June 2015 - fonts-bugs - Fedora Mailing-Lists

[Bug 1203715] New: CVE-2015-1802 libXfont: missing range check in bdfReadProperties

by Red Hat Bugzilla

https://bugzilla.redhat.com/show_bug.cgi?id=1203715 Bug ID: 1203715 Summary: CVE-2015-1802 libXfont: missing range check in bdfReadProperties Product: Security Response Component: vulnerability Keywords: Security Severity: medium Priority: medium Assignee: security-response-team(a)redhat.com Reporter: mprpic(a)redhat.com CC: btissoir(a)redhat.com, fonts-bugs(a)lists.fedoraproject.org, sandmann(a)redhat.com The bdf parser reads a count for the number of properties defined in a font from the font file, and allocates arrays with entries for each property based on that count. It never checked to see if that count was negative, or large enough to overflow when multiplied by the size of the structures being allocated, and could thus allocate the wrong buffer size, leading to out of bounds writes. A local user could exploit this issue to potentially execute arbitrary code with the privileges of the X.Org server. Upstream advisory: http://seclists.org/oss-sec/2015/q1/865 Upstream patch: http://cgit.freedesktop.org/xorg/lib/libXfont/commit/?id=2deda9906480f9c8... -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=lX6DTEkBbs&a=cc_unsubscribe

8 years, 8 months

1
12
0 / 0

[Bug 1236034] New: DejavuSans missing from the list of fonts, forced refresh needed

