808 * SECURITY UPDATE: denial of service via bdf font (LP: #617019)   - debian/patches/423-bug30135.patch: don't modify value in static     string in src/bdf/bdflib.c.	Marc Deslauriers	2.1.10-1ubuntu2.8	13 years ago
13		* SECURITY UPDATE: denial of service and possible arbitrary ... * SECURITY UPDATE: denial of service and possible arbitrary code   execution via invalid free   - debian/patches/412-CVE-2010-2498.patch: validate number of points in     src/pshinter/pshalgo.c.   - CVE-2010-2498 * SECURITY UPDATE: arbitrary code execution via buffer overflow   - debian/patches/413-CVE-2010-2499.patch: check positions and return     code in src/base/ftobjs.c.   - CVE-2010-2499 * SECURITY UPDATE: arbitrary code execution via integer overflow   - debian/patches/414-CVE-2010-2500.patch: switch to unsigned in     src/smooth/ftgrays.c, check signed width and height in     src/smooth/ftsmooth.c.   - CVE-2010-2500 * SECURITY UPDATE: arbitrary code execution via heap buffer overflow   - debian/patches/415-CVE-2010-2519.patch: correctly calculate length in     src/base/ftobjs.c.   - CVE-2010-2519 * SECURITY UPDATE: arbitrary code execution via invalid realloc   - debian/patches/416-CVE-2010-2520.patch: perform bounds checking in     src/truetype/ttinterp.c.   - CVE-2010-2520 * SECURITY UPDATE: arbitrary code execution via buffer overflows   - debian/patches/417-CVE-2010-2527.patch: change buffer sizes in     src/{ftmulti,ftstring,ftview}.c.   - CVE-2010-2527	Marc Deslauriers	2.1.10-1ubuntu2.7	13 years ago
12		* SECURITY UPDATE: possible code execution via multiple inte... * SECURITY UPDATE: possible code execution via multiple integer overflows   - debian/patches/411-CVE-2009-0946.patch: validate sid values in     src/cff/cffload.c, don't overflow int with table + length in     src/sfnt/ttcmap.c, validate glyph width and height in     src/smooth/ftsmooth.c.   - CVE-2009-0946	Marc Deslauriers	2.1.10-1ubuntu2.6	15 years ago
11		* SECURITY UPDATE: arbitrary code execution via integer over... * SECURITY UPDATE: arbitrary code execution via integer overflows. * Add debian/patches/410-CVE-2008-1806_7_8.patch: upstream fixes   thanks to Steffen Joeris. * References   CVE-2008-1806 CVE-2008-1807 CVE-2008-1808	Kees Cook	2.1.10-1ubuntu2.5	15 years ago
10		* SECURITY UPDATE: arbitrary code execution via integer over... * SECURITY UPDATE: arbitrary code execution via integer overflows. * Add debian/patches/freetype-2.1.10-security-ttgload-fix.patch from   upstream changes. * References   CVE-2007-2754	Kees Cook	2.1.10-1ubuntu2.4	16 years ago
9		* SECURITY UPDATE: arbitrary code execution via integer over... * SECURITY UPDATE: arbitrary code execution via integer overflows. * Add debian/patches/404-bdf-integer.patch from upstream changes. * References   CVE-2007-1351	Kees Cook	2.1.10-1ubuntu2.3	17 years ago
8		* SECURITY UPDATE: Arbitrary code execution and DoS with cra... * SECURITY UPDATE: Arbitrary code execution and DoS with crafted font files. * Add debian/patches/403-pcf-strlen.patch:   - src/pcf/pcfread.c: Detect invalid string lengths.   - CVE-2006-3467	Martin Pitt	2.1.10-1ubuntu2.2	17 years ago
7		* SECURITY UPDATE: Arbitrary code execution and DoS with cra... * SECURITY UPDATE: Arbitrary code execution and DoS with crafted font files. * Add debian/patches/400-ttkern-loop-variable.patch:   - src/sfnt/ttkern.c, tt_face_get_kerning(): Fix inner loop to use a new     variable instead of destroying the outer loop variable.   - Fixes infinite loop with fonts that don't have a properly sorted kerning     sub-table.   - Patch taken from upstream CVS. * Add debian/patches/401-odd_blue_num-safe_alloc.patch:   - src/pshinter/pshglob.c: Prevent integer underflow with malformed fonts     which have an odd number of blue values (these are broken according to     the specs). [CVE-2006-0747]   - src/base/ftutil.c: Fail with an 'invalid argument' error on negative     allocations, just to make double sure. [CVE-2006-2661]   - Patches taken from upstream CVS. * Add debian/patches/402-int-overflows.patch:    - Various int overflow protections. [CVE-2006-1861, CVE-2006-2493]   - Patches taken from upstream CVS. * Many thanks to Josh Bressers for extracting the patches!	Martin Pitt	2.1.10-1ubuntu2.1	17 years ago
6		Update shlibs dependency. Ubuntu: #5901. Update shlibs dependency.  Ubuntu: #5901.	Scott James Remnant	2.1.10-1ubuntu2	18 years ago
5		* Patches for Malone #5560. * Patches for Malone #5560.   [debian/patches/freetype-2.1.10-cvsfixes.patch]:     - various fixes (mostly embolding)   [debian/patches/freetype-2.1.10-xorgfix.patch]:     - put back internal API used by xorg-x11   [debian/patches/freetype-2.1.10-fixautofit.patch]:     - fix autofit render setup   [debian/patches/freetype-2.1.10-memleak.patch]:     - fix memleak   [debian/patches/freetype-2.1.10-fixkerning.patch]:     - fix disabled kerning   [debian/patches/freetype-2.1.10-fixaliasing.patch]:     - fix anti-aliasing rendering * Changes by Jun Kobayashi <fm4j-kbys@asahi-net.or.jp>	Jonathan Riddell	2.1.10-1ubuntu1	18 years ago
4		* New upstream (Closes: #298660, #245532). * New upstream (Closes: #298660, #245532). * New maintainer, co-maintainer required! * Disable CJK autohinting patch due to incompatability with this version   of freetype. * Remove some very old unapplied patches. * Add freetype-config.1 manpage. * Add doc-base file for development docs. (Closes: #280827) * Fix build with non-default umask. (Closes: #307464, #166511) * Patch merged upstream. (Closes: #252673) * Acknowledge NMUS.   (Closes: #221597, #225119, #226380, #249443, #251473, #302269, #259875)	Will Newton	2.1.10-1	18 years ago
3		* NMU * NMU * debian/patches/090-freetype-2.1.7-normalize-fix.diff: Patch   by David Mossberger.  Backport from freetype2 CVS that fixes an   off-by-order-of-magnitude performance issue in the normalization code.   (Closes: #259875)	dann frazier	2.1.7-2.3	19 years ago
2		* New upstream release. Among other enhancements, it contai... * New upstream release.  Among other enhancements, it contains this   important fix:    - Certain fonts, like "foxjump.ttf" contain broken name tables with      invalid entries and wild offsets.  This caused FreeType to crash when      trying to load them.   Kudos to upstream author David Turner for fixing the bug so quickly!   This bug causes gnome-print to crash for users with certain freeware   or shareware fonts, so please put in woody.  Thanks!   (Closes: Bug#135654, Bug#135896)	Anthony Fok	2.0.9-1	22 years ago
1		Import upstream version 2.0.9 Import upstream version 2.0.9	Anthony Fok	upstream-2.0.9	22 years ago

Loggerhead is a web-based interface for Breezy
Version: 2.0.1