[Bug 1526143] New: CVE-2017-17521 fontforge:
Command injetion in help function uiutil.c [fedora-all]
by bugzilla＠redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1526143
Bug ID: 1526143
Summary: CVE-2017-17521 fontforge: Command injetion in help
function uiutil.c [fedora-all]
Product: Fedora
Version: 27
Component: fontforge
Keywords: Security, SecurityTracking
Severity: medium
Priority: medium
Assignee: kevin(a)scrye.com
Reporter: psampaio(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: fonts-bugs(a)lists.fedoraproject.org, kevin(a)scrye.com,
paul(a)frixxon.co.uk, pnemade(a)redhat.com
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of fedora-all.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: this issue affects multiple supported versions of Fedora. While only
one tracking bug has been filed, please correct all affected versions at
the same time. If you need to fix the versions independent of each other,
you may clone this bug as appropriate.
--
You are receiving this mail because:
You are on the CC list for the bug.
5 years, 5 months
[Bug 1532027] New: ecolier-court-fonts subpackages are swapped
by bugzilla＠redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1532027
Bug ID: 1532027
Summary: ecolier-court-fonts subpackages are swapped
Product: Fedora
Version: 27
Component: ecolier-court-fonts
Severity: medium
Priority: medium
Assignee: nicolas.mailhot(a)laposte.net
Reporter: kevin(a)tigcc.ticalc.org
QA Contact: extras-qa(a)fedoraproject.org
CC: fonts-bugs(a)lists.fedoraproject.org,
nicolas.mailhot(a)laposte.net, paul(a)frixxon.co.uk
Description of problem:
ecolier-court-fonts actually contains Écolier lignes court.
ecolier-court-lignes-fonts actually contains Écolier court.
Version-Release number of selected component (if applicable):
ecolier-court-fonts-20070702-23.fc27.noarch
How reproducible:
Always
Steps to Reproduce:
1. Install ecolier-court-fonts.
Actual results:
You get the lignes variant.
Expected results:
You get the variant without the lines.
Additional info:
And vice-versa, if you actually want the lines variant, e.g., to teach or learn
French handwriting.
--
You are receiving this mail because:
You are on the CC list for the bug.
5 years, 5 months
[Bug 1498269] New:
Noto Color Emoji and Noto Emoji fixed fonts cause a X error in a tcl/
tk script
by bugzilla＠redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1498269
Bug ID: 1498269
Summary: Noto Color Emoji and Noto Emoji fixed fonts cause a X
error in a tcl/tk script
Product: Fedora
Version: 26
Component: google-noto-fonts
Severity: high
Assignee: psatpute(a)redhat.com
Reporter: jlc(a)cfl.rr.com
QA Contact: extras-qa(a)fedoraproject.org
CC: fonts-bugs(a)lists.fedoraproject.org,
i18n-bugs(a)lists.fedoraproject.org,
psatpute(a)redhat.com, pwu(a)redhat.com
Created attachment 1333924
--> https://bugzilla.redhat.com/attachment.cgi?id=1333924&action=edit
test script do demonistrate emoji fix font causing an X error
Description of problem:
The NCID (Network Caller ID) client is written in tcl/tk. When the
google-noto-emoji-fonts became part of the standard install for Fedora, the
ncid client would cause an X error and crash every time it scanned for fixed
fonts. The attached script was written to determine and verify the problem.
Version-Release number of selected component (if applicable):
google-noto-emoji-fonts-20170827-1.fc26.noarch
How reproducible:
Reproducible every time test script run on Fedora 26 and also Fedora 25.
Steps to Reproduce:
1. run attached test script
2.
3.
Actual results:
X Error of failed request: BadLength (poly request too large or internal Xlib
length error)
Major opcode of failed request: 138 (RENDER)
Minor opcode of failed request: 20 (RenderAddGlyphs)
Serial number of failed request: 476
Current serial number in output stream: 539
Expected results:
Expected script not to cause an X error and crash.
