December 2015 - fonts-bugs - Fedora Mailing-Lists

[Bug 487070] New: CVE-2006-3467 CVE-2006-3467 freetype: integer overflow vulnerability due to incomplete fix for CVE-2006-1861

by Red Hat Bugzilla

Please do not reply directly to this email. All additional comments should be made in the comments box of this bug. Summary: CVE-2006-3467 CVE-2006-3467 freetype: integer overflow vulnerability due to incomplete fix for CVE-2006-1861 Alias: CVE-2006-3467 https://bugzilla.redhat.com/show_bug.cgi?id=487070 Summary: CVE-2006-3467 CVE-2006-3467 freetype: integer overflow vulnerability due to incomplete fix for CVE-2006-1861 Product: Security Response Version: unspecified Platform: All URL: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-20 06-3467 OS/Version: Linux Status: NEW Status Whiteboard: impact=moderate,source=rehdat,reported=20060710,public =20060718 Keywords: Security Severity: medium Priority: medium Component: vulnerability AssignedTo: security-response-team(a)redhat.com ReportedBy: vdanen(a)redhat.com CC: ajax(a)redhat.com, fedora-fonts-bugs-list(a)redhat.com Classification: Other Target Release: --- Common Vulnerabilities and Exposures assigned an identifier CVE-2006-3467 to the following vulnerability: Name: CVE-2006-3467 URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3467 Assigned: 20060710 Reference: URL: http://www.securityfocus.com/archive/1/archive/1/451426/100/200/threaded Reference: MISC: http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=190593 Integer overflow in FreeType before 2.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PCF file, as demonstrated by the Red Hat bad1.pcf test file, due to a partial fix of CVE-2006-1861. -- Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

8 years, 2 months

1
8
0 / 0

[Bug 1262377] New: freetype: Infinite loop in parse_encoding in t1load.c

by Red Hat Bugzilla

https://bugzilla.redhat.com/show_bug.cgi?id=1262377 Bug ID: 1262377 Summary: freetype: Infinite loop in parse_encoding in t1load.c Product: Security Response Component: vulnerability Keywords: Security Severity: low Priority: low Assignee: security-response-team(a)redhat.com Reporter: amaris(a)redhat.com CC: behdad(a)fedoraproject.org, erik-fedora(a)vanpienbroek.nl, fedora-mingw(a)lists.fedoraproject.org, fonts-bugs(a)lists.fedoraproject.org, kevin(a)tigcc.ticalc.org, lfarkas(a)lfarkas.org, mkasik(a)redhat.com, rjones(a)redhat.com If the Postscript stream contains a broken number-with-base (e.g. "8#garbage") the cursor doesn't advance and parse_encoding enters an infinite loop. Upstream patch: http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=df14e6... CVE request: http://seclists.org/oss-sec/2015/q3/537 -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=iemI0CxmQI&a=cc_unsubscribe _______________________________________________ fonts-bugs mailing list fonts-bugs(a)lists.fedoraproject.org http://lists.fedoraproject.org/postorius/fonts-bugs@lists.fedoraproject.org

8 years, 2 months

1
15
0 / 0

[Bug 1278049] New: Default search directories do not include the location of TeX Live fonts

by Red Hat Bugzilla

https://bugzilla.redhat.com/show_bug.cgi?id=1278049 Bug ID: 1278049 Summary: Default search directories do not include the location of TeX Live fonts Product: Fedora Version: 23 Component: fontconfig Assignee: tagoh(a)redhat.com Reporter: dchristidis(a)mykolab.com QA Contact: extras-qa(a)fedoraproject.org CC: fonts-bugs(a)lists.fedoraproject.org, i18n-bugs(a)lists.fedoraproject.org, pnemade(a)redhat.com, tagoh(a)redhat.com Description of problem: Beginning with Fedora 23, the OTF files for Computer Modern Unicode are included in texlive-cm-unicode. However, fontconfig is not configured to search the install location by default. Thus, the user is required to perform additional steps to use that font in TeX or other applications. Version-Release number of selected component (if applicable): fontconfig-2.11.94-4.fc23.x86_64 texlive-cm-unicode-svn19445.0.7.0-14.fc23.noarch How reproducible: Always Steps to Reproduce: 1. dnf install texlive-cm-unicode 2. fc-list | grep CMU Actual results: fontconfig does not locate the recently installed fonts. Expected results: After installation, the fonts should be available for use without further actions. -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=53zwOwA7t3&a=cc_unsubscribe