by Red Hat Bugzilla

https://bugzilla.redhat.com/show_bug.cgi?id=1236034 Bug ID: 1236034 Summary: DejavuSans missing from the list of fonts, forced refresh needed Product: Fedora Version: 22 Component: fontconfig Assignee: tagoh(a)redhat.com Reporter: kparal(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: fonts-bugs(a)lists.fedoraproject.org, i18n-bugs(a)lists.fedoraproject.org, pnemade(a)redhat.com, tagoh(a)redhat.com Description of problem: I performed a clean install of Fedora 22, moved some data and configuration over from an older system, and found out that I can't select (I don't see) Dejavu Sans fonts in any of my GUI applications. I tried a clean user profile, no change. twaugh helped me resolve this on #fedora-devel by force refreshing a fontconfig cache, and told me to report a bug, because this should not happen. When affected, this is what I saw: $ fc-list | grep -i DejavuSans /usr/share/fonts/dejavu/DejaVuSansMono-BoldOblique.ttf: DejaVu Sans Mono:style=Bold Oblique /usr/share/fonts/dejavu/DejaVuSansMono.ttf: DejaVu Sans Mono:style=Book /usr/share/fonts/dejavu/DejaVuSansMono-Bold.ttf: DejaVu Sans Mono:style=Bold /usr/share/fonts/dejavu/DejaVuSansMono-Oblique.ttf: DejaVu Sans Mono:style=Oblique Running fc-cache didn't help: $ sudo fc-cache /usr/share/fonts/dejavu/ $ fc-list | grep -i DejavuSans /usr/share/fonts/dejavu/DejaVuSansMono-BoldOblique.ttf: DejaVu Sans Mono:style=Bold Oblique /usr/share/fonts/dejavu/DejaVuSansMono.ttf: DejaVu Sans Mono:style=Book /usr/share/fonts/dejavu/DejaVuSansMono-Bold.ttf: DejaVu Sans Mono:style=Bold /usr/share/fonts/dejavu/DejaVuSansMono-Oblique.ttf: DejaVu Sans Mono:style=Oblique But a forced refresh was successful: $ sudo fc-cache -f /usr/share/fonts/dejavu/ $ fc-list | grep -i DejavuSans /usr/share/fonts/dejavu/DejaVuSansMono-BoldOblique.ttf: DejaVu Sans Mono:style=Bold Oblique /usr/share/fonts/dejavu/DejaVuSansCondensed-Oblique.ttf: DejaVu Sans,DejaVu Sans Condensed:style=Condensed Oblique,Oblique /usr/share/fonts/dejavu/DejaVuSansCondensed-Bold.ttf: DejaVu Sans,DejaVu Sans Condensed:style=Condensed Bold,Bold /usr/share/fonts/dejavu/DejaVuSansMono.ttf: DejaVu Sans Mono:style=Book /usr/share/fonts/dejavu/DejaVuSansMono-Bold.ttf: DejaVu Sans Mono:style=Bold /usr/share/fonts/dejavu/DejaVuSans.ttf: DejaVu Sans:style=Book /usr/share/fonts/dejavu/DejaVuSansMono-Oblique.ttf: DejaVu Sans Mono:style=Oblique /usr/share/fonts/dejavu/DejaVuSans-Bold.ttf: DejaVu Sans:style=Bold /usr/share/fonts/dejavu/DejaVuSansCondensed.ttf: DejaVu Sans,DejaVu Sans Condensed:style=Condensed,Book /usr/share/fonts/dejavu/DejaVuSans-ExtraLight.ttf: DejaVu Sans,DejaVu Sans Light:style=ExtraLight /usr/share/fonts/dejavu/DejaVuSansCondensed-BoldOblique.ttf: DejaVu Sans,DejaVu Sans Condensed:style=Condensed Bold Oblique,Bold Oblique /usr/share/fonts/dejavu/DejaVuSans-Oblique.ttf: DejaVu Sans:style=Oblique /usr/share/fonts/dejavu/DejaVuSans-BoldOblique.ttf: DejaVu Sans:style=Bold Oblique I have backed up the original fontconfig cache before updating it, it is attached. The only difference in the file listing seems to be this: $ diff -u orig new --- orig 2015-06-26 13:31:45.049192566 +0200 +++ new 2015-06-26 13:31:50.372176669 +0200 @@ -1,9 +1,9 @@ -total 443k +total 463k -rw-r--r--. 1 root root unconfined_u:object_r:fonts_cache_t:s0 3.1k Jun 25 16:10 019629eead7fd8624feacc17e1c76e56-le64.cache-6 -rw-r--r--. 1 root root system_u:object_r:fonts_cache_t:s0 192 Jun 24 13:21 0251a5afa6ac727a1e32b7d4d4aa7cf0-le64.cache-6 -rw-r--r--. 1 root root unconfined_u:object_r:fonts_cache_t:s0 1.8k Jun 25 16:23 0cdaf353a0871111e8db86b8a5e64d24-le64.cache-6 -rw-r--r--. 1 root root system_u:object_r:fonts_cache_t:s0 2.5k Jun 24 13:23 12513961c6e7090f8648812f9eaf65d6-le64.cache-6 --rw-r--r--. 1 root root system_u:object_r:fonts_cache_t:s0 24k Jun 24 13:21 12b26b760a24f8b4feb03ad48a333a72-le64.cache-6 +-rw-r--r--. 1 root root unconfined_u:object_r:fonts_cache_t:s0 44k Jun 26 13:30 12b26b760a24f8b4feb03ad48a333a72-le64.cache-6 -rw-r--r--. 1 root root system_u:object_r:fonts_cache_t:s0 1.8k Jun 24 13:23 1e1e03b57ed9f0c723c5aeafda46c3fb-le64.cache-6 -rw-r--r--. 1 root root system_u:object_r:fonts_cache_t:s0 1.8k Jun 24 13:23 2881ed3fd21ca306ddad6f9b0dd3189f-le64.cache-6 -rw-r--r--. 1 root root system_u:object_r:fonts_cache_t:s0 6.7k Jun 24 13:23 2e1514a9fdd499050989183bb65136db-le64.cache-6 @@ -35,7 +35,7 @@ -rw-r--r--. 1 root root system_u:object_r:fonts_cache_t:s0 42k Jun 24 13:21 b79f3aaa7d385a141ab53ec885cc22a8-le64.cache-6 -rw-r--r--. 1 root root system_u:object_r:fonts_cache_t:s0 1.8k Jun 24 13:23 b887eea8f1b96e1d899b44ed6681fc27-le64.cache-6 -rw-r--r--. 1 root root unconfined_u:object_r:fonts_cache_t:s0 15k Jun 25 13:25 beeeeb3dfe132a8a0633a017c99ce0c0-le64.cache-6 --rw-r--r--. 1 root root unconfined_u:object_r:fonts_cache_t:s0 200 Jun 25 16:23 CACHEDIR.TAG +-rw-r--r--. 1 root root unconfined_u:object_r:fonts_cache_t:s0 200 Jun 26 13:30 CACHEDIR.TAG -rw-r--r--. 1 root root system_u:object_r:fonts_cache_t:s0 5.1k Jun 24 13:23 d3379abda271c4acd2ad0c01f565d0b0-le64.cache-6 -rw-r--r--. 1 root root system_u:object_r:fonts_cache_t:s0 1.8k Jun 24 13:23 df893b4576ad6107f9397134092c4059-le64.cache-6 -rw-r--r--. 1 root root system_u:object_r:fonts_cache_t:s0 9.2k Jun 24 13:23 e26bf336397aae6fcef4d3803472adec-le64.cache-6 So one of the cache objects changed from system_u:object_r:fonts_cache_t:s0 to unconfined_u:object_r:fonts_cache_t:s0. But I'm running with selinux permissive, so I guess that shouldn't effect it (however, the system was running in enforcing by default, so maybe it did effect it and it persisted?). Also the timestamp of CACHEDIR.TAG was updated. Version-Release number of selected component (if applicable): fontconfig-2.11.94-1.fc22.x86_64 dejavu-sans-fonts-2.35-1.fc22.noarch How reproducible: always until I force updated the cache. I can still reproduce it if I copy the cache backup back to its original location. Steps to Reproduce: 1. rm /var/cache/fontconfig -r 2. copy the provided backup into /var/cache/fontconfig 3. `fc-list | grep -i DejavuSans` should not show DejavuSans font -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=gCLGZllIov&a=cc_unsubscribe

