fonts-bugs July 2017

fonts-bugs@lists.fedoraproject.org

3 participants
104 discussions

[Bug 1475384] CVE-2017-11568 fontforge: Heap-buffer over-read in PSCharStringToSplines function
by bugzilla＠redhat.com 26 Jul '17

26 Jul '17

https://bugzilla.redhat.com/show_bug.cgi?id=1475384 Andrej Nemec <anemec(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Depends On| |1475398 --- Comment #1 from Andrej Nemec <anemec(a)redhat.com> --- Created fontforge tracking bugs for this issue: Affects: fedora-all [bug 1475398] Referenced Bugs: https://bugzilla.redhat.com/show_bug.cgi?id=1475398 [Bug 1475398] CVE-2017-11568 CVE-2017-11569 CVE-2017-11570 CVE-2017-11571 CVE-2017-11572 CVE-2017-11573 CVE-2017-11574 CVE-2017-11575 CVE-2017-11576 CVE-2017-11577 fontforge: various flaws [fedora-all] -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1475384] CVE-2017-11568 fontforge: Heap-buffer over-read in PSCharStringToSplines function
by bugzilla＠redhat.com 26 Jul '17

26 Jul '17

https://bugzilla.redhat.com/show_bug.cgi?id=1475384 Andrej Nemec <anemec(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |CLOSED Resolution|--- |WONTFIX Last Closed| |2017-07-26 10:43:49 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1436077] New: Some emoji which should render as one character with the “Noto Color Emoji” render as several characters
by bugzilla＠redhat.com 25 Jul '17

25 Jul '17

https://bugzilla.redhat.com/show_bug.cgi?id=1436077 Bug ID: 1436077 Summary: Some emoji which should render as one character with the “Noto Color Emoji” render as several characters Product: Fedora Version: 25 Component: pango Assignee: tagoh(a)redhat.com Reporter: mfabian(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: fonts-bugs(a)lists.fedoraproject.org, i18n-bugs(a)lists.fedoraproject.org, tagoh(a)redhat.com Created attachment 1266551 --> https://bugzilla.redhat.com/attachment.cgi?id=1266551&action=edit test-text.txt Test text attached. Showing the test text like this pango-view --font='Noto Color Emoji 48' ~/test-text.txt on Fedora 25 shows the emoji not as a single character but as two. On Fedora 24 (and openSUSE Leap 42.2 and Ubuntu 16.04) this works. The version of “Noto Color Emoji” used in all these tests is the latest one from https://www.google.com/get/noto/ which has this file size: -rw-r-----. 1 mfabian mfabian 5987004 10月 20 11:46 NotoColorEmoji.ttf The problem is the same when using the “Emoji One” font from: https://github.com/Ranks/emojione/blob/master/assets/fonts/emojione-android… -- You are receiving this mail because: You are on the CC list for the bug.

1 31

[Bug 1258542] Review Request: hack-fonts - A typeface designed for source code
by bugzilla＠redhat.com 25 Jul '17

25 Jul '17

https://bugzilla.redhat.com/show_bug.cgi?id=1258542 --- Comment #34 from Shawn Starr <shawn.starr(a)rogers.com> --- Upstream is changing how fonts are built now, which means we can use Open Source tools to build them. I'm waiting for them to finish some of those bits which are im progress right now. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1258542] Review Request: hack-fonts - A typeface designed for source code
by bugzilla＠redhat.com 25 Jul '17

