ubuntu/+source/fontforge:applied/ubuntu/trusty-security

Last commit made on 2017-09-04
Get this branch:
git clone -b applied/ubuntu/trusty-security https://git.launchpad.net/ubuntu/+source/fontforge
Members of Ubuntu Server Dev import team can upload to this branch. Log in for directions.

Branch merges

Branch information

Name:
applied/ubuntu/trusty-security
Repository:
lp:ubuntu/+source/fontforge

Recent commits

55ce855... by Leonidas S. Barbosa on 2017-08-30

Import patches-applied version 20120731.b-5ubuntu0.1 to applied/ubuntu/trusty-security

Imported using git-ubuntu import.

Changelog parent: e15153e295c666ca89057a001a83bc29692a391f
Unapplied parent: 90cd22026aeaaf7ad99994a8b8c28e43cb60c565

New changelog entries:
  * SECURITY UPDATE: heap-based buffer over-read
    - debian/patches/CVE-2017-11568.patch: fix out
      of bounds read condition and buffer overflow in
      fontforge/parsettf.c, fontforge/psread.c,
      fontforge/tottf.c.
    - CVE-2017-11568
  * SECURITY UPDATE: heap-based buffer over-read in
    readttfcopyrights
    - debian/patches/CVE-2017-11569-and-2017-11575.patch: fix
      out of bounds read condition in fontforge/parsettf.c.
    - CVE-2017-11569
    - CVE-2017-11575
  * SECURITY UPDATE: stack-based buffer overflow
    - debian/patches/CVE-2017-11571.patch: fix buffer overflow
      in fontforge/parsettf.c.
    - CVE-2017-11571
  * SECURITY UPDATE: stack underflow condition in
    readcfftopdicts
    - debian/patches/CVE-2017-11572-and-2017-11576.patch: prevent
      stack uderflow condition in fontforge/parsettf.c.
    - CVE-2017-11572
    - CVE-2017-11576
  * SECURITY UPDATE: heap-based buffer overflow in readcffset
    - debian/patches/CVE-2017-11574.patch: fix buffer condition
      in fontforge/parsetff.c.
    - CVE-2017-11574
  * SECURITY UPDATE: buffer over-read in getsid
    - debian/patches/CVE-2017-11577.patch: fix out of bounds read
      in fontforge/parsettf.c
    - CVE-2017-11577

90cd220... by Leonidas S. Barbosa on 2017-08-30

[PATCH] Fix out of bounds read in getsid

Gbp-Pq: CVE-2017-11577.patch.

a9c8c10... by Leonidas S. Barbosa on 2017-08-30

[PATCH] parsettf.c: Fix buffer overrun condition

Gbp-Pq: CVE-2017-11574.patch.

0cb6904... by Leonidas S. Barbosa on 2017-08-30

[PATCH] readcfftopdict: Prevent stack underflow condition

Gbp-Pq: CVE-2017-11572-and-CVE-2017-2017-11576.patch.

a0ba34b... by Leonidas S. Barbosa on 2017-08-30

[PATCH] parsettf.c: Fix buffer overflow condition when reading CFF

Gbp-Pq: CVE-2017-11571.patch.

d1847aa... by Leonidas S. Barbosa on 2017-08-30

[PATCH] parsettf.c: Fix out of bounds read condition on buffer

Gbp-Pq: CVE-2017-11569-and-2017-11575.patch.

55045be... by Leonidas S. Barbosa on 2017-08-30

[PATCH 3/6] Fix out of bounds read condition and buffer overflow

Gbp-Pq: CVE-2017-11568.patch.

cb072f7... by Leonidas S. Barbosa on 2017-08-30

just ignore .pc files for git

Gbp-Pq: gitignore.

40d5d06... by Leonidas S. Barbosa on 2017-08-30

define SHELL in makefiles

Gbp-Pq: 671971.diff.

b4097be... by Leonidas S. Barbosa on 2017-08-30

901_ld_as_needed.diff

No DEP3 Subject or Description header found

Gbp-Pq: 901_ld_as_needed.diff.