8 years, 9 months

1
43
0 / 0

[Bug 1203718] New: CVE-2015-1803 libXfont: crash on invalid read in bdfReadCharacters

by Red Hat Bugzilla

https://bugzilla.redhat.com/show_bug.cgi?id=1203718 Bug ID: 1203718 Summary: CVE-2015-1803 libXfont: crash on invalid read in bdfReadCharacters Product: Security Response Component: vulnerability Keywords: Security Severity: low Priority: low Assignee: security-response-team(a)redhat.com Reporter: mprpic(a)redhat.com CC: btissoir(a)redhat.com, fonts-bugs(a)lists.fedoraproject.org, sandmann(a)redhat.com If the bdf parser failed to parse the data for the bitmap for any character, it would proceed with an invalid pointer to the bitmap data and later crash when trying to read the bitmap from that pointer. A local user could exploit this issue to crash the X.Org server. Upstream advisory: http://seclists.org/oss-sec/2015/q1/865 Upstream patch: http://cgit.freedesktop.org/xorg/lib/libXfont/commit/?id=78c2e3d70d296982... -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=a6kgapYM62&a=cc_unsubscribe

8 years, 9 months

1
18
0 / 0

[Bug 1229198] New: [kn_IN] Addition of glyphs to Lohit Kannada for recent Unicode additions

by Red Hat Bugzilla

https://bugzilla.redhat.com/show_bug.cgi?id=1229198 Bug ID: 1229198 Summary: [kn_IN] Addition of glyphs to Lohit Kannada for recent Unicode additions Product: Fedora Version: 23 Component: lohit-kannada-fonts Assignee: psatpute(a)redhat.com Reporter: samjnaa(a)gmail.com QA Contact: extras-qa(a)fedoraproject.org CC: fonts-bugs(a)lists.fedoraproject.org, i18n-bugs(a)lists.fedoraproject.org, psatpute(a)redhat.com Created attachment 1036248 --> https://bugzilla.redhat.com/attachment.cgi?id=1036248&action=edit Kannada Sign Spacing Candrabindu glyph Unicode has recently accepted 0C80 Kannada Sign Spacing Candrabindu. I am attaching the glyph for it. Please add this glyph to Lohit Kannada once the character is published in Unicode. Note that I am going to propose a few more Unicode characters for Kannada for Vedic. Once Unicode accepts I'll attach those glyphs also here. This can be the placeholder bug to ensure that the work gets done. Thanks. Reference: http://www.unicode.org/alloc/Pipeline.html -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=GNK8FWSgdV&a=cc_unsubscribe

