~ubuntu-branches/ubuntu/trusty/freetype/trusty-updates

• Changes
• Files

~ubuntu-branches/ubuntu/trusty/freetype/trusty-updates » Changes from revision 60

From Revision 60 to 41

expand all

collapse all

Rev		Summary	Authors	Tags	Date	Diff	Files
60		* SECURITY UPDATE: uninitialized memory reads (LP: #1449225) * SECURITY UPDATE: uninitialized memory reads (LP: #1449225)   - debian/patches-freetype/savannah-bug-41309.patch: fix use of     uninitialized data in src/cid/cidload.c, src/psaux/psobjs.c,     src/type1/t1load.c, src/type42/t42parse.c.   - No CVE number * SECURITY UPDATE: denial of service via infinite loop in parse_encode   (LP: #1492124)   - debian/patches-freetype/savannah-bug-41590.patch: protect against     invalid charcode in src/type1/t1load.c.   - No CVE number	Marc Deslauriers	2.5.2-1ubuntu2.5	8 years ago
59		* SECURITY UPDATE: denial of service and possible code execu... * SECURITY UPDATE: denial of service and possible code execution via   multiple security issues   - debian/patches-freetype/CVE-2014-96xx/*.patch: backport a large     quantity of upstream commits to fix multiple security issues.   - CVE-2014-9656   - CVE-2014-9657   - CVE-2014-9658   - CVE-2014-9659   - CVE-2014-9660   - CVE-2014-9661   - CVE-2014-9662   - CVE-2014-9663   - CVE-2014-9664   - CVE-2014-9665   - CVE-2014-9666   - CVE-2014-9667   - CVE-2014-9668   - CVE-2014-9669   - CVE-2014-9670   - CVE-2014-9671   - CVE-2014-9672   - CVE-2014-9673   - CVE-2014-9674   - CVE-2014-9675	Marc Deslauriers	2.5.2-1ubuntu2.4	9 years ago
58		* SECURITY UPDATE: denial of service and possible code execu... * SECURITY UPDATE: denial of service and possible code execution in   CFF rasterizer   - debian/patches/CVE-2014-2240.patch: validate hintMask in     src/cff/cf2hints.c.   - CVE-2014-2240 * SECURITY UPDATE: denial of service in CFF rasterizer   - debian/patches/CVE-2014-2241.patch: don't trigger asserts in     src/cff/cf2ft.c.   - CVE-2014-2241	Marc Deslauriers	2.5.2-1ubuntu2	10 years ago
57		* Merge from Debian unstable, remaining changes: * Merge from Debian unstable, remaining changes:   - debian/patches-freetype/revert_scalable_fonts_metric.patch:     revert commit "Fix metrics on size request for scalable fonts.",     which breaks gtk underlining markups * Dropped changes, included in Debian:   - Fix png configuration for cross builds.   - Run aclocal and autoconf.	Steve Langasek	2.5.2-1ubuntu1	10 years ago
56		* Merge from Debian unstable, remaining changes: * Merge from Debian unstable, remaining changes:   - debian/patches-freetype/revert_scalable_fonts_metric.patch:     revert commit "Fix metrics on size request for scalable fonts.",     which breaks gtk underlining markups   - Fix png configuration for cross builds.   - Run aclocal and autoconf.	Steve Langasek	2.5.1-2ubuntu1	10 years ago
55		* Fix png configuration for cross builds. * Fix png configuration for cross builds. * Run aclocal and autoconf.	Matthias Klose	2.5.1-1ubuntu2	10 years ago
54		* Merge from Debian unstable (LP: #1256114), remaining chang... * Merge from Debian unstable (LP: #1256114), remaining changes:   - debian/patches-freetype/revert_scalable_fonts_metric.patch:     revert commit "Fix metrics on size request for scalable fonts.",     which breaks gtk underlining markups * Dropped changes, included in Debian:   - debian/control: build-depends on libpng-dev   - debian/libfreetype6.symbols: new version update * Drop debian/patches-ft2demos/compiler-warning-fixes.patch, which is   actually a bug in the compiler_hardening_fixes.patch and has been fixed   there in the Ubuntu version.	Steve Langasek	2.5.1-1ubuntu1	10 years ago
53		debian/control: build-depends on libpng12-dev debian/control: build-depends on libpng12-dev	Sebastien Bacher	2.5.0.1-0ubuntu2	10 years ago
52		* New upstream version (lp: #1203012) * New upstream version (lp: #1203012) * debian/patches-freetype/git_unitialized_variable.patch,   debian/patches-ft2demos/init_variables.patch:   - dropped, the fixes are in the new version * debian/libfreetype6.symbols: new version update	Sebastien Bacher	2.5.0.1-0ubuntu1	10 years ago
