February 2015 - fonts-bugs - Fedora Mailing-Lists

[Bug 1195021] New: The ttf oldstandard-sfd fonts are corrupted

by Red Hat Bugzilla

https://bugzilla.redhat.com/show_bug.cgi?id=1195021 Bug ID: 1195021 Summary: The ttf oldstandard-sfd fonts are corrupted Product: Fedora Version: 20 Component: oldstandard-sfd-fonts Assignee: sanjay.ankur(a)gmail.com Reporter: eko(a)lanet.lv QA Contact: extras-qa(a)fedoraproject.org CC: fonts-bugs(a)lists.fedoraproject.org, sanjay.ankur(a)gmail.com Created attachment 994206 --> https://bugzilla.redhat.com/attachment.cgi?id=994206&action=edit An exmple of errors in the ttf file. Description of problem: The ttf files are with errors. Version-Release number of selected component (if applicable): oldstandard-sfd-fonts-2.0.2-13.fc20 The same with oldstandard-sfd-fonts-2.0.2-15.fc21. The corrupted fonts has a very long history – the ttf files from package oldstandard-sfd-fonts-2.0.2-3.fc10 are already damaged. How reproducible: 100% Steps to Reproduce: 1. Open /usr/share/fonts/oldstandard/* files with any font viewer. Actual results: There is a garbage in place of letters (see the attached screen-shot) Expected results: Usable fonts. Additional info: I try to rebuilt this package from SRPM – no luck. The fontforge refuses to built usable ttf even by hand. There are two options to solve the issue: 1) To generate OTF not the TTF (preferred solution); 2) To use ready-made ttf from http://www.fontsquirrel.com/fonts/old-standard-TT. -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=0XRZ2KCY22&a=cc_unsubscribe

8 years, 4 months

1
12
0 / 0

[Bug 1174218] New: incorrect smoothing

by Red Hat Bugzilla

https://bugzilla.redhat.com/show_bug.cgi?id=1174218 Bug ID: 1174218 Summary: incorrect smoothing Product: Fedora Version: 21 Component: freetype Assignee: mkasik(a)redhat.com Reporter: lavrinov2004(a)rambler.ru QA Contact: extras-qa(a)fedoraproject.org CC: behdad(a)fedoraproject.org, fonts-bugs(a)lists.fedoraproject.org, kevin(a)tigcc.ticalc.org, mkasik(a)redhat.com Description of problem: In Fedora 21 after an upgrade, upgrade the package to version 2.5.3-13 freetype resulting stopped working font smoothing in Mozilla Firefox and Wine. In the previous version 2.5.3-11 freetipe everything worked well. -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=qPrspQ2jgn&a=cc_unsubscribe

8 years, 5 months

1
10
0 / 0

[Bug 1062903] New: cantarell hints very poorly with new freetype CFF engine (i.e. regression)

by Red Hat Bugzilla

https://bugzilla.redhat.com/show_bug.cgi?id=1062903 Bug ID: 1062903 Summary: cantarell hints very poorly with new freetype CFF engine (i.e. regression) Product: Fedora Version: 20 Component: abattis-cantarell-fonts Assignee: ccecchi(a)redhat.com Reporter: pierre-bugzilla(a)ossman.eu QA Contact: extras-qa(a)fedoraproject.org CC: ccecchi(a)redhat.com, fonts-bugs(a)lists.fedoraproject.org Bug 995643 was filed against freetype for hinting Cantarell very poorly. That was closed as NOTABUG. But that doesn't change the fact that Cantarell is still fuzzy, which is a major issue for a UI font. So let's try filing this bug the other way around. :) Playing around with ftview suggests that forced auto hinting gives back roughly the same hinting as in Fedora 19. So could we have that as a fontconfig bandaid until better hinting information is available in the font itself? -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=y3p7SGp4NL&a=cc_unsubscribe