Additional info:
Uncomment the two Noto Emoji font lines in testfonts.tk to not get the X error.
The bug is also reported at https://core.tcl.tk/tk/tktview/3767882e066523dc9ae4
but it is considered a font problem not a tk problem.
--
You are receiving this mail because:
You are on the CC list for the bug.
5 years, 5 months
[Bug 1445925] [abrt] gimp: pango_ot_info_list_scripts():
gimp-2.8 killed by SIGSEGV
by bugzilla＠redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1445925
--- Comment #26 from Ben Cotton <bcotton(a)redhat.com> ---
This message is a reminder that Fedora 27 is nearing its end of life.
On 2018-Nov-30 Fedora will stop maintaining and issuing updates for
Fedora 27. It is Fedora's policy to close all bug reports from releases
that are no longer maintained. At that time this bug will be closed as
EOL if it remains open with a Fedora 'version' of '27'.
Package Maintainer: If you wish for this bug to remain open because you
plan to fix it in a currently maintained version, simply change the 'version'
to a later Fedora version.
Thank you for reporting this issue and we are sorry that we were not
able to fix it before Fedora 27 is end of life. If you would still like
to see this bug fixed and are able to reproduce it against a later version
of Fedora, you are encouraged change the 'version' to a later Fedora
version prior this bug is closed as described in the policy above.
Although we aim to fix as many bugs as possible during every release's
lifetime, sometimes those efforts are overtaken by events. Often a
more recent Fedora release includes newer upstream software that fixes
bugs or makes them obsolete.
--
You are receiving this mail because:
You are on the CC list for the bug.
5 years, 5 months
[Bug 1545149] New: OTF/CFF conts no longer hinted horizontally
by bugzilla＠redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1545149
Bug ID: 1545149
Summary: OTF/CFF conts no longer hinted horizontally
Product: Fedora
Version: 27
Component: freetype
Assignee: mkasik(a)redhat.com
Reporter: ossman(a)cendio.se
QA Contact: extras-qa(a)fedoraproject.org
CC: ajax(a)redhat.com, alexl(a)redhat.com,
fonts-bugs(a)lists.fedoraproject.org,
john.j5live(a)gmail.com, kevin(a)tigcc.ticalc.org,
mbarnes(a)fastmail.com, mclasen(a)redhat.com,
mkasik(a)redhat.com, rhughes(a)redhat.com,
rstrode(a)redhat.com, sandmann(a)redhat.com
I upgraded from Fedora 26 to Fedora 27 and all of a sudden OTF/CFF fonts such
as Cantarell are no longer hinted horizontally, making them appear blurry and
out of focus.
A similar change was done for TTF fonts previously, but that could be reverted
by setting "FREETYPE_PROPERTIES=truetype:interpreter-version=35".
Is there a similar setting hidden for this latest change? The normal font
hinting settings have no effect on this.
--
You are receiving this mail because:
You are on the CC list for the bug.
5 years, 5 months
[Bug 1427550] New: Adding additional Glyphs in Tamil
by bugzilla＠redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1427550
Bug ID: 1427550
Summary: Adding additional Glyphs in Tamil
Product: Fedora
Version: rawhide
Component: lohit-tamil-fonts
Severity: medium
Assignee: psatpute(a)redhat.com
Reporter: nsesha92(a)yahoo.co.in
QA Contact: extras-qa(a)fedoraproject.org
CC: fonts-bugs(a)lists.fedoraproject.org,
i18n-bugs(a)lists.fedoraproject.org, psatpute(a)redhat.com
Created attachment 1258398
--> https://bugzilla.redhat.com/attachment.cgi?id=1258398&action=edit
Svarita Deerga Svarita Anudatta eg
Description of problem:
This is not a bug, but enhancement request.
Tamil language script is also used for writing other language text such as
Sanskrit, Hindi, Malayalam, Telugu and Kannada in the form of transliteration.
