fonts-bugs February 2021

fonts-bugs@lists.fedoraproject.org

1 participants
62 discussions

[Bug 1890210] New: CVE-2020-15999 freetype: heap-based buffer overflow via malformed ttf files
by bugzilla＠redhat.com 30 Jan '22

30 Jan '22

https://bugzilla.redhat.com/show_bug.cgi?id=1890210 Bug ID: 1890210 Summary: CVE-2020-15999 freetype: heap-based buffer overflow via malformed ttf files Product: Security Response Hardware: All OS: Linux Status: NEW Component: vulnerability Keywords: Security Severity: medium Priority: medium Assignee: security-response-team(a)redhat.com Reporter: gsuckevi(a)redhat.com CC: ajax(a)redhat.com, caillon+fedoraproject(a)gmail.com, erack(a)redhat.com, fonts-bugs(a)lists.fedoraproject.org, gecko-bugs-nobody(a)redhat.com, gghezzo(a)redhat.com, gnome-sig(a)lists.fedoraproject.org, gparvin(a)redhat.com, jhorak(a)redhat.com, john.j5live(a)gmail.com, jramanat(a)redhat.com, jweiser(a)redhat.com, kevin(a)tigcc.ticalc.org, mclasen(a)redhat.com, mkasik(a)redhat.com, rhughes(a)redhat.com, rstrode(a)redhat.com, sandmann(a)redhat.com, scorneli(a)redhat.com, stcannon(a)redhat.com, stransky(a)redhat.com, thee(a)redhat.com, tpopela(a)redhat.com Target Milestone: --- Classification: Other A flaw was found in freetype in the way it processes PNG images embedded into fonts. A crafted TTF file can lead to heap-based buffer overflow due to integer truncation in Load_SBit_Png function. Reference: https://savannah.nongnu.org/bugs/?59308 Upstream patch: https://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=a3bab16… -- You are receiving this mail because: You are on the CC list for the bug.

1 66

[Bug 1820166] New: Droid sans overrides my default CJK font
by bugzilla＠redhat.com 28 Jan '22

28 Jan '22

https://bugzilla.redhat.com/show_bug.cgi?id=1820166 Bug ID: 1820166 Summary: Droid sans overrides my default CJK font Product: Fedora Version: 32 Status: NEW Component: google-droid-fonts Severity: low Assignee: nicolas.mailhot(a)laposte.net Reporter: taocrismon(a)hotmail.com QA Contact: extras-qa(a)fedoraproject.org CC: fonts-bugs(a)lists.fedoraproject.org, nicolas.mailhot(a)laposte.net, oliver(a)redhat.com, paul(a)frixxon.co.uk, tremble(a)tremble.org.uk Target Milestone: --- Classification: Fedora Description of problem: I have this (per-user) fontconfig configuration to set my preferred sans-serif font: <alias> <family>sans-serif</family> <prefer> <family>Noto Sans</family> <family>Noto Sans CJK SC</family> </prefer> </alias> It should fall back to "Noto Sans CJK SC" when displaying CJK characters. Since F32 this isn't working anymore. CJK characters are rendered in a different font, which I cannot recognize. Digging through fc_debug logs, "Droid Sans" is appended right after "Noto Sans", before "Noto Sans CJK SC" in the font matching list. Debug messages confirm it's indeed Droid Sans getting picked. Removing the relevant part in /etc/fonts/conf.d/65-google-droid-sans-fonts.conf mitigates this issue. However since both Noto Sans & Droid Sans do not contain CJK characters, they should both be skipped in favor of CJK fonts. Could this be a metadata problem? i.e. Droid Sans wrongly advertises as CJK capable. Version-Release number of selected component (if applicable): google-droid-sans-fonts-20200215-3.fc32.noarch -- You are receiving this mail because: You are on the CC list for the bug.

1 25

[Bug 1931547] New: Cantarell Regular rendering issues in Gnome Shell
by bugzilla＠redhat.com 30 Nov '21