8 years, 9 months

1
4
0 / 0

[Bug 985343] New: After telugu input .(full stop) is rendering as square box in lokalize editor

by Red Hat Bugzilla

https://bugzilla.redhat.com/show_bug.cgi?id=985343 Bug ID: 985343 Summary: After telugu input .(full stop) is rendering as square box in lokalize editor Product: Fedora Version: 19 Component: lohit-telugu-fonts Severity: unspecified Priority: unspecified Assignee: psatpute(a)redhat.com Reporter: kkrothap(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: fonts-bugs(a)lists.fedoraproject.org, i18n-bugs(a)lists.fedoraproject.org, psatpute(a)redhat.com Created attachment 774715 --> https://bugzilla.redhat.com/attachment.cgi?id=774715&action=edit Example screen shot regarding the problem. Description of problem: While using lokalize as translation editor, after telugu input if i type .(full stop) it is rendering as square box. Version-Release number of selected component (if applicable): lohit-telugu-fonts-2.5.3-2.fc19.noarch kdesdk-lokalize-4.10.5-1.fc19.x86_64 How reproducible: Every time Steps to Reproduce: 1.Open lokalize. 2.Input some telugu text. 3.Type . after telugu text. Actual results: . rendering as square box Expected results: Should render as it should be. Additional info: Working fine with pothana font. -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=ptT4KXOL2o&a=cc_unsubscribe

8 years, 9 months

1
18
0 / 0

[Bug 1229213] New: Addition of glyphs to Lohit Telugu for recent Unicode additions

by Red Hat Bugzilla

https://bugzilla.redhat.com/show_bug.cgi?id=1229213 Bug ID: 1229213 Summary: Addition of glyphs to Lohit Telugu for recent Unicode additions Product: Fedora Version: 23 Component: lohit-telugu-fonts Assignee: psatpute(a)redhat.com Reporter: samjnaa(a)gmail.com QA Contact: extras-qa(a)fedoraproject.org CC: fonts-bugs(a)lists.fedoraproject.org, i18n-bugs(a)lists.fedoraproject.org, psatpute(a)redhat.com Created attachment 1036267 --> https://bugzilla.redhat.com/attachment.cgi?id=1036267&action=edit Telugu LLLA and RRRA with vowel sign ligatures Unicode 7.0 encoded 0C34 Telugu Letter LLLA and Unicode 8.0 includes 0C5A Telugu Letter RRRA. I was one of the authors of the original proposals for these characters. I have attached glyphs for these characters including those of the consonant ligating with the vowels (except for U/UU and vocalic vowels since these can be presented as simple sequences of glyphs and AI since it is based on the glyph for E). Please add these to Lohit Telugu and the appropriate OT table entries for the vowel sign substitutions. NOTE: I am proposing a few more characters for Telugu for Vedic. Once Unicode approves I'll attach those glyphs also here. References: http://www.unicode.org/charts/PDF/U0C00.pdf http://www.unicode.org/Public/8.0.0/charts/blocks/U0C00.pdf http://www.unicode.org/L2/L2012/12015-telugu-llla-proposal.pdf http://www.unicode.org/L2/L2012/12016-telugu-rrra-proposal.pdf -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=eHaUm9j7X9&a=cc_unsubscribe

8 years, 9 months

1
7
0 / 0

[Bug 1156554] New: [rfe] use dnf instead of yum

by Red Hat Bugzilla

https://bugzilla.redhat.com/show_bug.cgi?id=1156554 Bug ID: 1156554 Summary: [rfe] use dnf instead of yum Product: Fedora Version: rawhide Component: fontpackages Assignee: nicolas.mailhot(a)laposte.net Reporter: metherid(a)gmail.com QA Contact: extras-qa(a)fedoraproject.org CC: fonts-bugs(a)lists.fedoraproject.org, nicolas.mailhot(a)laposte.net, paul(a)frixxon.co.uk, tagoh(a)redhat.com Description of problem: Fedora 22 is planning to switch over to dnf from yum as per https://fedoraproject.org/wiki/Changes/ReplaceYumWithDNF Please switch from yum/yum-utils to dnf/dnf-plugins-core. Thanks! -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=YeSQAkWFuc&a=cc_unsubscribe