8 years, 3 months

1
13
0 / 0

[Bug 1227614] New: Font rendering is poor in Fedora 22

by Red Hat Bugzilla

https://bugzilla.redhat.com/show_bug.cgi?id=1227614 Bug ID: 1227614 Summary: Font rendering is poor in Fedora 22 Product: Fedora Version: 22 Component: freetype Assignee: mkasik(a)redhat.com Reporter: sudhir(a)sudhirkhanger.com QA Contact: extras-qa(a)fedoraproject.org CC: behdad(a)fedoraproject.org, fonts-bugs(a)lists.fedoraproject.org, kevin(a)tigcc.ticalc.org, mkasik(a)redhat.com Created attachment 1034149 --> https://bugzilla.redhat.com/attachment.cgi?id=1034149&action=edit screenshot Description of problem: Font rendering on Fedora 21 KDE worked fine. But in Fedora 22 which uses freetype-2.5.5-1.fc22.x86_64 it is way too grainier. I use slight hint which doesn't seem to be applied at all. RPMFusion which uses F21's freetype-freeworld-2.3.11 works fine. So something must have gone wrong in the update. Version-Release number of selected component (if applicable): How reproducible: Steps to Reproduce: 1. 2. 3. Actual results: Expected results: Additional info: -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=aU8lA46g7B&a=cc_unsubscribe

8 years, 4 months

1
3
0 / 0

[Bug 1286714] New: freetype-2.6.2 is available

by Red Hat Bugzilla

https://bugzilla.redhat.com/show_bug.cgi?id=1286714 Bug ID: 1286714 Summary: freetype-2.6.2 is available Product: Fedora Version: rawhide Component: freetype Keywords: FutureFeature, Triaged Assignee: mkasik(a)redhat.com Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: behdad(a)fedoraproject.org, fonts-bugs(a)lists.fedoraproject.org, kevin(a)tigcc.ticalc.org, mkasik(a)redhat.com Latest upstream release: 2.6.2 Current version/release in rawhide: 2.6.1-1.fc24 URL: http://download.savannah.gnu.org/releases/freetype/ Please consult the package updates policy before you issue an update to a stable branch: https://fedoraproject.org/wiki/Updates_Policy More information about the service that created this bug can be found at: https://fedoraproject.org/wiki/Upstream_release_monitoring Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=98VGhTqyZD&a=cc_unsubscribe

8 years, 4 months

1
4
0 / 0

[Bug 1195021] New: The ttf oldstandard-sfd fonts are corrupted

by Red Hat Bugzilla

https://bugzilla.redhat.com/show_bug.cgi?id=1195021 Bug ID: 1195021 Summary: The ttf oldstandard-sfd fonts are corrupted Product: Fedora Version: 20 Component: oldstandard-sfd-fonts Assignee: sanjay.ankur(a)gmail.com Reporter: eko(a)lanet.lv QA Contact: extras-qa(a)fedoraproject.org CC: fonts-bugs(a)lists.fedoraproject.org, sanjay.ankur(a)gmail.com Created attachment 994206 --> https://bugzilla.redhat.com/attachment.cgi?id=994206&action=edit An exmple of errors in the ttf file. Description of problem: The ttf files are with errors. Version-Release number of selected component (if applicable): oldstandard-sfd-fonts-2.0.2-13.fc20 The same with oldstandard-sfd-fonts-2.0.2-15.fc21. The corrupted fonts has a very long history – the ttf files from package oldstandard-sfd-fonts-2.0.2-3.fc10 are already damaged. How reproducible: 100% Steps to Reproduce: 1. Open /usr/share/fonts/oldstandard/* files with any font viewer. Actual results: There is a garbage in place of letters (see the attached screen-shot) Expected results: Usable fonts. Additional info: I try to rebuilt this package from SRPM – no luck. The fontforge refuses to built usable ttf even by hand. There are two options to solve the issue: 1) To generate OTF not the TTF (preferred solution); 2) To use ready-made ttf from http://www.fontsquirrel.com/fonts/old-standard-TT. -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=0XRZ2KCY22&a=cc_unsubscribe

