~ubuntu-branches/ubuntu/precise/freetype/precise-security

• Changes
• Files

~ubuntu-branches/ubuntu/precise/freetype/precise-security » Changes from revision 50

From Revision 50 to 31

expand all

collapse all

Rev		Summary	Authors	Tags	Date	Diff	Files
50		* SECURITY UPDATE: uninitialized memory reads (LP: #1449225) * SECURITY UPDATE: uninitialized memory reads (LP: #1449225)   - debian/patches-freetype/savannah-bug-41309.patch: fix use of     uninitialized data in src/cid/cidload.c, src/psaux/psobjs.c,     src/type1/t1load.c, src/type42/t42parse.c.   - No CVE number * SECURITY UPDATE: denial of service via infinite loop in parse_encode   (LP: #1492124)   - debian/patches-freetype/savannah-bug-41590.patch: protect against     invalid charcode in src/type1/t1load.c.   - No CVE number	Marc Deslauriers	2.4.8-1ubuntu2.3	8 years ago
49		* SECURITY UPDATE: denial of service and possible code execu... * SECURITY UPDATE: denial of service and possible code execution via   multiple security issues   - debian/patches-freetype/CVE-2014-96xx/*.patch: backport a large     quantity of upstream commits to fix multiple security issues.   - CVE-2014-9656   - CVE-2014-9657   - CVE-2014-9658   - CVE-2014-9660   - CVE-2014-9661   - CVE-2014-9663   - CVE-2014-9664   - CVE-2014-9666   - CVE-2014-9667   - CVE-2014-9669   - CVE-2014-9670   - CVE-2014-9671   - CVE-2014-9672   - CVE-2014-9673   - CVE-2014-9674   - CVE-2014-9675	Marc Deslauriers	2.4.8-1ubuntu2.2	9 years ago
48		* SECURITY UPDATE: denial of service and possible code execu... * SECURITY UPDATE: denial of service and possible code execution via NULL   pointer dereference   - debian/patches-freetype/CVE-2012-5668.patch: reset props_size in case     of allocation error in src/bdf/bdflib.c.   - CVE-2012-5668 * SECURITY UPDATE: denial of service and possible code execution via heap   buffer over-read in BDF parsing   - debian/patches-freetype/CVE-2012-5669.patch: use correct array size     in src/bdf/bdflib.c.   - CVE-2012-5669	Marc Deslauriers	2.4.8-1ubuntu2.1	11 years ago
47		* debian/patches-freetype/revert_scalable_fonts_metric.patch... * debian/patches-freetype/revert_scalable_fonts_metric.patch:   - revert commit "Fix metrics on size request for scalable fonts.",     it's breaking gtk underlining markups and creating some other      issues as well (lp: #972223)	Sebastien Bacher	2.4.8-1ubuntu2	12 years ago
46		* SECURITY UPDATE: Denial of service via crafted BDF font (L... * SECURITY UPDATE: Denial of service via crafted BDF font (LP: #963283)   - debian/patches-freetype/CVE-2012-1126.patch: Perform better input     sanitization when parsing properties. Based on upstream patch.   - CVE-2012-1126 * SECURITY UPDATE: Denial of service via crafted BDF font   - debian/patches-freetype/CVE-2012-1127.patch: Perform better input     sanitization when parsing glyphs. Based on upstream patch.   - CVE-2012-1127 * SECURITY UPDATE: Denial of service via crafted TrueType font   - debian/patches-freetype/CVE-2012-1128.patch: Improve loop logic to avoid     NULL pointer dereference. Based on upstream patch.   - CVE-2012-1128 * SECURITY UPDATE: Denial of service via crafted Type42 font   - debian/patches-freetype/CVE-2012-1129.patch: Perform better input     sanitization when parsing SFNT strings. Based on upstream patch.   - CVE-2012-1129 * SECURITY UPDATE: Denial of service via crafted PCF font   - debian/patches-freetype/CVE-2012-1130.patch: Allocate enough memory to     properly NULL-terminate parsed properties strings. Based on upstream     patch.   - CVE-2012-1130 * SECURITY UPDATE: Denial of service via crafted TrueType font   - debian/patches-freetype/CVE-2012-1131.patch: Use appropriate data type to     prevent integer truncation on 64 bit systems when rendering fonts. Based     on upstream patch.   - CVE-2012-1131 * SECURITY UPDATE: Denial of service via crafted Type1 font   - debian/patches-freetype/CVE-2012-1132.patch: Ensure strings are of     appropriate length when loading Type1 fonts. Based on upstream patch.   - CVE-2012-1132 * SECURITY UPDATE: Denial of service and arbitrary code execution via   crafted BDF font   - debian/patches-freetype/CVE-2012-1133.patch: Limit range of negative     glyph encoding values to prevent invalid array indexes. Based on     upstream patch.   - CVE-2012-1133 * SECURITY UPDATE: Denial of service and arbitrary code execution via   crafted Type1 font   - debian/patches-freetype/CVE-2012-1134.patch: Enforce a minimum Type1     private dictionary size to prevent writing past array bounds. Based on     upstream patch.   - CVE-2012-1134 * SECURITY UPDATE: Denial of service via crafted TrueType font   - debian/patches-freetype/CVE-2012-1135.patch: Perform proper bounds     checks when interpreting TrueType bytecode. Based on upstream patch.   - CVE-2012-1135 * SECURITY UPDATE: Denial of service and arbitrary code execution via   crafted BDF font   - debian/patches-freetype/CVE-2012-1136.patch: Ensure encoding field is     defined when parsing glyphs. Based on upstream patch.   - CVE-2012-1136 * SECURITY UPDATE: Denial of service via crafted BDF font   - debian/patches-freetype/CVE-2012-1137.patch: Allocate sufficient number     of array elements to prevent reading past array bounds. Based on     upstream patch.   - CVE-2012-1137 * SECURITY UPDATE: Denial of service via crafted TrueType font   - debian/patches-freetype/CVE-2012-1138.patch: Correct typo resulting in     invalid read from wrong memory location. Based on upstream patch.   - CVE-2012-1138 * SECURITY UPDATE: Denial of service via crafted BDF font   - debian/patches-freetype/CVE-2012-1139.patch: Check array index values to     prevent reading invalid memory. Based on upstream patch.   - CVE-2012-1139 * SECURITY UPDATE: Denial of service via crafted PostScript font   - debian/patches-freetype/CVE-2012-1140.patch: Fix off-by-one error in     boundary checks. Based on upstream patch.   - CVE-2012-1140 * SECURITY UPDATE: Denial of service via crafted BDF font   - debian/patches-freetype/CVE-2012-1141.patch: Initialize field elements     to prevent invalid read. Based on upstream patch.   - CVE-2012-1141 * SECURITY UPDATE: Denial of service via crafted Windows FNT/FON font   - debian/patches-freetype/CVE-2012-1142.patch: Perform input sanitization     on first and last character code fields. Based on upstream patch.   - CVE-2012-1142 * SECURITY UPDATE: Denial of service via crafted font   - debian/patches-freetype/CVE-2012-1143.patch: Protect against divide by     zero when dealing with 32 bit types. Based on upstream patch.   - CVE-2012-1143 * SECURITY UPDATE: Denial of service and arbitrary code execution via   crafted TrueType font   - debian/patches-freetype/CVE-2012-1144.patch: Perform input sanitization     on the first glyph outline point value. Based on upstream patch.   - CVE-2012-1144	Tyler Hicks	2.4.8-1ubuntu1	12 years ago
45		* New upstream release * New upstream release   - upstream fix for CVE-2011-3439.  Closes: #649122.   - adjust libfreetype6.symbols for a newly-exported function.	Steve Langasek	2.4.8-1	12 years ago
44		* Use dpkg-buildflags through debhelper. * Use dpkg-buildflags through debhelper. * Don't set -Werror in CFLAGS on alpha or m68k, to work around a compiler   bug.  Closes: #646334.	Steve Langasek	2.4.7-2	12 years ago
43		* New upstream release * New upstream release   - upstream fix for CVE-2011-3256.  Closes: #646120.   - drop debian/patches-freetype/0001-Fix-Savannah-bug-33992.patch,     included upstream. * Pass --without-bzip2 to configure, to avoid unwanted dependency on   libbz2.  Closes: #639638. * Standards-Version 3.9.2.	Steve Langasek	2.4.7-1	12 years ago
42		debian/patches-freetype/0001-Fix-Savannah-bug-33992.patch: [... debian/patches-freetype/0001-Fix-Savannah-bug-33992.patch: [PATCH] Fix Savannah bug #33992.  Thanks to David Bevan <david.bevan@pb.com>.  Closes: #638348.	Steve Langasek	2.4.6-2	12 years ago