30 Nov '21

https://bugzilla.redhat.com/show_bug.cgi?id=1931547 Bug ID: 1931547 Summary: Cantarell Regular rendering issues in Gnome Shell Product: Fedora Version: 33 Hardware: x86_64 OS: Linux Status: NEW Component: abattis-cantarell-fonts Severity: low Assignee: klember(a)redhat.com Reporter: gregswift(a)gmail.com QA Contact: extras-qa(a)fedoraproject.org CC: cosimo.cecchi(a)gmail.com, fonts-bugs(a)lists.fedoraproject.org, ian(a)ianweller.org, klember(a)redhat.com, me(a)fale.io, tagoh(a)redhat.com Target Milestone: --- Classification: Fedora Created attachment 1758636 --> https://bugzilla.redhat.com/attachment.cgi?id=1758636&action=edit broken font lock screen clock Description of problem: I've got about 7 machines running fedora 33, to the same patch level. 4 of them were showing poorly rendered fonts/wrong characters in various parts of the gnome-shell ui. Primarily: lock screen time, unlock password entry field, and the top bar calendar view. See attached screenshots. For one of the machines it stopped doing it after a week or 2. The other machines kept doing it until I changed the `Interface Text` font using TweakTool, the default is Cantarell Regular, and any other font seems to be fine, including other Cantarell fonts. Version-Release number of selected component (if applicable): The problem started after update on 2/1 which included abattis-cantarell-fonts-0.301-1.fc33.noarch /var/log/dnf.rpm.log:2021-02-01T13:07:46-0600 SUBDEBUG Upgrade: abattis-cantarell-fonts-0.301-1.fc33.noarch /var/log/dnf.rpm.log:2021-02-01T13:10:00-0600 SUBDEBUG Upgraded: abattis-cantarell-fonts-0.201-4.fc33.noarch How reproducible: On the 3 remaining machines with the issue if I set the font back to Cantarell Regular the problem returns. But I haven't been able to make it happen on other machines that arent experiencing the issue. Steps to Reproduce: 1. Run Fedora 33 with Gnome, using defaults Actual results: You will either experience the problem or you won't. Expected results: Fonts to be rendered properly. Additional info: -- You are receiving this mail because: You are on the CC list for the bug.

1 8

[Bug 1753020] New: Powerline symbols no longer align
by bugzilla＠redhat.com 30 Nov '21

30 Nov '21

https://bugzilla.redhat.com/show_bug.cgi?id=1753020 Bug ID: 1753020 Summary: Powerline symbols no longer align Product: Fedora Version: 30 Status: NEW Component: terminus-font Assignee: extras-orphan(a)fedoraproject.org Reporter: andrew(a)linuxjedi.co.uk QA Contact: extras-qa(a)fedoraproject.org CC: extras-orphan(a)fedoraproject.org, fonts-bugs(a)lists.fedoraproject.org, rhbugs(a)n-dimensional.de Target Milestone: --- Classification: Fedora Created attachment 1615993 --> https://bugzilla.redhat.com/attachment.cgi?id=1615993&action=edit Screenshot of zsh+om-my-zsh using powerline-fonts and terminus-fonts 4.48 Description of problem: With version 4.48 of the Terminus font the powerline symbols no longer align for sizes less than 14pt Version-Release number of selected component (if applicable): terminus-fonts-4.48-1.fc30.noarch How reproducible: 100% Steps to Reproduce: 1. Install terminus-fonts and powerline-fonts. 2. Use something with powerline (zsh, vim, etc...) 3. Update to the latest terminus-fonts version 4. Use powerline things again Actual results: Bad symbol alignment Expected results: Good symbol alignment Additional info: -- You are receiving this mail because: You are on the CC list for the bug.

1 17

[Bug 1922792] New: font file update breaks arduino distribution
by bugzilla＠redhat.com 30 Nov '21

30 Nov '21

https://bugzilla.redhat.com/show_bug.cgi?id=1922792 Bug ID: 1922792 Summary: font file update breaks arduino distribution Product: Fedora Version: 33 Hardware: x86_64 OS: Linux Status: NEW Component: abattis-cantarell-fonts Severity: medium Assignee: klember(a)redhat.com Reporter: markster(a)avilution.com QA Contact: extras-qa(a)fedoraproject.org CC: cosimo.cecchi(a)gmail.com, fonts-bugs(a)lists.fedoraproject.org, ian(a)ianweller.org, klember(a)redhat.com, me(a)fale.io, tagoh(a)redhat.com Target Milestone: --- Classification: Fedora Description of problem: Version 0.301-1.fc33 of abattis-cantarell-fonts breaks the operation of the arduino official distribution (not the fedora packaged version). Unfortunately the official version is required for teensyduino to be installed. The package works fine on version 0.201 Version-Release number of selected component (if applicable): abattis-cantarell-fonts noarch 0.301-1.fc33 How reproducible: 100% Steps to Reproduce: 1. Download arduino-1.8.13-linux64.tar.xz from arduino.cc with 0.201 installed 2. Verify operation 3. update to abattis-cantarell-fonts 0.301 4. Verify menus in arduino lack any text Actual results: Menus lack any text making them unusuable Expected results: Menus would retain text as normal Additional info: -- You are receiving this mail because: You are on the CC list for the bug.