8 years, 9 months

1
10
0 / 0

[Bug 477387] New: Please convert to new font packaging guidelines

by Red Hat Bugzilla

Please do not reply directly to this email. All additional comments should be made in the comments box of this bug. Summary: Please convert to new font packaging guidelines https://bugzilla.redhat.com/show_bug.cgi?id=477387 Summary: Please convert to new font packaging guidelines Product: Fedora Version: rawhide Platform: All OS/Version: Linux Status: NEW Severity: medium Priority: medium Component: fonts-hebrew-fancy AssignedTo: danken(a)cs.technion.ac.il ReportedBy: nicolas.mailhot(a)laposte.net QAContact: extras-qa(a)fedoraproject.org CC: danken(a)cs.technion.ac.il, fedora-fonts-bugs-list(a)redhat.com Classification: Fedora This bug has been filed because we've detected your package includes one or several font files: repoquery -C --repoid=rawhide -f '*.ttf' -f '*.otf' -f '*.pfb' -f '*.pfa' --qf='%{SOURCERPM}\n' |sed -e 's+-[0-9.-]*\.fc[123456789]$.*$src.rpm++g'|sort|uniq Unfortunately the script does not detect symlinks to other packages, so if that's your case, you can close this bug report now. Otherwise, you should know that: - Fedora guidelines demand the packaging of fonts in a separate package or subpackage: http://fedoraproject.org/wiki/Packaging/Guidelines#Avoid_bundling_of_font... - our font packaging guidelines recently changed, and every package that ships fonts must be adapted to the new templates available in the fontpackages-devel package. http://fedoraproject.org/wiki/PackagingDrafts/Fonts_packaging_automation_... http://fedoraproject.org/wiki/Fedora_fonts_policy_package http://fedoraproject.org/wiki/Simple_fonts_spec_template http://fedoraproject.org/wiki/Fonts_spec_template_for_multiple_fonts Please make your package conform to the current guidelines in rawhide. If your package is not principaly a font package, depending on a separate font package or subpackage is the prefered solution. If your application does not use fontconfig you can always package symlinks to the files provided by the font package and installed in the correct fontconfig directories. It is preferred to make a font package or subpackage per font family, though it is not currently a hard guidelines requirement (it may become before Fedora 11 is released). The definition of a font family is given on http://fedoraproject.org/wiki/Fonts_spec_template_notes/font-family The new templates should make the creation of font subpackages easy and safe. The following packages have already been converted and can serve as examples: - andika-fonts - apanov-heuristica-fonts - bitstream-vera-fonts - charis-fonts - dejavu-fonts - ecolier-court-fonts - edrip-fonts - gfs-ambrosia-fonts - gfs-artemisia-fonts - gfs-baskerville-fonts - gfs-bodoni-classic-fonts - gfs-bodoni-fonts - gfs-complutum-fonts - gfs-didot-classic-fonts - gfs-didot-fonts - gfs-eustace-fonts - gfs-fleischman-fonts - gfs-garaldus-fonts - gfs-gazis-fonts - gfs-jackson-fonts - gfs-neohellenic-fonts - gfs-nicefore-fonts - gfs-olga-fonts - gfs-porson-fonts - gfs-solomos-fonts - gfs-theokritos-fonts - stix-fonts - yanone-kaffeesatz-fonts If you have any remaining questions about the new guidelines please ask them on fedora-fonts-list at redhat.com -- Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

8 years, 10 months

1
11
0 / 0

[Bug 1100969] [abrt] cinnamon: __memcpy_sse2_unaligned(): cinnamon killed by SIGSEGV

by Red Hat Bugzilla

https://bugzilla.redhat.com/show_bug.cgi?id=1100969 Jaroslav Reznik <jreznik(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |CLOSED Resolution|--- |EOL Last Closed| |2015-06-30 08:43:06 --- Comment #12 from Jaroslav Reznik <jreznik(a)redhat.com> --- Fedora 20 changed to end-of-life (EOL) status on 2015-06-23. Fedora 20 is no longer maintained, which means that it will not receive any further security or bug fix updates. As a result we are closing this bug. If you can reproduce this bug against a currently maintained version of Fedora please feel free to reopen this bug against that version. If you are unable to reopen this bug, please file a new report against the current release. If you experience problems, please add a comment to this bug. Thank you for reporting this bug and we are sorry it could not be fixed. -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=ciA99t1yZg&a=cc_unsubscribe

8 years, 11 months

1
0
0 / 0

[Bug 1226525] xterm is using wrong line spacing

by Red Hat Bugzilla

https://bugzilla.redhat.com/show_bug.cgi?id=1226525 Akira TAGOH <tagoh(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |CLOSED Resolution|--- |DUPLICATE Last Closed| |2015-06-29 23:32:52 --- Comment #8 from Akira TAGOH <tagoh(a)redhat.com> --- *** This bug has been marked as a duplicate of bug 1226522 *** -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=RN8Uw02cLv&a=cc_unsubscribe

8 years, 11 months

1
0
0 / 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

fonts-bugs June 2015