8 years, 5 months

1
7
0 / 0

[Bug 1191190] New: CVE-2014-9674 freetype: integer overflow and heap-based buffer overflow in the Mac_Read_POST_Resource function in base/ftobjs.c

by Red Hat Bugzilla

https://bugzilla.redhat.com/show_bug.cgi?id=1191190 Bug ID: 1191190 Summary: CVE-2014-9674 freetype: integer overflow and heap-based buffer overflow in the Mac_Read_POST_Resource function in base/ftobjs.c Product: Security Response Component: vulnerability Keywords: Security Severity: medium Priority: medium Assignee: security-response-team(a)redhat.com Reporter: mprpic(a)redhat.com CC: behdad(a)fedoraproject.org, fonts-bugs(a)lists.fedoraproject.org, kevin(a)tigcc.ticalc.org, mkasik(a)redhat.com The Mac_Read_POST_Resource function in base/ftobjs.c in FreeType before 2.5.4 proceeds with adding to length values without validating the original values, which allows remote attackers to cause a denial of service (integer overflow and heap-based buffer overflow) or possibly have unspecified other impact via a crafted Mac font. Upstream issue: http://code.google.com/p/google-security-research/issues/detail?id=153 Upstream patches: http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=240c94... http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=cd4a5a... -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=YFdiW9GrYd&a=cc_unsubscribe

8 years, 5 months

1
17
0 / 0

[Bug 1191192] New: CVE-2014-9675 freetype: bypass the ASLR protection mechanism via a crafted BDF font

by Red Hat Bugzilla

https://bugzilla.redhat.com/show_bug.cgi?id=1191192 Bug ID: 1191192 Summary: CVE-2014-9675 freetype: bypass the ASLR protection mechanism via a crafted BDF font Product: Security Response Component: vulnerability Keywords: Security Severity: medium Priority: medium Assignee: security-response-team(a)redhat.com Reporter: mprpic(a)redhat.com CC: behdad(a)fedoraproject.org, fonts-bugs(a)lists.fedoraproject.org, kevin(a)tigcc.ticalc.org, mkasik(a)redhat.com bdf/bdflib.c in FreeType before 2.5.4 identifies property names by only verifying that an initial substring is present, which allows remote attackers to discover heap pointer values and bypass the ASLR protection mechanism via a crafted BDF font. Upstream issue: http://code.google.com/p/google-security-research/issues/detail?id=151 Upstream patch: http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=2c4832... -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=FHyVs5R36A&a=cc_unsubscribe

8 years, 5 months

1
15
0 / 0

[Bug 1191094] New: CVE-2014-9671 freetype: Off-by-one error in the pcf_get_properties function in pcf/pcfread.c

by Red Hat Bugzilla

https://bugzilla.redhat.com/show_bug.cgi?id=1191094 Bug ID: 1191094 Summary: CVE-2014-9671 freetype: Off-by-one error in the pcf_get_properties function in pcf/pcfread.c Product: Security Response Component: vulnerability Keywords: Security Severity: medium Priority: medium Assignee: security-response-team(a)redhat.com Reporter: vkaigoro(a)redhat.com CC: behdad(a)fedoraproject.org, fonts-bugs(a)lists.fedoraproject.org, kevin(a)tigcc.ticalc.org, mkasik(a)redhat.com Common Vulnerabilities and Exposures assigned CVE-2014-9671 to the following issue: Off-by-one error in the pcf_get_properties function in pcf/pcfread.c in FreeType before 2.5.4 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted PCF file with a 0xffffffff size value that is improperly incremented. http://code.google.com/p/google-security-research/issues/detail?id=157 http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=0e2f5d... -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=Kh2uxQYUM7&a=cc_unsubscribe

8 years, 5 months

1
14
0 / 0

[Bug 1191096] New: CVE-2014-9673 freetype: Integer signedness error in the Mac_Read_POST_Resource function in base/ftobjs.c

by Red Hat Bugzilla

https://bugzilla.redhat.com/show_bug.cgi?id=1191096 Bug ID: 1191096 Summary: CVE-2014-9673 freetype: Integer signedness error in the Mac_Read_POST_Resource function in base/ftobjs.c Product: Security Response Component: vulnerability Keywords: Security Severity: medium Priority: medium Assignee: security-response-team(a)redhat.com Reporter: vkaigoro(a)redhat.com CC: behdad(a)fedoraproject.org, fonts-bugs(a)lists.fedoraproject.org, kevin(a)tigcc.ticalc.org, mkasik(a)redhat.com Common Vulnerabilities and Exposures assigned CVE-2014-9673 to the following issue: Integer signedness error in the Mac_Read_POST_Resource function in base/ftobjs.c in FreeType before 2.5.4 allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted Mac font. http://code.google.com/p/google-security-research/issues/detail?id=154 http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=35252a... -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=cE4QxwCKVN&a=cc_unsubscribe