1 7

[Bug 1924576] New: Default font subpixel rendering does not work well as other Linux
by bugzilla＠redhat.com 30 Nov '21

30 Nov '21

https://bugzilla.redhat.com/show_bug.cgi?id=1924576 Bug ID: 1924576 Summary: Default font subpixel rendering does not work well as other Linux Product: Fedora Version: 33 Hardware: All OS: All Status: NEW Component: freetype Severity: medium Assignee: mkasik(a)redhat.com Reporter: zhaohongxinxin(a)163.com QA Contact: extras-qa(a)fedoraproject.org CC: ajax(a)redhat.com, caillon+fedoraproject(a)gmail.com, fonts-bugs(a)lists.fedoraproject.org, gnome-sig(a)lists.fedoraproject.org, kevin(a)tigcc.ticalc.org, mclasen(a)redhat.com, mkasik(a)redhat.com, rhughes(a)redhat.com, rstrode(a)redhat.com, sandmann(a)redhat.com Target Milestone: --- Classification: Fedora Description of problem: Version-Release number of selected component (if applicable): Problem: when enable subpixel in gnome-tweaks, the default rendering config will not work well as other Linux. Temporary Resolve: copy those files to this directory /etc/fonts/conf.d/ */usr/share/fontconfig/conf.avail/10-sub-pixel-rgb.conf */usr/share/fontconfig/conf.avail/11-lcdfilter-default.conf I hope packcage maintainer could change those files intend put them on right place. -- You are receiving this mail because: You are on the CC list for the bug.

1 12

[Bug 1851919] New: Pango 1.45 crashes pidgin with any link click
by bugzilla＠redhat.com 24 Nov '21

24 Nov '21

https://bugzilla.redhat.com/show_bug.cgi?id=1851919 Bug ID: 1851919 Summary: Pango 1.45 crashes pidgin with any link click Product: Fedora Version: rawhide Status: NEW Component: pango Assignee: pwu(a)redhat.com Reporter: zkabelac(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: caillon+fedoraproject(a)gmail.com, fonts-bugs(a)lists.fedoraproject.org, gnome-sig(a)lists.fedoraproject.org, i18n-bugs(a)lists.fedoraproject.org, john.j5live(a)gmail.com, mclasen(a)redhat.com, pwu(a)redhat.com, rhughes(a)redhat.com, rstrode(a)redhat.com, sandmann(a)redhat.com, tagoh(a)redhat.com Target Milestone: --- Classification: Fedora Description of problem: I've noticed instant crash of a pidgin - with this new pango 1.45 package. I've downgraded to version pango-1.44.7-3.fc33 and pidgin is 'usable' again (aka I can click on URL without getting instant core dump). This is backtrace I'm getting on a crash: (pidgin 2.13.0-20) #0 __GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:49 --Type <RET> for more, q to quit, c to continue without paging-- 49 return ret; [Current thread is 1 (Thread 0x7f2b86c61cc0 (LWP 100183))] (gdb) bt #0 __GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:49 #1 0x00007f2b883a78a4 in __GI_abort () at abort.c:79 #2 0x00007f2b886d5b6c in g_assertion_message (domain=<optimized out>, file=0x7f2b88b7e19b "../pango/pango-context.c", line=<optimized out>, func=<optimized out>, message=<optimized out>) at ../glib/gtestutils.c:2930 #3 0x00007f2b8873408f in g_assertion_message_expr (domain=0x7f2b88b79e0d "Pango", file=0x7f2b88b7e19b "../pango/pango-context.c", line=1435, func=0x7f2b88b7e3d0 "itemize_state_process_run", expr=<optimized out>) at ../glib/gtestutils.c:2956 #4 0x00007f2b88b603d6 in itemize_state_process_run () at /lib64/libpango-1.0.so.0 #5 0x00007f2b88b61218 in pango_itemize_with_base_dir () at /lib64/libpango-1.0.so.0 #6 0x00007f2b88b6a695 in pango_layout_check_lines.part () at /lib64/libpango-1.0.so.0 #7 0x00007f2b88b6c539 in pango_layout_get_extents_internal () at /lib64/libpango-1.0.so.0 #8 0x00007f2b88b6cac1 in pango_layout_get_pixel_size () at /lib64/libpango-1.0.so.0 #9 0x000056100c9047f1 in gtk_imhtml_tip () #10 0x00007f2b8870ba51 in g_timeout_dispatch (source=source@entry=0x56100ec326c0, callback=0x56100c9045b0 <gtk_imhtml_tip>, user_data=0x56100d93c2b0) at ../glib/gmain.c:4800 #11 0x00007f2b8870aeaf in g_main_dispatch (context=0x56100d287540) at ../glib/gmain.c:3309 #12 g_main_context_dispatch (context=0x56100d287540) at ../glib/gmain.c:3974 #13 0x00007f2b8870b238 in g_main_context_iterate (context=0x56100d287540, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at ../glib/gmain.c:4047 #14 0x00007f2b8870b553 in g_main_loop_run (loop=0x56100ea147e0) at ../glib/gmain.c:4241 #15 0x00007f2b88f37ba2 in gtk_main () at /lib64/libgtk-x11-2.0.so.0 #16 0x000056100c8bdb4c in main () -- You are receiving this mail because: You are on the CC list for the bug.