25 Jul '17

https://bugzilla.redhat.com/show_bug.cgi?id=1258542 --- Comment #33 from Jason Tibbitts <tibbs(a)math.uh.edu> --- So I see this is still pending and I'm not completely sure why. I understand that there's a desire to have these built from source, which requires some additional dependencies. However, fonts are considered by Fedora to be "content" and are explicitly listed as content: https://fedoraproject.org/wiki/Packaging:Guidelines#Code_Vs_Content The font-specific packaging guidelines mention that they should be compiled from source because most of the time they are buildable with free, packaged software and the existence of bytecode hinting engines does get close to the line of what might start looking like something which isn't content. However, it's just a "should", and lack of software needed to build it is a pretty good reason to violate one of those. If anything I'd hope that the hack fonts could be imported now while work is ongoing to package the dependencies. In the future this package could switch over to building from source. If the guidelines on this are confusing then I will be happy to work to get them changed to be less confusing. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1474072] New: fontconfig-devel provides incorrect includedir in /usr/ lib64/pkgconfig/fontconfig.pc
by bugzilla＠redhat.com 23 Jul '17

23 Jul '17

https://bugzilla.redhat.com/show_bug.cgi?id=1474072 Bug ID: 1474072 Summary: fontconfig-devel provides incorrect includedir in /usr/lib64/pkgconfig/fontconfig.pc Product: Fedora Version: 26 Component: fontconfig Assignee: tagoh(a)redhat.com Reporter: theg4sh(a)gmail.com QA Contact: extras-qa(a)fedoraproject.org CC: fonts-bugs(a)lists.fedoraproject.org, i18n-bugs(a)lists.fedoraproject.org, pnemade(a)redhat.com, tagoh(a)redhat.com Created attachment 1303238 --> https://bugzilla.redhat.com/attachment.cgi?id=1303238&action=edit Compilation check Description of problem: See subj. Version-Release number of selected component (if applicable): fontconfig-devel-2.12.1-4.fc26.x86_64 How reproducible: Steps to Reproduce: 1. dnf install fontconfig-devel 2. # Unpack tarball from attachment. 3. cd xfontchk 4. make Actual results: c99 -I/usr/X11R6/include -I/usr/include/freetype2 -I/usr/include/libpng16 -I/usr/include/freetype2 -I/usr/include/libpng16 -DVERSION="0.7" -D_XOPEN_SOURCE=600 -O -c xfontchk.c xfontchk.c:2:10: fatal error: fontconfig.h: No such file or directory #include <fontconfig.h> ^~~~~~~~~~~~~~ compilation terminated. make: *** [Makefile:7: xfontchk.o] Error 1 Expected results: c99 -I/usr/X11R6/include -I/usr/include/fontconfig -I/usr/include/freetype2 -I/usr/include/libpng16 -I/usr/include/freetype2 -I/usr/include/libpng16 -DVERSION="0.7" -D_XOPEN_SOURCE=600 -O -c xfontchk.c c99 -L/usr/X11R6/lib -lm -lrt -lX11 -lutil -lXft -lfontconfig -lfreetype -lfreetype -o xfontchk xfontchk.o Additional info: Due to fontconfig-devel provides only /usr/include/fontconfig folder, the solution is: $ diff /usr/lib64/pkgconfig/fontconfig.pc{.orig,} 4c4 < includedir=/usr/include --- > includedir=/usr/include/fontconfig which give expected result. -- You are receiving this mail because: You are on the CC list for the bug.

