December 2017 - fonts-bugs - Fedora Mailing-Lists

[Bug 1475389] New: CVE-2017-11571 fontforge: Stack-buffer overflow in addnibble function

by bugzilla＠redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=1475389 Bug ID: 1475389 Summary: CVE-2017-11571 fontforge: Stack-buffer overflow in addnibble function Product: Security Response Component: vulnerability Keywords: Security Severity: low Priority: low Assignee: security-response-team(a)redhat.com Reporter: anemec(a)redhat.com CC: eng-i18n-bugs(a)redhat.com, fonts-bugs(a)lists.fedoraproject.org, kevin(a)scrye.com, paul(a)frixxon.co.uk, pnemade(a)redhat.com FontForge 20161012 is vulnerable to a stack-based buffer overflow in addnibble (parsettf.c) resulting in DoS via a crafted otf file. Upstream issue: https://github.com/fontforge/fontforge/issues/3087 -- You are receiving this mail because: You are on the CC list for the bug.

5 years, 8 months

1
4
0 / 0

[Bug 1475388] New: CVE-2017-11570 fontforge: Buffer over-read in umodenc function

by bugzilla＠redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=1475388 Bug ID: 1475388 Summary: CVE-2017-11570 fontforge: Buffer over-read in umodenc function Product: Security Response Component: vulnerability Keywords: Security Severity: low Priority: low Assignee: security-response-team(a)redhat.com Reporter: anemec(a)redhat.com CC: eng-i18n-bugs(a)redhat.com, fonts-bugs(a)lists.fedoraproject.org, kevin(a)scrye.com, paul(a)frixxon.co.uk, pnemade(a)redhat.com FontForge 20161012 is vulnerable to a buffer over-read in umodenc (parsettf.c) resulting in DoS or via a crafted otf file. Upstream issue: https://github.com/fontforge/fontforge/issues/3097 -- You are receiving this mail because: You are on the CC list for the bug.

5 years, 8 months

1
3
0 / 0

[Bug 1475386] New: CVE-2017-11569 fontforge: Heap-buffer over-read in readttfcopyrights function

by bugzilla＠redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=1475386 Bug ID: 1475386 Summary: CVE-2017-11569 fontforge: Heap-buffer over-read in readttfcopyrights function Product: Security Response Component: vulnerability Keywords: Security Severity: low Priority: low Assignee: security-response-team(a)redhat.com Reporter: anemec(a)redhat.com CC: eng-i18n-bugs(a)redhat.com, fonts-bugs(a)lists.fedoraproject.org, kevin(a)scrye.com, paul(a)frixxon.co.uk, pnemade(a)redhat.com FontForge 20161012 is vulnerable to a heap-based buffer over-read in readttfcopyrights (parsettf.c) resulting in DoS via a crafted otf file. Upstream issue: https://github.com/fontforge/fontforge/issues/3093 -- You are receiving this mail because: You are on the CC list for the bug.

5 years, 8 months

1
4
0 / 0

[Bug 1515679] New: should be renamed to naver-nanum-gothic-coding-fonts

by bugzilla＠redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=1515679 Bug ID: 1515679 Summary: should be renamed to naver-nanum-gothic-coding-fonts Product: Fedora Version: rawhide Component: nhn-nanum-gothic-coding-fonts Assignee: pwu(a)redhat.com Reporter: tagoh(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: fonts-bugs(a)lists.fedoraproject.org, i18n-bugs(a)lists.fedoraproject.org, pwu(a)redhat.com Description of problem: As NHN has been renamed their company name to Naver at 2014, we should also rename the package name because the prefix of the package name is supposed to be the foundry name. nhn-nanum-gothic-fonts has been already renamed to naver-nanumm-gothic-fonts. so we should follow on it. -- You are receiving this mail because: You are on the CC list for the bug.