51		* New upstream version (lp: #1179523) * New upstream version (lp: #1179523) * debian/patches-freetype/git_unitialized_variable.patch,   debian/patches-ft2demos/init_variables.patch:   - fix an unitialized variable warnings which were breaking the build * debian/libfreetype6.symbols: updated	Sebastien Bacher	2.4.12-0ubuntu1	10 years ago
50		* New upstream version * New upstream version * debian/patches-freetype/CVE-2012-5668.patch,   debian/patches-freetype/CVE-2012-5669.patch,   debian/patches-freetype/CVE-2012-5670.patch:   - dropped, those fixes are in the new version * debian/patches-ft2demos/compiler_hardening_fixes.patch:   - changed unsigned char* to char* to fix "pointer targets in assignment     differ in signedness" build error * debian/libfreetype6.symbols: updated for the new version	Sebastien Bacher	2.4.11-0ubuntu1	11 years ago
49		* SECURITY UPDATE: denial of service and possible code execu... * SECURITY UPDATE: denial of service and possible code execution via NULL   pointer dereference   - debian/patches-freetype/CVE-2012-5668.patch: reset props_size in case     of allocation error in src/bdf/bdflib.c.   - CVE-2012-5668 * SECURITY UPDATE: denial of service and possible code execution via heap   buffer over-read in BDF parsing   - debian/patches-freetype/CVE-2012-5669.patch: use correct array size     in src/bdf/bdflib.c.   - CVE-2012-5669 * SECURITY UPDATE: denial of service and possible code execution via out-   of-bounds write   - debian/patches-freetype/CVE-2012-5670.patch: normalize negative     parameter in src/bdf/bdflib.c.   - CVE-2012-5670	Marc Deslauriers	2.4.10-0ubuntu2	11 years ago
48		* New upstream version * New upstream version * debian/libfreetype6.symbols:   - new version update * debian/patches-freetype/savannah-bug-35847.patch,   debian/patches-freetype/savannah-bug-35833.patch:   - dropped, the fixes are in the new version * Resynchronize on Debian, remaining diff: * debian/patches-freetype/revert_scalable_fonts_metric.patch:   - revert commit "Fix metrics on size request for scalable fonts.",     it's breaking gtk underlining markups and creating some other      issues as well (lp: #972223)	Sebastien Bacher	2.4.10-0ubuntu1	11 years ago
47		* debian/patches-freetype/revert_scalable_fonts_metric.patch... * debian/patches-freetype/revert_scalable_fonts_metric.patch:   - revert commit "Fix metrics on size request for scalable fonts.",     it's breaking gtk underlining markups and creating some other      issues as well (lp: #972223)	Sebastien Bacher	2.4.8-1ubuntu2	12 years ago
46		* SECURITY UPDATE: Denial of service via crafted BDF font (L... * SECURITY UPDATE: Denial of service via crafted BDF font (LP: #963283)   - debian/patches-freetype/CVE-2012-1126.patch: Perform better input     sanitization when parsing properties. Based on upstream patch.   - CVE-2012-1126 * SECURITY UPDATE: Denial of service via crafted BDF font   - debian/patches-freetype/CVE-2012-1127.patch: Perform better input     sanitization when parsing glyphs. Based on upstream patch.   - CVE-2012-1127 * SECURITY UPDATE: Denial of service via crafted TrueType font   - debian/patches-freetype/CVE-2012-1128.patch: Improve loop logic to avoid     NULL pointer dereference. Based on upstream patch.   - CVE-2012-1128 * SECURITY UPDATE: Denial of service via crafted Type42 font   - debian/patches-freetype/CVE-2012-1129.patch: Perform better input     sanitization when parsing SFNT strings. Based on upstream patch.   - CVE-2012-1129 * SECURITY UPDATE: Denial of service via crafted PCF font   - debian/patches-freetype/CVE-2012-1130.patch: Allocate enough memory to     properly NULL-terminate parsed properties strings. Based on upstream     patch.   - CVE-2012-1130 * SECURITY UPDATE: Denial of service via crafted TrueType font   - debian/patches-freetype/CVE-2012-1131.patch: Use appropriate data type to     prevent integer truncation on 64 bit systems when rendering fonts. Based     on upstream patch.   - CVE-2012-1131 * SECURITY UPDATE: Denial of service via crafted Type1 font   - debian/patches-freetype/CVE-2012-1132.patch: Ensure strings are of     appropriate length when loading Type1 fonts. Based on upstream patch.   - CVE-2012-1132 * SECURITY UPDATE: Denial of service and arbitrary code execution via   crafted BDF font   - debian/patches-freetype/CVE-2012-1133.patch: Limit range of negative     glyph encoding values to prevent invalid array indexes. Based on     upstream patch.   - CVE-2012-1133 * SECURITY UPDATE: Denial of service and arbitrary code execution via   crafted Type1 font   - debian/patches-freetype/CVE-2012-1134.patch: Enforce a minimum Type1     private dictionary size to prevent writing past array bounds. Based on     upstream patch.   - CVE-2012-1134 * SECURITY UPDATE: Denial of service via crafted TrueType font   - debian/patches-freetype/CVE-2012-1135.patch: Perform proper bounds     checks when interpreting TrueType bytecode. Based on upstream patch.   - CVE-2012-1135 * SECURITY UPDATE: Denial of service and arbitrary code execution via   crafted BDF font   - debian/patches-freetype/CVE-2012-1136.patch: Ensure encoding field is     defined when parsing glyphs. Based on upstream patch.   - CVE-2012-1136 * SECURITY UPDATE: Denial of service via crafted BDF font   - debian/patches-freetype/CVE-2012-1137.patch: Allocate sufficient number     of array elements to prevent reading past array bounds. Based on     upstream patch.   - CVE-2012-1137 * SECURITY UPDATE: Denial of service via crafted TrueType font   - debian/patches-freetype/CVE-2012-1138.patch: Correct typo resulting in     invalid read from wrong memory location. Based on upstream patch.   - CVE-2012-1138 * SECURITY UPDATE: Denial of service via crafted BDF font   - debian/patches-freetype/CVE-2012-1139.patch: Check array index values to     prevent reading invalid memory. Based on upstream patch.   - CVE-2012-1139 * SECURITY UPDATE: Denial of service via crafted PostScript font   - debian/patches-freetype/CVE-2012-1140.patch: Fix off-by-one error in     boundary checks. Based on upstream patch.   - CVE-2012-1140 * SECURITY UPDATE: Denial of service via crafted BDF font   - debian/patches-freetype/CVE-2012-1141.patch: Initialize field elements     to prevent invalid read. Based on upstream patch.   - CVE-2012-1141 * SECURITY UPDATE: Denial of service via crafted Windows FNT/FON font   - debian/patches-freetype/CVE-2012-1142.patch: Perform input sanitization     on first and last character code fields. Based on upstream patch.   - CVE-2012-1142 * SECURITY UPDATE: Denial of service via crafted font   - debian/patches-freetype/CVE-2012-1143.patch: Protect against divide by     zero when dealing with 32 bit types. Based on upstream patch.   - CVE-2012-1143 * SECURITY UPDATE: Denial of service and arbitrary code execution via   crafted TrueType font   - debian/patches-freetype/CVE-2012-1144.patch: Perform input sanitization     on the first glyph outline point value. Based on upstream patch.   - CVE-2012-1144	Tyler Hicks	2.4.8-1ubuntu1	12 years ago
45		* New upstream release * New upstream release   - upstream fix for CVE-2011-3439.  Closes: #649122.   - adjust libfreetype6.symbols for a newly-exported function.	Steve Langasek	2.4.8-1	12 years ago
44		* Use dpkg-buildflags through debhelper. * Use dpkg-buildflags through debhelper. * Don't set -Werror in CFLAGS on alpha or m68k, to work around a compiler   bug.  Closes: #646334.	Steve Langasek	2.4.7-2	12 years ago
43		* New upstream release * New upstream release   - upstream fix for CVE-2011-3256.  Closes: #646120.   - drop debian/patches-freetype/0001-Fix-Savannah-bug-33992.patch,     included upstream. * Pass --without-bzip2 to configure, to avoid unwanted dependency on   libbz2.  Closes: #639638. * Standards-Version 3.9.2.	Steve Langasek	2.4.7-1	12 years ago
42		debian/patches-freetype/0001-Fix-Savannah-bug-33992.patch: [... debian/patches-freetype/0001-Fix-Savannah-bug-33992.patch: [PATCH] Fix Savannah bug #33992.  Thanks to David Bevan <david.bevan@pb.com>.  Closes: #638348.	Steve Langasek	2.4.6-2	12 years ago
41		* SECURITY UPDATE: arbitrary code execution via crafted Type... * SECURITY UPDATE: arbitrary code execution via crafted Type 1 font   - debian/patches-freetype/CVE-2011-0226.patch: check for proper     signedness in src/psaux/t1decode.c.   - CVE-2011-0226 * debian/rules: fix FTBFS with gcc 4.6 by adding   -Wno-unused-but-set-variable to CFLAGS to downgrade it to a warning.	Marc Deslauriers	2.4.4-2ubuntu1	12 years ago

• Older »

Loggerhead is a web-based interface for Breezy
Version: 2.0.1