1 2

Orphaned Packages in rawhide (2017-07-23)
by till＠fedoraproject.org 22 Jul '17

22 Jul '17

1 0

Orphaned Packages in rawhide (2017-07-16)
by till＠fedoraproject.org 15 Jul '17

15 Jul '17

The following packages are orphaned and will be retired when they are orphaned for six weeks, unless someone adopts them. If you know for sure that the package should be retired, please do so now with a proper reason: https://fedoraproject.org/wiki/How_to_remove_a_package_at_end_of_life Note: If you received this mail directly you (co)maintain one of the affected packages or a package that depends on one. Please adopt the affected package or retire your depending package to avoid broken dependencies, otherwise your package will be retired when the affected package gets retired. Package (co)maintainers Status Change =========================================================================== clamav orphan, gbcox, gnat, nb, 0 weeks ago ondrejj, orion, pwouters, robert, steve, tibbs lyra orphan 5 weeks ago modem-manager-gui orphan, mariobl 1 weeks ago proguard orphan, fkooman 2 weeks ago python-numeric orphan, alexl, alexlan, 4 weeks ago caillon, caolanm, johnp, mbarnes, rhughes, rstrode, ssp, xiphmont rubygem-configuration orphan 6 weeks ago rubygem-ruby-ole orphan 6 weeks ago scholarsfonts-cardo-fonts orphan, fonts-sig, i18n-team 5 weeks ago The following packages require above mentioned packages: Depending on: clamav (9), status change: 2017-07-13 (0 weeks ago) clamav-unofficial-sigs (maintained by: topdog) clamav-unofficial-sigs-3.7.2-3.fc26.noarch requires clamav = 0.99.2-1.fc25, clamav-update = 0.99.2-1.fc25 clamsmtp (maintained by: gnat) clamsmtp-1.10-19.fc26.i686 requires clamav-server = 0.99.2-1.fc25 clamsmtp-1.10-19.fc26.src requires clamav-devel = 0.99.2-1.fc25 clamtk (maintained by: limb, davem) clamtk-5.24-5.fc27.noarch requires clamav = 0.99.2-1.fc25, clamav-update = 0.99.2-1.fc25, data(clamav) = empty, data(clamav) = full exim (maintained by: dwmw2, fschwarz, jskarvad) exim-4.89-2.fc27.src requires clamav-devel = 0.99.2-1.fc25 exim-clamav-4.89-2.fc27.i686 requires clamav-server = 0.99.2-1.fc25 klamav (maintained by: kkofler) klamav-0.46-20.fc26.i686 requires clamav = 0.99.2-1.fc25, clamav-update = 0.99.2-1.fc25, libclamav.so.7, libclamav.so.7(CLAMAV_PRIVATE), libclamav.so.7(CLAMAV_PUBLIC) klamav-0.46-20.fc26.src requires clamav-devel = 0.99.2-1.fc25 rpmgrill (maintained by: santiago, halfie, romanofski) rpmgrill-0.30-3.fc27.noarch requires clamav = 0.99.2-1.fc25, clamav-data = 0.99.2-1.fc25 sagator (maintained by: ondrejj) sagator-1.3.1-3.fc26.noarch requires clamav-lib = 0.99.2-1.fc25, clamav-update = 0.99.2-1.fc25 sagator-1.3.1-3.fc26.src requires clamav-devel = 0.99.2-1.fc25 sagator-core-1.3.1-3.fc26.noarch requires clamav-lib = 0.99.2-1.fc25 thunar-sendto-clamtk (maintained by: davem) thunar-sendto-clamtk-0.05-5.fc26.noarch requires clamtk = 5.24-5.fc27 fusionforge (maintained by: beuc, nerville) fusionforge-mta-exim4-6.0.3-4.fc27.noarch requires exim = 4.89-2.fc27 Depending on: proguard (23), status change: 2017-06-26 (2 weeks ago) sbt (maintained by: willb, java-sig, mizdebsk, skottler) sbt-0.13.1-8.fc24.1.noarch requires proguard = 5.3.3-1.fc27 sbt-0.13.1-8.fc24.1.src requires proguard = 5.3.3-1.fc27 