5 years, 8 months

1
3
0 / 0

[Bug 1515676] New: should be renamed to naver-nanujm-gothic-light-fonts

by bugzilla＠redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=1515676 Bug ID: 1515676 Summary: should be renamed to naver-nanujm-gothic-light-fonts Product: Fedora Version: rawhide Component: nhn-nanum-gothic-light-fonts Assignee: pwu(a)redhat.com Reporter: tagoh(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: fonts-bugs(a)lists.fedoraproject.org, i18n-bugs(a)lists.fedoraproject.org, pwu(a)redhat.com Description of problem: As NHN has been renamed their company name to Naver at 2014, we should also rename the package name because the prefix of the package name is supposed to be the foundry name. nhn-nanum-gothic-fonts has been already renamed to naver-nanumm-gothic-fonts. so we should follow on it. -- You are receiving this mail because: You are on the CC list for the bug.

5 years, 8 months

1
7
0 / 0

[Bug 1084007] Review Request: google-roboto-fonts - Google Roboto fonts

by bugzilla＠redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=1084007 --- Comment #8 from Fedora Update System <updates(a)fedoraproject.org> --- google-roboto-fonts-2.138-1.el7 has been submitted as an update to Fedora EPEL 7. https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-30d4a534b6 -- You are receiving this mail because: You are on the CC list for the bug.

5 years, 9 months

1
0
0 / 0

[Bug 1433628] New: First line of pixels chopped off in Chromium/ Chrome when liberation-fonts built with fontforge > 20150430

by bugzilla＠redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=1433628 Bug ID: 1433628 Summary: First line of pixels chopped off in Chromium/Chrome when liberation-fonts built with fontforge > 20150430 Product: Fedora Version: 25 Component: liberation-fonts Assignee: psatpute(a)redhat.com Reporter: chillermillerlong(a)hotmail.com QA Contact: extras-qa(a)fedoraproject.org CC: fonts-bugs(a)lists.fedoraproject.org, i18n-bugs(a)lists.fedoraproject.org, petersen(a)redhat.com, psatpute(a)redhat.com Description of problem: The current liberation-fonts package is built by fontforge 20160404 and results in the top of the fonts being chopped off in some pages in Chrome/Chromium. For example, with this page: https://www.reddit.com/r/linux/comments/600h4f/wine_24_released/ When built with fontforge 20160404: http://i.imgur.com/kO2H3Hw.png When built with fontforge 20150430: http://i.imgur.com/IQmu5o3.png Notice how the first line of pixels is getting chopped off. Version-Release number of selected component (if applicable): liberation-fonts-common-1.07.4-7.fc24.noarch liberation-mono-fonts-1.07.4-7.fc24.noarch liberation-sans-fonts-1.07.4-7.fc24.noarch liberation-serif-fonts-1.07.4-7.fc24.noarch fontforge-20160404-5.fc25.x86_64 Additional info: I did a git bisect and found that this is the commit in fontforge that introduced the issue. --- [chenxiaolong@cxl-fedora25vm fontforge]$ git bisect bad e870019c2602d50eb00793e979f3e11bcc71d6cf is the first bad commit commit e870019c2602d50eb00793e979f3e11bcc71d6cf Author: Frédéric Wang <fred.wang(a)free.fr> Date: Wed May 13 08:03:13 2015 +0200 Fix read/write of bits USE_TYPO_METRICS and WWS for OS2 version < 4 :040000 040000 7032ea971c1d084ab8a038b4a80d9092e53a8519 eb11e4b5a69718ad94d8dbfc414e7b2a944548d3 M fontforge --- https://github.com/fontforge/fontforge/commit/e870019c2602d50eb00793e979f... Is this something that can be fixed without affecting/breaking other fonts? -- You are receiving this mail because: You are on the CC list for the bug.

5 years, 9 months

1
13
0 / 0

[Bug 1527495] New: fontconfig-2.12.91 is available

by bugzilla＠redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=1527495 Bug ID: 1527495 Summary: fontconfig-2.12.91 is available Product: Fedora Version: rawhide Component: fontconfig Keywords: FutureFeature, Triaged Assignee: tagoh(a)redhat.com Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: ajax(a)redhat.com, alexl(a)redhat.com, fonts-bugs(a)lists.fedoraproject.org, i18n-bugs(a)lists.fedoraproject.org, john.j5live(a)gmail.com, mbarnes(a)fastmail.com, mclasen(a)redhat.com, pnemade(a)redhat.com, rhughes(a)redhat.com, rstrode(a)redhat.com, sandmann(a)redhat.com, tagoh(a)redhat.com Latest upstream release: 2.12.91 Current version/release in rawhide: 2.12.6-4.fc28 URL: http://www.fontconfig.org/release/ Please consult the package updates policy before you issue an update to a stable branch: https://fedoraproject.org/wiki/Updates_Policy More information about the service that created this bug can be found at: https://fedoraproject.org/wiki/Upstream_release_monitoring Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from anitya: https://release-monitoring.org/project/827/ -- You are receiving this mail because: You are on the CC list for the bug.