41		* SECURITY UPDATE: arbitrary code execution via crafted Type... * SECURITY UPDATE: arbitrary code execution via crafted Type 1 font   - debian/patches-freetype/CVE-2011-0226.patch: check for proper     signedness in src/psaux/t1decode.c.   - CVE-2011-0226 * debian/rules: fix FTBFS with gcc 4.6 by adding   -Wno-unused-but-set-variable to CFLAGS to downgrade it to a warning.	Marc Deslauriers	2.4.4-2ubuntu1	12 years ago
40		* Build for multiarch, using debhelper compat 9. * Build for multiarch, using debhelper compat 9. * Add Pre-Depends: ${misc:Pre-Depends} to pick up multiarch-support   dependency.	Steve Langasek	2.4.4-2	12 years ago
39		No-change rebuild against fixed pkgbinarymangler, to get cor... No-change rebuild against fixed pkgbinarymangler, to get correct multiarch-safe changelogs	Steve Langasek	2.4.4-1ubuntu2	13 years ago
38		releasing version 2.4.4-1ubuntu1 releasing version 2.4.4-1ubuntu1	Steve Langasek	2.4.4-1ubuntu1	13 years ago
37		run update-maintainer run update-maintainer	Steve Langasek		13 years ago
36		install udeb libs to /usr/lib, not the multiarch path install udeb libs to /usr/lib, not the multiarch path	Steve Langasek		13 years ago
35		* FFe LP: #733501. * FFe LP: #733501. * Build for multiarch, using debhelper compat 9. * Add Pre-Depends: ${misc:Pre-Depends} to pick up multiarch-support   dependency.	Steve Langasek		13 years ago
34		* Acknowledge security NMU - thanks, Moritz! * Acknowledge security NMU - thanks, Moritz! * New upstream release, closes: #606286, #600321   - fixes PDF rendering issues.  Closes: #612484, LP: #709229.   - fixes a rendering issue with 'S' glyphs in certain fonts.     LP: #654010.   - drop patches for CVE-2010-3855 and CVE-2010-3814, applied upstream.   - drop patch ft2demos-2.1.7-ftbench.patch; doesn't apply cleanly, the     code has changed significantly, patch never forwarded upstream.  If     this is still an issue, someone will provide a fixed patch.   - drop patch ft2demos-grkey.patch, fixed upstream. * debian/patches-freetype/enable-gxvalid-otvalid.patch: enable the   otvalid and gxvalid table validation modules.  Thanks to Paul Wise   <pabs@debian.org>.  Closes: #520879, LP: #239626. * debian/libfreetype6.symbols: update the symbols file for the same. * debian/rules et al.: convert to dh 7 * drop INSTALL.* from the libfreetype6-dev docs.  Closes: #550971. * move homepage out of debian/copyright and into debian/control. * fix GPL link to point to GPL-2 explicitly. * clean up long-obsolete conflicts/replaces. * drop debian/README.quilt, redundant with debian/README.source. * drop debian/README.Debian, which talks about the long-finished transition   from freetype1. * strip dependency_libs out of /usr/lib/libfreetype.la. * bump standards-version to 3.9.1.	Steve Langasek	2.4.4-1	13 years ago
33		* Non-maintainer upload by the Security Team. * Non-maintainer upload by the Security Team. * Fix CVE-2010-3855 and CVE-2010-3814 (Closes: #602221)	Moritz Muehlenhoff	2.4.2-2.1	13 years ago
32		* SECURITY UPDATE: denial of service and possible code execu... * SECURITY UPDATE: denial of service and possible code execution via   improper error handling of SHZ bytecode instruction   - debian/patches/CVE-2010-3814.patch: add bounds check to     src/truetype/ttinterp.c.   - CVE-2010-3814 * SECURITY UPDATE: denial of service and possible code execution via   TrueType GX font   - debian/patches/CVE-2010-3855.patch: add bounds checks to     src/truetype/ttgxvar.c.   - CVE-2010-3855	Marc Deslauriers	2.4.2-2ubuntu0.1	13 years ago
31		debian/patches-ft2demos/f2tdemos-grkey.patch: update to fix ... debian/patches-ft2demos/f2tdemos-grkey.patch: update to fix another problem when building under gcc-4.5 that was overlooked in the previous version of the patch.  LP: #624740.	Steve Langasek	2.4.2-2	13 years ago

• Older »

Loggerhead is a web-based interface for Breezy
Version: 2.0.1