json4s (maintained by: willb, java-sig) json4s-3.2.7-4.fc24.src requires sbt = 0.13.1-8.fc24.1 mchange-commons (maintained by: mbooth) mchange-commons-0.2.11-1.fc26.src requires sbt = 0.13.1-8.fc24.1 scala-stm (maintained by: willb) scala-stm-0.7-7.fc26.src requires sbt = 0.13.1-8.fc24.1 scalaz (maintained by: willb, java-sig) scalaz-7.0.0-6.fc24.src requires sbt = 0.13.1-8.fc24.1 typesafe-config (maintained by: willb, gil) typesafe-config-1.2.0-8.fc26.src requires sbt = 0.13.1-8.fc24.1 zinc (maintained by: mizdebsk) zinc-0.3.1-3.fc26.noarch requires mvn(org.scala-sbt:incremental-compiler) = 0.13.1 zinc-0.3.1-3.fc26.src requires mvn(org.scala-sbt:incremental-compiler) = 0.13.1 c3p0 (maintained by: mbooth, java-sig) c3p0-0.9.5-0.4.pre8.fc26.noarch requires mchange-commons = 0.2.11-1.fc26, mvn(com.mchange:mchange-commons-java) = 0.2.11 c3p0-0.9.5-0.4.pre8.fc26.src requires mchange-commons = 0.2.11-1.fc26 gradle (maintained by: mizdebsk, java-sig, msimacek) gradle-2.13-8.fc27.src requires mvn(com.typesafe.zinc:zinc) = 0.3.1 datanucleus-rdbms (maintained by: pmackinn, moceap) datanucleus-rdbms-3.2.13-5.fc26.src requires mvn(com.mchange:c3p0) = 0.9.5 hibernate (maintained by: gil, java-sig) hibernate-5.0.10-2.fc26.src requires mvn(com.mchange:c3p0) = 0.9.5 hibernate-c3p0-5.0.10-2.fc26.noarch requires mvn(com.mchange:c3p0) = 0.9.5 hibernate3 (maintained by: gil) hibernate3-3.6.10-21.fc26.src requires c3p0 = 0.9.5-0.4.pre8.fc26 hibernate3-c3p0-3.6.10-21.fc26.noarch requires mvn(com.mchange:c3p0) = 0.9.5 hibernate4 (maintained by: gil, java-sig) hibernate4-4.3.11-4.fc26.src requires mvn(com.mchange:c3p0) = 0.9.5 hibernate4-c3p0-4.3.11-4.fc26.noarch requires mvn(com.mchange:c3p0) = 0.9.5 infinispan (maintained by: ricardo, gil, goldmann) infinispan-8.2.4-2.fc26.src requires mvn(com.mchange:c3p0) = 0.9.5 mysql-connector-java (maintained by: gil, hhorak, java-sig, jmbox, mjakubicek) mysql-connector-java-5.1.38-4.fc26.src requires c3p0 = 0.9.5-0.4.pre8.fc26 quartz (maintained by: gil, java-sig) quartz-2.2.1-6.fc26.noarch requires mvn(com.mchange:c3p0) = 0.9.5 quartz-2.2.1-6.fc26.src requires mvn(com.mchange:c3p0) = 0.9.5 springframework (maintained by: gil, java-sig) springframework-3.2.18-2.fc26.src requires mvn(c3p0:c3p0) = 0.9.5 javapackages-tools (maintained by: mizdebsk, ctubbsii, java-sig, mbooth, msimacek, msrb) gradle-local-5.0.0-4.fc27.noarch requires gradle = 2.13-8.fc27 shrinkwrap-resolver (maintained by: gil, java-sig) shrinkwrap-resolver-2.2.2-3.fc26.src requires mvn(org.gradle:gradle-tooling-api) = 2.13 shrinkwrap-resolver-impl-gradle-embedded-archive-2.2.2-3.fc26.noarch requires mvn(org.gradle:gradle-tooling-api) = 2.13 xmvn (maintained by: mizdebsk, java-sig, mbooth, msimacek, msrb) xmvn-3.0.0-5.fc27.src requires gradle = 2.13-8.fc27 google-http-java-client (maintained by: gil, java-sig) google-http-java-client-1.22.0-2.fc26.src requires mvn(org.datanucleus:datanucleus-rdbms) = 3.2.13 google-oauth-java-client (maintained by: gil, java-sig) google-oauth-java-client-1.22.0-2.fc26.src requires mvn(org.datanucleus:datanucleus-rdbms) = 3.2.13 hive (maintained by: pmackinn, coolsvap, java-sig, moceap) hive-0.12.0-5.fc22.noarch requires datanucleus-rdbms = 3.2.13-5.fc26, mvn(org.datanucleus:datanucleus-rdbms) = 