~ubuntu-branches/ubuntu/maverick/freetype/maverick-updates

• Changes
• Files

~ubuntu-branches/ubuntu/maverick/freetype/maverick-updates » Changes from revision 35

From Revision 34 to 15

expand all

collapse all

Rev		Summary	Authors	Tags	Date	Diff	Files
34		* SECURITY UPDATE: Arbitrary code execution via crafted Type... * SECURITY UPDATE: Arbitrary code execution via crafted Type 1 font   - debian/patches-freetype/CVE-2011-3256.patch: Sanitize Type 1 font inputs     in src/base/ftbitmap.c, src/psaux/t1decode.c, src/raster/ftrend1.c, and     src/truetype/ttgxvar.c. Based on upstream patch.   - CVE-2011-3256 * SECURITY UPDATE: Arbitrary code execution via crafted CID-keyed PS font   - debian/patches-freetype/CVE-2011-3439.patch: Sanitize CID-keyed     PostScript font inputs in src/cid/cidload.c. Based on upstream patch.   - CVE-2011-3439	Tyler Hicks	2.4.2-2ubuntu0.3	12 years ago
33		* SECURITY UPDATE: arbitrary code execution via crafted Type... * SECURITY UPDATE: arbitrary code execution via crafted Type 1 font   - debian/patches-freetype/CVE-2011-0226.patch: check for proper     signedness in src/psaux/t1decode.c.   - CVE-2011-0226	Marc Deslauriers	2.4.2-2ubuntu0.2	12 years ago
32		* SECURITY UPDATE: denial of service and possible code execu... * SECURITY UPDATE: denial of service and possible code execution via   improper error handling of SHZ bytecode instruction   - debian/patches/CVE-2010-3814.patch: add bounds check to     src/truetype/ttinterp.c.   - CVE-2010-3814 * SECURITY UPDATE: denial of service and possible code execution via   TrueType GX font   - debian/patches/CVE-2010-3855.patch: add bounds checks to     src/truetype/ttgxvar.c.   - CVE-2010-3855	Marc Deslauriers	2.4.2-2ubuntu0.1	13 years ago
31		debian/patches-ft2demos/f2tdemos-grkey.patch: update to fix ... debian/patches-ft2demos/f2tdemos-grkey.patch: update to fix another problem when building under gcc-4.5 that was overlooked in the previous version of the patch.  LP: #624740.	Steve Langasek	2.4.2-2	13 years ago
30		* New upstream release * New upstream release   - High urgency upload for RC security bugfix.   - Corrects a stack overflow in the interpreter for CFF fonts     (CVE-2010-1797).  Closes: #592399.   - drop debian/patches-freetype/opentype-missing-glyphs, included     upstream. * Update libfreetype6.symbols for two new functions.	Steve Langasek	2.4.2-1	13 years ago
29		* debian/patches-freetype/opentype-missing-glyphs: fix from ... * debian/patches-freetype/opentype-missing-glyphs: fix from upstream for   glyphs from OpenType fonts failing to render.  Closes: #589256,   LP: #605858. * Medium-urgency upload to fix important regression.	Steve Langasek	2.4.0-2	13 years ago
28		* New upstream release (closes: #572576). * New upstream release (closes: #572576).   - fixes CVE-2010-2497, CVE-2010-2498, CVE-2010-2499, CVE-2010-2500,     CVE-2010-2519, and CVE-2010-2520   - high-urgency upload for security bugfixes.   - drop debian/patches-freetype/freetype-bytecode-interpreter.patch and     debian/patches-freetype/enable-full-bytecode-interpreter - the     bytecode interpreter is now enabled by default upstream at last!   - drop debian/patches-freetype/freetype-bdflib-large-encodings.patch and     debian/patches-freetype/uninitialized-vars.patch, applied upstream.   - drop debian/patches-freetype/331-hmtx-no-shorts.diff, implemented     differently upstream.   - new symbol FT_Library_SetLcdFilterWeights added to the symbols table,     bump the shlibs.   - fixes problem with outlines for some OpenType fonts.  Closes; #583868. * Add a debian/watch file - though we won't use it internally due to the   multiple tarball issues. * Begin to simplify debian/rules a little by trimming dead code. * Don't set SHELL = /bin/bash in debian/rules, no bashisms found in   the current package. * debian/patches/ft2demos-grkey.patch: don't point grKEY() at an enum when   it's being passed values that aren't defined in that enum, fixing a build   failure with gcc 4.5.  Thanks to Brian M. Carlson for the preliminary   patch.  Closes: #564989. * docs/PATENTS no longer exists, so we don't install it. * Add ${misc:Depends} substitutions to all packages, per lintian. * Standards-Version to 3.8.4, no changes required. * Clarify in debian/copyright that freetype can be used under GPLv2 or   later.	Steve Langasek	2.4.0-1	13 years ago
27		Revert last change. I really did have a FTBFS that "looked" ... Revert last change. I really did have a FTBFS that "looked" like this was the cause, but it's actually something else that dropped it's dependency on libfreetype6-dev.	Mario Limonciello	2.3.11-1ubuntu2	14 years ago
26		* debian/libfreetype6.files: * debian/libfreetype6.files:   - Correct an extra period that was placed causing other packages to     FTBFS when linking against freetype.	Mario Limonciello	2.3.11-1ubuntu1	14 years ago