5 years, 9 months

1
2
0 / 0

[Bug 1526510] New: USE_TYPO_METRICS set in Fedora 2X but not set in RHEL7 or in ttf binary release

by bugzilla＠redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=1526510 Bug ID: 1526510 Summary: USE_TYPO_METRICS set in Fedora 2X but not set in RHEL7 or in ttf binary release Product: Fedora Version: 27 Component: liberation-fonts Assignee: psatpute(a)redhat.com Reporter: caolanm(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: alexl(a)redhat.com, caillon+fedoraproject(a)gmail.com, caolanm(a)redhat.com, fonts-bugs(a)lists.fedoraproject.org, gnome-sig(a)lists.fedoraproject.org, i18n-bugs(a)lists.fedoraproject.org, john.j5live(a)gmail.com, mbarnes(a)fastmail.com, mclasen(a)redhat.com, petersen(a)redhat.com, psatpute(a)redhat.com, rhughes(a)redhat.com, rstrode(a)redhat.com, sandmann(a)redhat.com External Bug ID: Document Foundation 114434 Created attachment 1368567 --> https://bugzilla.redhat.com/attachment.cgi?id=1368567&action=edit fontforge os/2 metric table on Fedora for Liberation Serif Regular Description of problem: The USE_TYPO_METRICS fsSelection bit (https://www.microsoft.com/typography/otspec/os2.htm#fss) is set in Liberation Serif Regular (probably all of them) under Fedora >= 25 but is *not* set in the RHEL versions or in the binary releases available at http://releases.pagure.org/liberation-fonts/liberation-fonts-ttf-1.07.4.t... Version-Release number of selected component (if applicable): liberation-fonts-1.07.4-9.fc27 How reproducible: 100% Steps to Reproduce: 1. (In Fedora) fontforge LiberationSerif-Regular.ttf 2. element->font info->os/2->metrics 3. Example "Really use typo metrics" Actual results: its on Expected results: its off Additional info: If I rebuild the fedora rawhide package on fedora I get the bit set, if I rebuild under RHEL7 I get the bit set, so the build environment/tools matter in terms of the results I think we want this bit off in fedora to match what we have in RHEL and in the binary releases and what I see in Arimo and Times New Roman (probably best to confirm that independently) This matters in that in recent LibreOffice if that bit is on we use the typo metrics while if its off we use the hhea metrics and for Liberation Serif they are different enough to mangle starmath equations as per the linked bug -- You are receiving this mail because: You are on the CC list for the bug.