However Tamil script and the associated Unicode range U0B80-U0BFF does not
contain many characters that are available in these other languages - mainly
the Devanagari Extended unicode UA8E0 and Devanagari Vedic
Extentions unicode U1CD0 series.
Some such requests that I have come across in my FB and other groups:
1. How can I include the signs like lines above the letters as shown in the
picture. This is required to show the swaram i.e. high or low pitch of
pronouncing the letter/word as in Sanskrit. This kind of lines are used in
Sanskrit also.
2. I need to type musical notations in Tamil Using MSword processor. To
indicate octave we put a dot on top or bottom of the letter. how to add ?
--- My answer for above point 2: dot above = anuswara, dot below = nukta, Lohit
Tamil does not contain nukta, but includes anuswara (U+0B82). ---
While its lot easier to juggle around in Linux based systems by switching
between different fonts, its very difficult in MS based applications.
Hence, I am requesting that 9 such frequently used Glyphs be 'added' to the
existing Lohit Tamil font. The existing Glyphs from Lohit-Devanagari.ttf can be
'leveraged' for this, no need to reinvent the wheel.
Replace:
U+0310 COMBINING CANDRABINDU >>> replace with VEDIC TONE CANDRABINDU /
anunasika U+0901, thats in Devanagari range, to be consistent with all other
scrips.
Add:
Signs:
Visarga U+0903 ( as separate and distinct, in addition to Tamil Visarga U+0B83
)
AVAGRAHA U+093D
CANDRABINDU VIRAMA U+A8F3
Combining signs/marks with Anchoring:
NUKTA U+093C
VEDIC TONE UDATTA / SVARITA U+0951
VEDIC TONE ANUDATTA U+0952
VEDIC TONE PRENKHA U+1CD2
VEDIC TONE DOUBLE/Deerga SVARITA U+1CDA
VEDIC TONE CANDRA U+1CF4
Version-Release number of selected component (if applicable):
How reproducible:
Not a bug, but enhancement request.
Steps to Reproduce:
1.
2.
3.
Actual results:
Expected results:
Additional info:
--
You are receiving this mail because:
You are on the CC list for the bug.
5 years, 5 months
[Bug 1533798] New: Support Bitcoin sign
by bugzilla＠redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1533798
Bug ID: 1533798
Summary: Support Bitcoin sign
Product: Fedora
Version: rawhide
Component: liberation-fonts
Assignee: psatpute(a)redhat.com
Reporter: shanshandehongxing(a)outlook.com
QA Contact: extras-qa(a)fedoraproject.org
CC: alexl(a)redhat.com, fonts-bugs(a)lists.fedoraproject.org,
i18n-bugs(a)lists.fedoraproject.org,
john.j5live(a)gmail.com, mbarnes(a)fastmail.com,
mclasen(a)redhat.com, petersen(a)redhat.com,
psatpute(a)redhat.com, rhughes(a)redhat.com,
rstrode(a)redhat.com, sandmann(a)redhat.com
Description of problem:
Unicode added Bitcoin sign (₿) in June 2017, and Microsoft gave update package
to make Windows 10 support this sign, thus this sign become available in Arial,
Calibri, Cambria, Consolas, Courier New, Microsoft Sans Serif, Segoe UI, Tahoma
and Times New Roman. So I hope this sign become available in Liberation fonts
as well.
Additional info:
--
You are receiving this mail because:
You are on the CC list for the bug.