8 years, 4 months

1
12
0 / 0

[Bug 1198246] Review Request: oflb-coval-fonts - Derivation of other free of charge fonts

by Red Hat Bugzilla

https://bugzilla.redhat.com/show_bug.cgi?id=1198246 --- Comment #8 from Parag AN(पराग) <panemade(a)gmail.com> --- Carlos, Have you get time to learn fedora-review usage? Have you done any package reviews already? -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=lYNRCibKZG&a=cc_unsubscribe

8 years, 4 months

1
0
0 / 0

[Bug 1240807] New: Non-latin glyphs generated by ligatures fi ff fl

by Red Hat Bugzilla

https://bugzilla.redhat.com/show_bug.cgi?id=1240807 Bug ID: 1240807 Summary: Non-latin glyphs generated by ligatures fi ff fl Product: Fedora Version: 21 Component: dejavu-fonts Severity: urgent Assignee: nicolas.mailhot(a)laposte.net Reporter: federicoleva(a)tiscali.it QA Contact: extras-qa(a)fedoraproject.org CC: fonts-bugs(a)lists.fedoraproject.org, nicolas.mailhot(a)laposte.net, paul(a)frixxon.co.uk, peter(a)thecodergeek.com Created attachment 1049535 --> https://bugzilla.redhat.com/attachment.cgi?id=1049535&action=edit The letters in question Digrams fi ff fl became unreadable after latest update to DejaVu Sans and DejaVu Sans Bold, being transformed into another script. See attachment. $ rpm -qa | grep dejavu dejavu-sans-mono-fonts-2.35-1.fc21.noarch dejavu-serif-fonts-2.35-1.fc21.noarch dejavu-fonts-common-2.35-1.fc21.noarch dejavu-sans-fonts-2.35-1.fc21.noarch -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=c7gmSzHsIE&a=cc_unsubscribe

8 years, 4 months

1
20
0 / 0

[Bug 1004732] [vi] Ugly font rendering for Vietnamese in anaconda

by Red Hat Bugzilla

https://bugzilla.redhat.com/show_bug.cgi?id=1004732 Matthias Clasen <mclasen(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |CLOSED Resolution|--- |WONTFIX Last Closed| |2015-12-17 20:35:45 --- Comment #20 from Matthias Clasen <mclasen(a)redhat.com> --- Not something that is realistically going to happen. It is a lot more complicated than you think. You have to reformat all strings, which may require data that is no longer available, etc, etc -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=Qb3iny9X3m&a=cc_unsubscribe

8 years, 4 months

1
0
0 / 0

[Bug 1271787] Review Request: comic-neue-fonts - A typeface family inspired by Comic Sans

by Red Hat Bugzilla

https://bugzilla.redhat.com/show_bug.cgi?id=1271787 --- Comment #10 from Upstream Release Monitoring <upstream-release-monitoring(a)fedoraproject.org> --- pbrobinson's scratch build of comic-neue-fonts?#edb71e52cc52a14aa1a7516a4f986cbff2c8f06e for epel7-archbootstrap and git://pkgs.fedoraproject.org/comic-neue-fonts?#edb71e52cc52a14aa1a7516a4f... completed http://koji.fedoraproject.org/koji/taskinfo?taskID=12089453 -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=UttQyJCy7H&a=cc_unsubscribe

8 years, 5 months

1
0
0 / 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

fonts-bugs December 2015