fonts-bugs October 2015

fonts-bugs@lists.fedoraproject.org

2 participants
174 discussions

by Red Hat Bugzilla

https://bugzilla.redhat.com/show_bug.cgi?id=1256496 Bug ID: 1256496 Summary: New upstream version Product: Fedora Version: 23 Component: overpass-fonts Severity: low Assignee: tcallawa(a)redhat.com Reporter: helio(a)kde.org QA Contact: extras-qa(a)fedoraproject.org CC: fonts-bugs(a)lists.fedoraproject.org, tcallawa(a)redhat.com As reported today: Good news everyone, We've boosted our open source type family ‘Overpass’ Get it: https://github.com/andyfitz/overpass/ See it: http://overpassfont.org This means true Italics for all weights and a new “Extra Light” variant. Here's what you should know: # If you maintain font packages for RHEL, CSB, CentOS, Fedora or elsewhere: Please update with the appropriate files from GitHub now. -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=6mVe9PUqsb&a=cc_unsubscribe _______________________________________________ fonts-bugs mailing list fonts-bugs(a)lists.fedoraproject.org http://lists.fedoraproject.org/postorius/fonts-bugs@lists.fedoraproject.org

8 years, 6 months

1
21
0 / 0

Broken dependencies: rubygem-font-awesome-rails

by Fedora Koji Build System

rubygem-font-awesome-rails has broken dependencies in the F-23 tree: On x86_64: rubygem-font-awesome-rails-4.4.0.0-1.fc23.noarch requires fontawesome-fonts >= 0:4.4.0 On i386: rubygem-font-awesome-rails-4.4.0.0-1.fc23.noarch requires fontawesome-fonts >= 0:4.4.0 On armhfp: rubygem-font-awesome-rails-4.4.0.0-1.fc23.noarch requires fontawesome-fonts >= 0:4.4.0 Please resolve this as soon as possible.

8 years, 6 months

1
0
0 / 0

[Bug 1203719] New: CVE-2015-1804 libXfont: out-of-bounds memory access in bdfReadCharacters

by Red Hat Bugzilla

https://bugzilla.redhat.com/show_bug.cgi?id=1203719 Bug ID: 1203719 Summary: CVE-2015-1804 libXfont: out-of-bounds memory access in bdfReadCharacters Product: Security Response Component: vulnerability Keywords: Security Severity: medium Priority: medium Assignee: security-response-team(a)redhat.com Reporter: mprpic(a)redhat.com CC: btissoir(a)redhat.com, fonts-bugs(a)lists.fedoraproject.org, sandmann(a)redhat.com The bdf parser read metrics values as 32-bit integers, but stored them into 16-bit integers. Overflows could occur in various operations leading to out-of-bounds memory access. A local user could exploit this issue to potentially execute arbitrary code with the privileges of the X.Org server. Upstream advisory: http://seclists.org/oss-sec/2015/q1/865 Upstream patch: http://cgit.freedesktop.org/xorg/lib/libXfont/commit/?id=2351c83a77a478b4... -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=er2MnEzbkS&a=cc_unsubscribe

8 years, 6 months

1
20
0 / 0

[Bug 1203715] New: CVE-2015-1802 libXfont: missing range check in bdfReadProperties

by Red Hat Bugzilla

https://bugzilla.redhat.com/show_bug.cgi?id=1203715 Bug ID: 1203715 Summary: CVE-2015-1802 libXfont: missing range check in bdfReadProperties Product: Security Response Component: vulnerability Keywords: Security Severity: medium Priority: medium Assignee: security-response-team(a)redhat.com Reporter: mprpic(a)redhat.com CC: btissoir(a)redhat.com, fonts-bugs(a)lists.fedoraproject.org, sandmann(a)redhat.com The bdf parser reads a count for the number of properties defined in a font from the font file, and allocates arrays with entries for each property based on that count. It never checked to see if that count was negative, or large enough to overflow when multiplied by the size of the structures being allocated, and could thus allocate the wrong buffer size, leading to out of bounds writes. A local user could exploit this issue to potentially execute arbitrary code with the privileges of the X.Org server. Upstream advisory: http://seclists.org/oss-sec/2015/q1/865 Upstream patch: http://cgit.freedesktop.org/xorg/lib/libXfont/commit/?id=2deda9906480f9c8... -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=lX6DTEkBbs&a=cc_unsubscribe

8 years, 6 months

1
12
0 / 0

← Newer
1
...
15
16
17
18
Older →

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

fonts-bugs October 2015