fonts-bugs January 2013

fonts-bugs@lists.fedoraproject.org

13 participants
285 discussions

[Bug 37984] WebKit freetype backend doesn't support "locl" tables
by bugzilla-daemon＠webkit.org 28 Jan '13

28 Jan '13

https://bugs.webkit.org/show_bug.cgi?id=37984 --- Comment #32 from Dominik Röttsches (drott) <dominik.rottsches(a)intel.com> 2013-01-28 04:53:40 PST --- (In reply to comment #29) > (In reply to comment #27) > I don't have any heuristics in mind. You can start by adding Serbian, and then add other languages when people nag. You can tell I'm in the same camp as Nicolas though: even for Latin I think we should do full OpenType shaping. I put this idea into bug 108074 for tracking. -- Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

1 0

Broken dependencies: fontmatrix
by Fedora Koji Build System 27 Jan '13

27 Jan '13

fontmatrix has broken dependencies in the rawhide tree: On x86_64: fontmatrix-0.9.99-8.r1218.fc19.x86_64 requires libicuuc.so.49()(64bit) fontmatrix-0.9.99-8.r1218.fc19.x86_64 requires libiculx.so.49()(64bit) fontmatrix-0.9.99-8.r1218.fc19.x86_64 requires libicule.so.49()(64bit) On i386: fontmatrix-0.9.99-8.r1218.fc19.i686 requires libicuuc.so.49 fontmatrix-0.9.99-8.r1218.fc19.i686 requires libiculx.so.49 fontmatrix-0.9.99-8.r1218.fc19.i686 requires libicule.so.49 Please resolve this as soon as possible.

1 0

Broken dependencies: fontforge
by Fedora Koji Build System 26 Jan '13

26 Jan '13

fontforge has broken dependencies in the epel-5 tree: On x86_64: fontforge-20080828-1.1.el5.i386 requires libpython2.4.so.1.0 Please resolve this as soon as possible.

1 0

Broken dependencies: fontforge
by Fedora Koji Build System 26 Jan '13

26 Jan '13

fontforge has broken dependencies in the epel-5 tree: On x86_64: fontforge-20080828-1.1.el5.i386 requires libpython2.4.so.1.0 Please resolve this as soon as possible.

1 0

Broken dependencies: fontmatrix
by Fedora Koji Build System 26 Jan '13

26 Jan '13

1 0

[Bug 678397] gray_find_cell() - longjmp causes uninitialized stack frame
by Red Hat Bugzilla 24 Jan '13

24 Jan '13

Product: Fedora https://bugzilla.redhat.com/show_bug.cgi?id=678397 --- Comment #16 from Bill <wclements(a)kc.rr.com> --- Right after start up. backtrace_rating: 4 Package: gnome-shell-3.6.2-6.fc18 OS Release: Fedora release 18 (Spherical Cow) -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=SXX64qPTf4&a=cc_unsubscribe

1 0

[freetype/f18] Fix CVE-2012-5669
by mkasik 24 Jan '13

24 Jan '13

commit bd564091f9f63ad1112a4d68f775e46ca11b1f6a Author: Marek Kasik <mkasik(a)redhat.com> Date: Thu Jan 24 16:21:28 2013 +0100 Fix CVE-2012-5669 Resolves: #903554 freetype-2.4.10-CVE-2012-5669.patch | 14 ++++++++++++++ freetype.spec | 10 +++++++++- 2 files changed, 23 insertions(+), 1 deletions(-) --- diff --git a/freetype-2.4.10-CVE-2012-5669.patch b/freetype-2.4.10-CVE-2012-5669.patch new file mode 100644 index 0000000..ea4f041 --- /dev/null +++ b/freetype-2.4.10-CVE-2012-5669.patch @@ -0,0 +1,14 @@ +--- a/src/bdf/bdflib.c ++++ b/src/bdf/bdflib.c +@@ -1628,8 +1628,9 @@ + + /* Check that the encoding is in the Unicode range because */ + /* otherwise p->have (a bitmap with static size) overflows. */ +- if ( p->glyph_enc > 0 && +- (size_t)p->glyph_enc >= sizeof ( p->have ) * 8 ) ++ if ( p->glyph_enc > 0 && ++ (size_t)p->glyph_enc >= sizeof ( p->have ) / ++ sizeof ( unsigned long ) * 32 ) + { + FT_ERROR(( "_bdf_parse_glyphs: " ERRMSG5, lineno, "ENCODING" )); + error = BDF_Err_Invalid_File_Format; diff --git a/freetype.spec b/freetype.spec index 9b7d47f..6d0c46d 100644 --- a/freetype.spec +++ b/freetype.spec @@ -7,7 +7,7 @@ Summary: A free and portable font rendering engine Name: freetype Version: 2.4.10 -Release: 2%{?dist} +Release: 3%{?dist} License: FTL or GPLv2+ Group: System Environment/Libraries URL: http://www.freetype.org @@ -25,6 +25,9 @@ Patch47: freetype-2.3.11-more-demos.patch # Fix multilib conflicts Patch88: freetype-multilib.patch +# https://bugzilla.redhat.com/show_bug.cgi?id=903554 +Patch89: freetype-2.4.10-CVE-2012-5669.patch + Buildroot: %{_tmppath}/%{name}-%{version}-root-%(%{__id_u} -n) BuildRequires: libX11-devel @@ -84,6 +87,7 @@ pushd ft2demos-%{version} popd %patch88 -p1 -b .multilib +%patch89 -p1 -b .CVE-2012-5669 %build @@ -216,6 +220,10 @@ rm -rf $RPM_BUILD_ROOT %doc docs/tutorial %changelog +* Thu Jan 24 2013 Marek Kasik <mkasik(a)redhat.com> 2.4.10-3 +- Fixes CVE-2012-5669 +- Resolves: #903554 + * Fri Jul 27 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 2.4.10-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild

1 0

[freetype/f17] Fix CVE-2012-5669
by mkasik 24 Jan '13

24 Jan '13

commit 6694ca17e598bf1184e71aee3dcad92eb1a38ecb Author: Marek Kasik <mkasik(a)redhat.com> Date: Thu Jan 24 16:20:46 2013 +0100 Fix CVE-2012-5669 Resolves: #903554 freetype-2.4.8-CVE-2012-5669.patch | 18 ++++++++++++++++++ freetype.spec | 10 +++++++++- 2 files changed, 27 insertions(+), 1 deletions(-) --- diff --git a/freetype-2.4.8-CVE-2012-5669.patch b/freetype-2.4.8-CVE-2012-5669.patch new file mode 100644 index 0000000..327550c --- /dev/null +++ b/freetype-2.4.8-CVE-2012-5669.patch @@ -0,0 +1,18 @@ +--- freetype-2.4.8/src/bdf/bdflib.c 2013-01-24 15:30:15.000000000 +0100 ++++ freetype-2.4.8/src/bdf/bdflib.c 2013-01-24 15:30:32.269960403 +0100 +@@ -1600,10 +1600,11 @@ + if ( p->glyph_enc < -1 ) + p->glyph_enc = -1; + +- /* Check that the encoding is in the range [0,65536] because */ +- /* otherwise p->have (a bitmap with static size) overflows. */ +- if ( p->glyph_enc > 0 && +- (size_t)p->glyph_enc >= sizeof ( p->have ) * 8 ) ++ /* Check that the encoding is in the Unicode range because */ ++ /* otherwise p->have (a bitmap with static size) overflows. */ ++ if ( p->glyph_enc > 0 && ++ (size_t)p->glyph_enc >= sizeof ( p->have ) / ++ sizeof ( unsigned long ) * 32 ) + { + error = BDF_Err_Invalid_File_Format; + goto Exit; diff --git a/freetype.spec b/freetype.spec index 6c8d404..398e0ab 100644 --- a/freetype.spec +++ b/freetype.spec @@ -7,7 +7,7 @@ Summary: A free and portable font rendering engine Name: freetype Version: 2.4.8 -Release: 3%{?dist} +Release: 4%{?dist} License: FTL or GPLv2+ Group: System Environment/Libraries URL: http://www.freetype.org @@ -45,6 +45,9 @@ Patch105: freetype-2.4.8-CVE-2012-1143.patch Patch106: freetype-2.4.8-CVE-2012-1144.patch Patch107: freetype-2.4.8-bdf-overflow.patch +# https://bugzilla.redhat.com/show_bug.cgi?id=903554 +Patch108: freetype-2.4.8-CVE-2012-5669.patch + Buildroot: %{_tmppath}/%{name}-%{version}-root-%(%{__id_u} -n) @@ -124,6 +127,7 @@ popd %patch105 -p1 -b .CVE-2012-1143 %patch106 -p1 -b .CVE-2012-1144 %patch107 -p1 -b .bdf-overflow +%patch108 -p1 -b .CVE-2012-5669 %build @@ -256,6 +260,10 @@ rm -rf $RPM_BUILD_ROOT %doc docs/tutorial %changelog +* Thu Jan 24 2013 Marek Kasik <mkasik(a)redhat.com> 2.4.8-4 +- Fixes CVE-2012-5669 +- Resolves: #903554 + * Fri Mar 30 2012 Marek Kasik <mkasik(a)redhat.com> 2.4.8-3 - Fixes various CVEs - Resolves: #806270

1 0

[Bug 890088] CVE-2012-5669 freetype: heap buffer over-read in BDF parsing _bdf_parse_glyphs() (#37906)
by Red Hat Bugzilla 24 Jan '13

24 Jan '13

1 0

[Bug 890088] CVE-2012-5669 freetype: heap buffer over-read in BDF parsing _bdf_parse_glyphs() (#37906)
by Red Hat Bugzilla 24 Jan '13

24 Jan '13

Product: Security Response https://bugzilla.redhat.com/show_bug.cgi?id=890088 --- Comment #15 from Huzaifa S. Sidhpurwala <huzaifas(a)redhat.com> --- Created mingw-freetype tracking bugs for this issue Affects: fedora-all [bug 903555] -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=kEcHHQJQe5&a=cc_unsubscribe

1 0

← Newer
1
...
15
16
17
18
19
20
21
...
29
Older →

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

fonts-bugs January 2013