8 years, 5 months

1
12
0 / 0

[Bug 1191093] New: CVE-2014-9670 freetype: Multiple integer signedness errors in the pcf_get_encodings function inpcf/pcfread.c

by Red Hat Bugzilla

https://bugzilla.redhat.com/show_bug.cgi?id=1191093 Bug ID: 1191093 Summary: CVE-2014-9670 freetype: Multiple integer signedness errors in the pcf_get_encodings function inpcf/pcfread.c Product: Security Response Component: vulnerability Keywords: Security Severity: medium Priority: medium Assignee: security-response-team(a)redhat.com Reporter: vkaigoro(a)redhat.com CC: behdad(a)fedoraproject.org, fonts-bugs(a)lists.fedoraproject.org, kevin(a)tigcc.ticalc.org, mkasik(a)redhat.com Common Vulnerabilities and Exposures assigned CVE-2014-9670 to the following issue: Multiple integer signedness errors in the pcf_get_encodings function in pcf/pcfread.c in FreeType before 2.5.4 allow remote attackers to cause a denial of service (integer overflow, NULL pointer dereference, and application crash) via a crafted PCF file that specifies negative values for the first column and first row. http://code.google.com/p/google-security-research/issues/detail?id=158 http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=ef1eba... -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=HvmsnCm2yW&a=cc_unsubscribe

8 years, 5 months

1
15
0 / 0

[Bug 1191092] New: CVE-2014-9669 freetype: Multiple integer overflows in sfnt/ttcmap.c

by Red Hat Bugzilla

https://bugzilla.redhat.com/show_bug.cgi?id=1191092 Bug ID: 1191092 Summary: CVE-2014-9669 freetype: Multiple integer overflows in sfnt/ttcmap.c Product: Security Response Component: vulnerability Keywords: Security Severity: medium Priority: medium Assignee: security-response-team(a)redhat.com Reporter: vkaigoro(a)redhat.com CC: behdad(a)fedoraproject.org, fonts-bugs(a)lists.fedoraproject.org, kevin(a)tigcc.ticalc.org, mkasik(a)redhat.com Common Vulnerabilities and Exposures assigned CVE-2014-9669 to the following issue: Multiple integer overflows in sfnt/ttcmap.c in FreeType before 2.5.4 allow remote attackers to cause a denial of service (out-of-bounds read or memory corruption) or possibly have unspecified other impact via a crafted cmap SFNT table. http://code.google.com/p/google-security-research/issues/detail?id=163 http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=602040... -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=lbZKQCjzZ4&a=cc_unsubscribe

8 years, 5 months

1
16
0 / 0

[Bug 1191090] New: CVE-2014-9667 freetype: integer overflow and out-of-bounds read in sfnt/ttload.c

by Red Hat Bugzilla

https://bugzilla.redhat.com/show_bug.cgi?id=1191090 Bug ID: 1191090 Summary: CVE-2014-9667 freetype: integer overflow and out-of-bounds read in sfnt/ttload.c Product: Security Response Component: vulnerability Keywords: Security Severity: medium Priority: medium Assignee: security-response-team(a)redhat.com Reporter: vkaigoro(a)redhat.com CC: behdad(a)fedoraproject.org, fonts-bugs(a)lists.fedoraproject.org, kevin(a)tigcc.ticalc.org, mkasik(a)redhat.com Common Vulnerabilities and Exposures assigned CVE-2014-9667 to the following issue: sfnt/ttload.c in FreeType before 2.5.4 proceeds with offset+length calculations without restricting the values, which allows remote attackers to cause a denial of service (integer overflow and out-of-bounds read) or possibly have unspecified other impact via a crafted SFNT table. http://code.google.com/p/google-security-research/issues/detail?id=166 http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=677ddf... -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=zImGNf0ZHS&a=cc_unsubscribe

8 years, 5 months

1
16
0 / 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

fonts-bugs February 2015