25		* New upstream release * New upstream release   - drop debian/patches-freetype/proper-armel-asm-declaration.patch and     debian/patches-freetype/CVE-2009-0946.patch, applied upstream.   - new symbol tt_cmap13_class_rec added to the symbols table, bump the     shlibs.	Steve Langasek	2.3.11-1	14 years ago
24		* Pass proper --host/--build args to ./configure, to support * Pass proper --host/--build args to ./configure, to support   cross-building.  Closes: #465292. * clean up a number of unused variables in debian/rules; maybe someday   we'll get this package to converge on debhelper 7... :) * Fix the doc-base section for libfreetype6-dev.  Closes: #315845. * Remove one final reference to /usr/X11R6 in debian/rules. * Drop incorrect Replaces: freetype0, freetype1 * Add debian/README.source, documenting the madness that is this source   package. * Standards-Version to 3.8.0. * Fix multiple integer overflows leading to arbitrary code execution   or DoS (CVE-2009-0946; Closes: #524925).  Thanks to Nico Golde for the   NMU.	Steve Langasek	2.3.9-5	14 years ago
23		* Non-maintainer upload by the Security Team. * Non-maintainer upload by the Security Team. * Fix multiple integer overflows leading to arbitrary code execution   or DoS (CVE-2009-0946; Closes: #524925).	Nico Golde	2.3.9-4.1	15 years ago
22		No-change rebuild to fix lpia shared library dependencies. No-change rebuild to fix lpia shared library dependencies.	Colin Watson	2.3.9-4build1	15 years ago
21		* debian/patches-ft2demos/compiler-hardening-fixes.patch: al... * debian/patches-ft2demos/compiler-hardening-fixes.patch: always check the   return value of fread(), to appease hardened compilers such as what's   used in Ubuntu by default.  Set a good example, even if these demos   shouldn't be security-sensitive!  Also, along the way catch and fix a   small memory leak on error. :) * debian/patches-freetype/proper-armel-asm-declaration.patch: use __asm__   for declaring assembly instead of asm, fixing a build failure on armel.	Steve Langasek	2.3.9-4	15 years ago
20		* Drop spurious Suggests: on libfreetype6-dev. Closes: #363... * Drop spurious Suggests: on libfreetype6-dev.  Closes: #363937. * debian/patches-freetype/enable-subpixel-rendering.patch: enable subpixel   rendering features, used by libcairo and xft to provide LCD colour   filtering.  This is considered no more or less evil than the bytecode   interpreter which we also enable. * Move debian/libfreetype6.copyright to debian/copyright, and selectively   install it to the single binary package in debian/rules; the same   copyright file is used for all the binaries anyway via symlinks, so   there's no reason it shouldn't ship as debian/copyright.   Closes: #381228. * Clip redundant LICENSE.TXT and GPL.TXT files from the   libfreetype6-dev package.  Closes: #459802.	Steve Langasek	2.3.9-3	15 years ago
19		* Merge from Debian unstable, remaining changes: * Merge from Debian unstable, remaining changes:   - debian/patches-freetype/enable-subpixel-rendering.patch:     + enable subpixel rendering features, used by libcairo and xft to       provide LCD colour filtering.  This is considered no more or less       evil than the bytecode interpreter which we also enable.	Steve Langasek	2.3.7-2ubuntu1	15 years ago
18		* Merge from debian testing (LP: #251369) , remaining change... * Merge from debian testing (LP: #251369) , remaining changes:   - debian/patches-freetype/enable-subpixel-rendering.patch:     + enable subpixel rendering features, used by libcairo and xft to       provide LCD colour filtering.  This is considered no more or less       evil than the bytecode interpreter which we also enable.   - Work around Soyuz breakage.	Mike Duigou	2.3.7-1ubuntu1	15 years ago
17		* Merge from debian unstable, remaining changes: * Merge from debian unstable, remaining changes:   - debian/patches-freetype/enable-subpixel-rendering.patch:     + enable subpixel rendering features, used by libcairo and xft to       provide LCD colour filtering.  This is considered no more or less       evil than the bytecode interpreter which we also enable.   - Work around Soyuz breakage. * Modify Maintainer value to match the DebianMaintainerField   specification.	Bryce Harrington	2.3.6-1ubuntu1	15 years ago
16		* debian/patches-freetype/enable-subpixel-rendering.patch: * debian/patches-freetype/enable-subpixel-rendering.patch:   - Restore patch that enables subpixel rendering features, now that     libcairo and xft provide the ability for the specific lcd filter     to be changed.	Scott James Remnant	2.3.5-1ubuntu4	16 years ago
15		* debian/patches-freetype/series * debian/patches-freetype/series  - Fix the removal of enable-subpixel-rendering.patch	Matthew Garrett	2.3.5-1ubuntu3	16 years ago

• Older »

Loggerhead is a web-based interface for Breezy
Version: 2.0.1