5 years, 5 months
[Bug 1649184] New:
Meera font substituted for Malayalam serif instead of Rachana
by bugzilla＠redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1649184
Bug ID: 1649184
Summary: Meera font substituted for Malayalam serif instead of
Rachana
Product: Fedora
Version: 29
Component: fontconfig
Assignee: tagoh(a)redhat.com
Reporter: rajeeshknambiar(a)gmail.com
QA Contact: extras-qa(a)fedoraproject.org
CC: ajax(a)redhat.com, fonts-bugs(a)lists.fedoraproject.org,
i18n-bugs(a)lists.fedoraproject.org,
john.j5live(a)gmail.com, mclasen(a)redhat.com,
pnemade(a)redhat.com, rhughes(a)redhat.com,
rstrode(a)redhat.com, sandmann(a)redhat.com,
tagoh(a)redhat.com
Description of problem:
From Akira's font status page [1] it is observed that for language Malayalam,
serif-font is defaulted to Meera, while more appropriate font is Rachana (both
from smc-fonts package). Based on the discussion [2], it is agreed to
substitute Rachana as the preferred serif font in fontconfig file
65-nonlatin.conf
[1] https://tagoh.fedorapeople.org/fonts/status/
[2]
https://lists.fedoraproject.org/archives/list/fonts@lists.fedoraproject.o...
Version-Release number of selected component (if applicable):
How reproducible:
Steps to Reproduce:
1.
2.
3.
Actual results:
Meera is default serif font for Malayalam language.
Expected results:
Rachana should be default serif font for Malayalam language.
Additional info:
Change 'Meera' to 'Rachana' under 'serif' family in 65-nonlatin.conf
--
You are receiving this mail because:
You are on the CC list for the bug.
5 years, 5 months
[Bug 1607997] New: Newer versions available
by bugzilla＠redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1607997
Bug ID: 1607997
Summary: Newer versions available
Product: Fedora
Version: rawhide
Component: google-croscore-fonts
Assignee: pnemade(a)redhat.com
Reporter: rastus.vernon(a)protonmail.ch
QA Contact: extras-qa(a)fedoraproject.org
CC: fonts-bugs(a)lists.fedoraproject.org,
i18n-bugs(a)lists.fedoraproject.org, pnemade(a)redhat.com
Fedora has Arimo 1.23, Cousine 1.20 and Tinos 1.23. Arimo 1.32, Cousine 1.22
and Tinos 1.32 are available from
https://github.com/googlei18n/noto-fonts/tree/master/hinted. Arimo has 708 new
glyphs and Tinos has 706.
It would be nice to have the newer versions in Fedora.
--
You are receiving this mail because:
You are on the CC list for the bug.
5 years, 5 months
[Bug 1648825] New: Split and update smc-fonts to match upstream
release
by bugzilla＠redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1648825
Bug ID: 1648825
Summary: Split and update smc-fonts to match upstream release
Product: Fedora
Version: rawhide
Component: smc-fonts
Severity: medium
Assignee: petersen(a)redhat.com
Reporter: rajeeshknambiar(a)gmail.com
QA Contact: extras-qa(a)fedoraproject.org
CC: fonts-bugs(a)lists.fedoraproject.org,
i18n-bugs(a)lists.fedoraproject.org, nav007(a)gmail.com,
petersen(a)redhat.com, psatpute(a)redhat.com,
rajeeshknambiar(a)gmail.com
Description of problem:
We haven't updated smc-fonts in 4 years in Fedora. A lot of updates and fixes
were made and a new font was added by upstream in the meantime. With that, a
lot of discussions on how to manage the releases of fonts also took place,
because by then each font was being updated differently and was getting a
different version number.
Upstream moved to Gitlab instead of Savannah and each font with its own version
number is hosted in individual repository now, see
https://gitlab.com/smc/fonts. Fedora can no longer depend on the existing
packaging mechanism of single tarball and single makefile, as some fonts use
different build tools (e.g. Manjari uses UFO+Fontmake) as well.
I've discussed with pravins and he suggests to split the fonts and open a bug
for that.
Version-Release number of selected component (if applicable):
6.1
How reproducible:
Steps to Reproduce:
1.
2.
3.
Actual results:
Expected results:
Additional info:
--
You are receiving this mail because:
You are on the CC list for the bug.
5 years, 5 months