~ubuntu-branches/ubuntu/raring/libxfont/raring-security : changes

~ubuntu-branches/ubuntu/raring/libxfont/raring-security » Changes from revision 31

From Revision 26 to 7

Rev	Summary	Authors	Tags	Date
26	* New upstream release. * New upstream release. * Bump xutils-dev build-dep for new macros. * Add xmlto, xorg-sgml-doctools, and w3m build-dep for the doc. * Pass --with-xmlto and --without-fop for the regular build (we want html and txt only). Disable both for the udeb build. * Tweak doc filenames, and handle that through dh_install. * Add --fail-missing -XlibXfont.la for the second dh_install call (the udeb one), for additional safety.	Cyril Brulebois	1:1.4.3-1	13 years ago
25	* New upstream release. * New upstream release. * Bump xutils-dev build-dep for new xorg-macros. * Bump shlibs for register_fpe_functions(). * Update debian/copyright. * Bump Standards-Version to 3.9.0, no changes.	Julien Cristau	1:1.4.2-1	13 years ago
24	[ Julien Cristau ] [ Julien Cristau ] * Rename the build directory to not include DEB_BUILD_GNU_TYPE for no good reason. Thanks, Colin Watson! * Remove myself from Uploaders [ Cyril Brulebois ] * Use dh_makeshlibs’s -V argument instead of debian/libxfont1.shlibs * Add udeb needed for the graphical installer: libxfont1-udeb. * Version the B-D on libfontenc-dev to ensure libxfont1-udeb gets a dependency on libfontenc1-udeb. * Use a bzip2-less flavour for the udeb. * Bump Standards-Version from 3.8.3 to 3.8.4 (no changes needed). * Fix obsolete-relation-form-in-source by using “<<” instead of “<” for xprint in Conflicts, thanks to lintian. * Add myself to Uploaders.	Cyril Brulebois	1:1.4.1-2	14 years ago
23	* New upstream release. * New upstream release. * Bump xutils-dev build-dep for new util-macros. * Build documentation, install it in libxfont-dev. * Enable support for bzip2 compressed bitmap fonts. * Don't use LDFLAGS from the environment. Ubuntu sets that to -Bsymbolic-functions, which breaks libXfont's weak symbols usage.	Julien Cristau	1:1.4.1-1	14 years ago
22	* Rebase to unstable, remaining change: * Rebase to unstable, remaining change: + debian/rules: unset LDFLAGS to not be hit by -Bsymbolic-functions, as libxfont contains weak symbols which are meant to be overriden (cf. LP #226156).	Stefan Potyra	1:1.4.0-1ubuntu1	15 years ago
21	Merge from unstable (LP: #260727), remaining change: Merge from unstable (LP: #260727), remaining change: debian/rules: explicitely unset LDFLAGS in order to avoid that "-Bsymbolic-functions" will get set: libxfont contains a number of weak symbols, which are meant to be overridden (cf. LP 226156).	Stefan Potyra	1:1.3.3-1ubuntu1	15 years ago
20	* debian/rules: Explicetly use empty LDFLAGS, closes LP: #22... * debian/rules: Explicetly use empty LDFLAGS, closes LP: #226156. * debian/control: Mangle Maintainer field according to spec.	Stefan Potyra	1:1.3.2-1ubuntu1	16 years ago
19	* New upstream release * New upstream release * Drop CVE-2008-0006.diff, included upstream.	Julien Cristau	1:1.3.2-1	16 years ago
18	* High urgency upload for security fix. * High urgency upload for security fix. * Fix a buffer overflow in the PCF font parser (CVE-2008-0006). * debian/control updates + add myself to Uploaders, and remove Branden and Fabio with their permission + s/^XS-Vcs/Vcs/ + bump Standards-Version to 3.7.3 (no changes) + libxfont1 is Section: libs + libxfont-dev and libxfont1-dbg are Section: libdevel	Julien Cristau	1:1.3.1-2	16 years ago
17	* Added patch 100_cve_2008_0006_pcf_font_parser_buffer_overf... * Added patch 100_cve_2008_0006_pcf_font_parser_buffer_overflow.patch: Verify firstCol < lastCol and firstRow < lastRow to prevent buffer overflow. * debian/control: Update maintainer to Ubuntu	Bryce Harrington	1:1.3.1-1ubuntu1	16 years ago
16	* New upstream release. * New upstream release. * Add libxfont1.shlibs, bump shlibs to >= 1:1.2.9.	Julien Cristau	1:1.3.1-1	16 years ago
15	* New upstream release. * New upstream release. * debian/control: - Maintainer field updated * debian/copyright: - Added packaging copyright	Bryce Harrington	1:1.3.0-0ubuntu1	16 years ago
14	* Add XS-Vcs-Browser to debian/control. * Add XS-Vcs-Browser to debian/control. * New upstream release. + drop patch from 1:1.2.2-2, applied upstream. * Upload to unstable.	Julien Cristau	1:1.2.8-1	17 years ago
13	* SECURITY UPDATE: BDF font integer overflows. * SECURITY UPDATE: BDF font integer overflows. * Add debian/patches/50_bdf_overflows.patch: upstream fix. * References CVE-2007-1351 CVE-2007-1352	Kees Cook	1:1.2.7-1ubuntu1	17 years ago
12	* New upstream release. * New upstream release. * Add XS-Vcs-Git header to debian/control, and drop obsolete CVS information. * Install the upstream ChangeLog.	Julien Cristau	1:1.2.7-1	17 years ago
11	* debian/patches/from_git_accept_empty_font_path.patch: * debian/patches/from_git_accept_empty_font_path.patch: - patch from git,"fontfile: accept empty (but valid) font paths (bug #3091) If a path has a valid fonts.dir or fonts.alias, but does not contain any fonts (either fonts.dir specifies zero fonts, or fonts could not be loaded), load it as a valid font path anyway." (Ubuntu: #2066, #52163, #79566)	Sebastien Bacher	1:1.2.2-1ubuntu1	17 years ago
10	* New upstream version. * New upstream version. - closes security bug in CID encoded fonts (iDefense CVE-ID 2006-3739, 2006-3740) - applies patches 10_freetype_buffer_overflow.patch, 10_pcf_font.patch * dbg package has priority extra.	Drew Parsons	1:1.2.2-1	17 years ago
9	* SECURITY UPDATE: Root privilege escalation with crafted Ty... * SECURITY UPDATE: Root privilege escalation with crafted Type1 CID fonts. * Add debian/patches/cid-int-overflows.diff: - lib/font/Type1/afm.c: Fix integer overflow in CIDAFM(). [CVE-2006-3739] - lib/font/Type1/scanfont.c: Fix integer overflow in scan_cidfont(). [CVE-2006-3740]	Martin Pitt	1:1.2.0-0ubuntu3	17 years ago
8	* SECURITY UPDATE: DoS (X server crash) and possible root pr... * SECURITY UPDATE: DoS (X server crash) and possible root privilege escalation. * Add debian/patches/pcf-int-overflow.diff: - src/bitmap/pcfread.c: Check for integer overflows when parsing PCF font files to prevent exploitable buffer overflow. - Patch taken from upstream git: http://gitweb.freedesktop.org/?p=xorg/lib/libXfont.git;a=commit;h=8d171fe61e564d8ed8f75034d4191062cecf190b * CVE-2006-3467	Martin Pitt	1:1.2.0-0ubuntu2	17 years ago
7	* New Upstream version * New Upstream version * Dropped (empty) patch directory * Re-Dropped libfontcache.so.0 from libxfont1.install	Rodrigo Parra Novo	1:1.2.0-0ubuntu1	17 years ago

Older »