3.2.13 hive-0.12.0-5.fc22.src requires datanucleus-rdbms = 3.2.13-5.fc26 Too many dependencies for proguard, not all listed here Affected (co)maintainers alexl: python-numeric alexlan: python-numeric beuc: clamav caillon: python-numeric caolanm: python-numeric coolsvap: proguard ctubbsii: proguard davem: clamav dwmw2: clamav fkooman: proguard fonts-sig: scholarsfonts-cardo-fonts fschwarz: clamav gbcox: clamav gil: proguard gnat: clamav goldmann: proguard halfie: clamav hhorak: proguard i18n-team: scholarsfonts-cardo-fonts java-sig: proguard jmbox: proguard johnp: python-numeric jskarvad: clamav kkofler: clamav limb: clamav mariobl: modem-manager-gui mbarnes: python-numeric mbooth: proguard mizdebsk: proguard mjakubicek: proguard moceap: proguard msimacek: proguard msrb: proguard nb: clamav nerville: clamav ondrejj: clamav orion: clamav pmackinn: proguard pwouters: clamav rhughes: python-numeric ricardo: proguard robert: clamav romanofski: clamav rstrode: python-numeric santiago: clamav skottler: proguard ssp: python-numeric steve: clamav tibbs: clamav topdog: clamav willb: proguard xiphmont: python-numeric Orphans (8): clamav lyra modem-manager-gui proguard python-numeric rubygem-configuration rubygem-ruby-ole scholarsfonts-cardo-fonts Orphans (dependend on) (2): clamav proguard Orphans (rawhide) for at least 6 weeks (dependend on) (0): Orphans (rawhide)(not depended on) (6): lyra modem-manager-gui python-numeric rubygem-configuration rubygem-ruby-ole scholarsfonts-cardo-fonts Orphans (rawhide) for at least 6 weeks (not dependend on) (2): rubygem-configuration rubygem-ruby-ole Depending packages (rawhide) (32): c3p0 clamav-unofficial-sigs clamsmtp clamtk datanucleus-rdbms exim fusionforge google-http-java-client google-oauth-java-client gradle hibernate hibernate3 hibernate4 hive infinispan javapackages-tools json4s klamav mchange-commons mysql-connector-java quartz rpmgrill sagator sbt scala-stm scalaz shrinkwrap-resolver springframework thunar-sendto-clamtk typesafe-config xmvn zinc Packages depending on packages orphaned (rawhide) for more than 6 weeks (0): -- The script creating this output is run and developed by Fedora Release Engineering. Please report issues at its pagure instance: https://pagure.io/releng/ The sources of this script can be found at: https://pagure.io/releng/blob/master/f/scripts/find_unblocked_orphans.py

1 0

[Bug 1376476] urw-fonts: new release(20160926) available
by bugzilla＠redhat.com 13 Jul '17

13 Jul '17

https://bugzilla.redhat.com/show_bug.cgi?id=1376476 David Kaspar [Dee'Kej] <dkaspar(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Blocks| |1470700 Referenced Bugs: https://bugzilla.redhat.com/show_bug.cgi?id=1470700 [Bug 1470700] ps2pdf crashes on s309x only: Error: /invalidfont in /findfont -- You are receiving this mail because: You are on the CC list for the bug.

1 0

Our UPS courier can not contact you (parcel #005625994)
by tailland＠fedoraproject.org 12 Jul '17

12 Jul '17

Dear Customer, Your parcel was successfully delivered July 10 to UPS Station, but our courier cound not contact you. Review the document that is attached to this e-mail! With anticipation, , UPS Office Clerk.

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

fonts-bugs July 2017