lp:ubuntu/hardy-security/pango1.0

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

63. By Marc Deslauriers on 2011-03-01

* SECURITY UPDATE: denial of service via crafted font file
  - debian/patches/14_security_CVE-2010-0421.patch: validate glyphs in
    pango/opentype/harfbuzz-gdef.c.
  - CVE-2010-0421
* SECURITY UPDATE: denial of service and possible code execution via
  crafted font file (LP: #696616)
  - debian/patches/15_security_CVE-2011-0020.patch: check for overflow in
    pango/pangoft2-render.c.
  - CVE-2011-0020

62. By Marc Deslauriers on 2009-05-05

* SECURITY UPDATE: Possible remote code execution via integer overflow
  with very long glyphstrings
  - debian/patches/13_security_CVE-2009-1194.patch: check length so we
    don't overflow in pango/glyphstring.c.
  - CVE-2009-1194

61. By Sebastian Dröge on 2008-04-09

New upstream bugfix release.

60. By Sebastian Dröge on 2008-03-10

* New upstream stable release:
  + debian/rules:
    - Upload to unstable, drop check-dist include.

59. By Loïc Minier on 2008-02-26

* New upstream release.
  - Refresh patch 30_anymetrics to apply cleanly.
  - Upstream NEWS:
    . Fixed blocker bug with pango_layout_set_height() and positive height.
    . Fixed small leak in ATSUI backend.
    . Improved docs.
    . Bugs fixes.

58. By Loïc Minier on 2008-01-22

* Sync with Debian; Ubuntu changes are:
  - Add patch 30_anymetrics, turns on FC_ANY_METRICS whenever looking up
    fonts with fontconfig; lets fontconfig's configuration know that we
    don't care about getting a font with exactly the same shape as the
    family we asked for and fixes (eg) a firefox vs. evince font metrics
    ugliness issue.
* Refresh 30_anymetrics to apply cleanly.

57. By Loïc Minier on 2007-12-18

* Sync with Debian; Ubuntu changes are:
  - Add patch 30_anymetrics, turns on FC_ANY_METRICS whenever looking up
    fonts with fontconfig; lets fontconfig's configuration know that we
    don't care about getting a font with exactly the same shape as the
    family we asked for and fixes (eg) a firefox vs. evince font metrics
    ugliness issue.

56. By Loïc Minier on 2007-12-04

* Sync with Debian; Ubuntu changes are:
  - Add patch 30_anymetrics, turns on FC_ANY_METRICS whenever looking up
    fonts with fontconfig; lets fontconfig's configuration know that we
    don't care about getting a font with exactly the same shape as the
    family we asked for and fixes (eg) a firefox vs. evince font metrics
    ugliness issue.

55. By Loïc Minier on 2007-11-01

* Sync with Debian; Ubuntu changes are:
  - Add patch 30_anymetrics, turns on FC_ANY_METRICS whenever looking up
    fonts with fontconfig; lets fontconfig's configuration know that we
    don't care about getting a font with exactly the same shape as the
    family we asked for and fixes (eg) a firefox vs. evince font metrics
    ugliness issue.

54. By Sebastien Bacher on 2007-09-18

* New upstream version:
  - Require libthai >= 0.1.9 for enabling thai-lang module
  - Misc bug fixes
  - Bugs fixed in this release:
    Bug 474708 – pangocairo leaks memory
    Bug 472891 – Bad consistency check in pango_get_log_attrs
    Bug 302952 – The placement of a diacritic marks for an arabic ligature
    is not correct
    Bug 410152 – testboundaries test fails
* debian/control.in:
  - updated libthai requirement