1 12

[Bug 1853937] New: Inconsistent rendering of ti, tt ligatures
by bugzilla＠redhat.com 01 Oct '21

01 Oct '21

https://bugzilla.redhat.com/show_bug.cgi?id=1853937 Bug ID: 1853937 Summary: Inconsistent rendering of ti, tt ligatures Product: Fedora Version: 32 Status: NEW Component: lato-fonts Assignee: pikachu.2014(a)gmail.com Reporter: james(a)ettle.org.uk QA Contact: extras-qa(a)fedoraproject.org CC: fonts-bugs(a)lists.fedoraproject.org, pikachu.2014(a)gmail.com, piotr1212(a)gmail.com Target Milestone: --- Classification: Fedora Created attachment 1699956 --> https://bugzilla.redhat.com/attachment.cgi?id=1699956&action=edit Sample renderings The horizontal 't-crossing' strokes of the ti and tt ligatures are rendered slightly below the x-height, in a manner that is more- or less-visible depending on font size. It's most visible at 11pt. Attached are samples rendered with RGB subpixel anti-aliasing, slight hinting. The issue is visible in the 8, 11 and 14pt samples. lato-fonts-2.015-9.fc32.noarch freetype-2.10.1-2.fc32.x86_64 -- You are receiving this mail because: You are on the CC list for the bug.

1 41

[Bug 1786596] New: Vertical alignment is off with PANGO_GRAVITY_EAST and PANGO_GRAVITY_HINT_LINE
by bugzilla＠redhat.com 26 Aug '21

26 Aug '21

https://bugzilla.redhat.com/show_bug.cgi?id=1786596 Bug ID: 1786596 Summary: Vertical alignment is off with PANGO_GRAVITY_EAST and PANGO_GRAVITY_HINT_LINE Product: Fedora Version: 31 OS: Linux Status: NEW Component: pango Assignee: pwu(a)redhat.com Reporter: abetakehiko(a)gmail.com QA Contact: extras-qa(a)fedoraproject.org CC: caillon+fedoraproject(a)gmail.com, fonts-bugs(a)lists.fedoraproject.org, gnome-sig(a)lists.fedoraproject.org, i18n-bugs(a)lists.fedoraproject.org, john.j5live(a)gmail.com, mclasen(a)redhat.com, pwu(a)redhat.com, rhughes(a)redhat.com, rstrode(a)redhat.com, sandmann(a)redhat.com, tagoh(a)redhat.com Target Milestone: --- Classification: Fedora Description of problem: Japanese chars and Latin chars in the same line do not vertically align when the pango context's gravity is set to PANGO_GRAVITY_EAST and its hint set to PANGO_GRAVITY_HINT_LINE. Version-Release number of selected component (if applicable): pango-1.44.7-1.fc31.x86_64 How reproducible: Always Steps to Reproduce: pango-view --text="あーいうえお abcde" --gravity east --gravity-hint line --font="NotoSerifJP 24" Actual results: Japanese chars and Latin chars in the same line do not vertically align. Expected results: Japanese chars and Latin chars in the same line vertically align as before. Additional info: -- You are receiving this mail because: You are on the CC list for the bug.

1 6

[Bug 1752788] New: CVE-2015-9381 freetype: a heap-based buffer over-read in T1_Get_Private_Dict in type1/t1parse.c leading to information disclosure
by bugzilla＠redhat.com 02 Jun '21

02 Jun '21

https://bugzilla.redhat.com/show_bug.cgi?id=1752788 Bug ID: 1752788 Summary: CVE-2015-9381 freetype: a heap-based buffer over-read in T1_Get_Private_Dict in type1/t1parse.c leading to information disclosure Product: Security Response Hardware: All OS: Linux Status: NEW Component: vulnerability Keywords: Security Severity: medium Priority: medium Assignee: security-response-team(a)redhat.com Reporter: mrehak(a)redhat.com CC: ajax(a)redhat.com, caillon+fedoraproject(a)gmail.com, fonts-bugs(a)lists.fedoraproject.org, gnome-sig(a)lists.fedoraproject.org, john.j5live(a)gmail.com, kevin(a)tigcc.ticalc.org, mclasen(a)redhat.com, mkasik(a)redhat.com, rhughes(a)redhat.com, rstrode(a)redhat.com, sandmann(a)redhat.com Target Milestone: --- Classification: Other FreeType before 2.6.1 has a heap-based buffer over-read in T1_Get_Private_Dict in type1/t1parse.c. -- You are receiving this mail because: You are on the CC list for the bug.

1 13

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

fonts-bugs February 2021