5 years, 9 months

1
11
0 / 0

[Bug 1528706] New: fontconfig 2.12.91-1 breaks dependent apps

by bugzilla＠redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=1528706 Bug ID: 1528706 Summary: fontconfig 2.12.91-1 breaks dependent apps Product: Fedora Version: rawhide Component: fontconfig Assignee: tagoh(a)redhat.com Reporter: kevin(a)scrye.com QA Contact: extras-qa(a)fedoraproject.org CC: ajax(a)redhat.com, alexl(a)redhat.com, fonts-bugs(a)lists.fedoraproject.org, i18n-bugs(a)lists.fedoraproject.org, john.j5live(a)gmail.com, mbarnes(a)fastmail.com, mclasen(a)redhat.com, pnemade(a)redhat.com, rhughes(a)redhat.com, rstrode(a)redhat.com, sandmann(a)redhat.com, tagoh(a)redhat.com Dec 22 12:52:51 taim.scrye.com kernel: hexchat[2507]: segfault at a8 ip 00007fbe1aa9f7c8 sp 00007fff3e31da90 error 4 in libfontconfig.so.1.11.0[7fbe1aa83000+40000] Dec 22 12:52:51 taim.scrye.com systemd[1]: Started Process Core Dump (PID 2796/UID 0). PID: 2501 (firefox) UID: 1000 (kevin) GID: 1000 (kevin) Signal: 11 (SEGV) Timestamp: Fri 2017-12-22 12:52:50 PST (11min ago) Command Line: /usr/lib64/firefox/firefox Executable: /usr/lib64/firefox/firefox Control Group: /user.slice/user-1000.slice/session-2.scope Unit: session-2.scope Slice: user-1000.slice Session: 2 Owner UID: 1000 (kevin) Boot ID: 53452acd85bb4e00873aa89e91825547 Machine ID: 54945dc7fd0a438f9f0a0a4e162d5983 Hostname: taim.scrye.com Storage: /var/lib/systemd/coredump/core.firefox.1000.53452acd85bb4e00873aa89e91825547.2501.1513975970000000.lz4 Message: Process 2501 (firefox) of user 1000 dumped core. Stack trace of thread 2501: #0 0x00007f702c3eeffb raise (libpthread.so.0) #1 0x00007f701f7102e6 _ZN13nsProfileLock18FatalSignalHandlerEiP9siginfo_tPv (libxul.so) #2 0x00007f701fe422ec _Z16WasmFaultHandlerIL6Signal0EEviP9siginfo_tPv (libxul.so) #3 0x00007f702c3ef160 __restore_rt (libpthread.so.0) #4 0x00007f7027cc67c8 FcFontRenderPrepare (libfontconfig.so.1) #5 0x00007f701d45ae7c _ZN22gfxFontconfigFontEntry18CreateFontInstanceEPK12gfxFontStyleb (libxul.so) #6 0x00007f701d4a96b1 _ZN12gfxFontEntry14FindOrMakeFontEPK12gfxFontStylebP15gfxCharacterMap (libxul.s #7 0x00007f701d45bb89 _ZN21gfxFcPlatformFontList12GetFTLibraryEv (libxul.so) #8 0x00007f701d468ced _ZN11gfxPlatform4InitEv (libxul.so) #9 0x00007f701d469082 _ZN11gfxPlatform11GetPlatformEv (libxul.so) #10 0x00007f701e774e4e _ZN7mozilla6widget11GfxInfoBase17GetContentBackendER12nsTSubstringIDsE (libxul. #11 0x00007f701c975aa2 NS_InvokeByIndex (libxul.so) #12 0x00007f701d0e315b _ZN16XPCWrappedNative10CallMethodER14XPCCallContextNS_8CallModeE (libxul.so) #13 0x00007f701d0eb28f _Z19XPC_WN_GetterSetterP9JSContextjPN2JS5ValueE (libxul.so) #14 0x00007f701f8a3d74 _ZN2js23InternalCallOrConstructEP9JSContextRKN2JS8CallArgsENS_14MaybeConstructE #15 0x00007f701f8a4188 _ZN2js4CallEP9JSContextN2JS6HandleINS2_5ValueEEES5_RKNS_13AnyInvokeArgsENS2_13M #16 0x00007f701f8a4256 _ZN2js10CallGetterEP9JSContextN2JS6HandleINS2_5ValueEEES5_NS2_13MutableHandleIS #17 0x00007f701fcd81fe _ZL10CallGetterP9JSContextN2JS6HandleIP8JSObjectEENS2_INS1_5ValueEEENS2_IPN2js5 #18 0x00007f701fcea498 _ZN2js17NativeGetPropertyEP9JSContextN2JS6HandleIPNS_12NativeObjectEEENS3_INS2_ #19 0x00007f701f8a254f _ZL9InterpretP9JSContextRN2js8RunStateE (libxul.so) #20 0x00007f701f8a3808 _ZN2js9RunScriptEP9JSContextRNS_8RunStateE (libxul.so) #21 0x00007f701f8a3eb2 _ZN2js23InternalCallOrConstructEP9JSContextRKN2JS8CallArgsENS_14MaybeConstructE #22 0x00007f701f89611e _ZL9InterpretP9JSContextRN2js8RunStateE (libxul.so) #23 0x00007f701f8a3808 _ZN2js9RunScriptEP9JSContextRNS_8RunStateE (libxul.so) #24 0x00007f701f8a3eb2 _ZN2js23InternalCallOrConstructEP9JSContextRKN2JS8CallArgsENS_14MaybeConstructE #25 0x00007f701f89611e _ZL9InterpretP9JSContextRN2js8RunStateE (libxul.so) #26 0x00007f701f8a3808 _ZN2js9RunScriptEP9JSContextRNS_8RunStateE (libxul.so) #27 0x00007f701f8a3eb2 _ZN2js23InternalCallOrConstructEP9JSContextRKN2JS8CallArgsENS_14MaybeConstructE #28 0x00007f701f89611e _ZL9InterpretP9JSContextRN2js8RunStateE (libxul.so) #29 0x00007f701f8a3808 _ZN2js9RunScriptEP9JSContextRNS_8RunStateE (libxul.so) #30 0x00007f701f8a3eb2 _ZN2js23InternalCallOrConstructEP9JSContextRKN2JS8CallArgsENS_14MaybeConstructE #31 0x00007f701f8a4188 _ZN2js4CallEP9JSContextN2JS6HandleINS2_5ValueEEES5_RKNS_13AnyInvokeArgsENS2_13M #32 0x00007f701fb8af80 _Z20JS_CallFunctionValueP9JSContextN2JS6HandleIP8JSObjectEENS2_INS1_5ValueEEERK #33 0x00007f701d0e954f _ZN19nsXPCWrappedJSClass10CallMethodEP14nsXPCWrappedJStPK19XPTMethodDescriptorP #34 0x00007f701c976700 PrepareAndDispatch (libxul.so) #35 0x00007f701c975c5d SharedStub (libxul.so) #36 0x00007f701c94ef7c _Z29NS_CreateServicesFromCategoryPKcP11nsISupportsS0_PKDs (libxul.so) #37 0x00007f701f71d90c _ZN16nsXREDirProvider9DoStartupEv (libxul.so) #38 0x00007f701f719cbb _ZN7XREMain11XRE_mainRunEv (libxul.so) #39 0x00007f701f71af76 _ZN7XREMain8XRE_mainEiPPcRKN7mozilla15BootstrapConfigE (libxul.so) #40 0x00007f701f71b2c2 _Z8XRE_mainiPPcRKN7mozilla15BootstrapConfigE (libxul.so) #41 0x0000558fe7e117bc _ZL7do_mainiPPcS0_ (firefox) #42 0x0000558fe7e10e4c main (firefox) #43 0x00007f702b50d5ef __libc_start_main (libc.so.6) #44 0x0000558fe7e1115a _start (firefox) Stack trace of thread 2608: #0 0x00007f702b5d93f9 __poll (libc.so.6) #1 0x00007f70273e2d09 g_main_context_iterate.isra.25 (libglib-2.0.so.0) #2 0x00007f70273e2e1c g_main_context_iteration (libglib-2.0.so.0) #3 0x00007f70273e2e61 glib_worker_main (libglib-2.0.so.0) #4 0x00007f702740a736 g_thread_proxy (libglib-2.0.so.0) #5 0x00007f702c3e45e3 start_thread (libpthread.so.0) #6 0x00007f702b5e3d1f __clone (libc.so.6) Stack trace of thread 2636: #0 0x00007f702b5d93f9 __poll (libc.so.6) #1 0x00007f701ccd859d _ZN20nsNotifyAddrListener3RunEv (libxul.so) #2 0x00007f701c96be0e _ZN8nsThread16ProcessNextEventEbPb (libxul.so) #3 0x00007f701c96a2f8 _Z19NS_ProcessNextEventP9nsIThreadb (libxul.so) #4 0x00007f701cd7453a _ZN7mozilla3ipc28MessagePumpForNonMainThreads3RunEPN4base11MessagePump8Delegate #5 0x00007f701cd4b3b0 _ZN11MessageLoop3RunEv (libxul.so) #6 0x00007f701c96a5db _ZN8nsThread10ThreadFuncEPv (libxul.so) #7 0x00007f701b9040db _pt_root (libnspr4.so) #8 0x00007f702c3e45e3 start_thread (libpthread.so.0) #9 0x00007f702b5e3d1f __clone (libc.so.6) I have untagged this build for now, please fix this before pushing a new one. -- You are receiving this mail because: You are on the CC list for the bug.

5 years, 9 months

1
1
0 / 0

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

fonts-bugs December 2017