Ubuntu
libxfont package

ubuntu/+source/libxfont:applied/debian/jessie

  1. Git
  2. lp:ubuntu/+source/libxfont
  3. applied/debian/jessie
Last commit made on 2017-12-09
Get this branch:
git clone -b applied/debian/jessie https://git.launchpad.net/ubuntu/+source/libxfont
Members of Ubuntu Server Dev import team can upload to this branch. Log in for directions.

Branch merges

Branch information

Name:
applied/debian/jessie
Repository:
lp:ubuntu/+source/libxfont

Recent commits

75aefee... by Julien Cristau on 2017-10-09

Import patches-applied version 1:1.5.1-1+deb8u1 to applied/debian/jessie

Imported using git-ubuntu import.

Changelog parent: 61d76108927e14308c1270b5b22ac4df2c865510
Unapplied parent: 4ddfaf30edbcf4aedb1a22f21d50795c5c722bdf

New changelog entries:
  * Check for end of string in PatternMatch (CVE-2017-13720)
  * pcfGetProperties: Check string boundaries (CVE-2017-13722)

4ddfaf3... by Julien Cristau on 2017-10-09

Import patches-unapplied version 1:1.5.1-1+deb8u1 to debian/jessie

Imported using git-ubuntu import.

Changelog parent: 5eac1ae7567e6cbba052fdc29aeb0c19a3e4349a

New changelog entries:
  * Check for end of string in PatternMatch (CVE-2017-13720)
  * pcfGetProperties: Check string boundaries (CVE-2017-13722)

61d7610... by Julien Cristau on 2015-03-17

Import patches-applied version 1:1.5.1-1 to applied/debian/sid

Imported using git-ubuntu import.

Changelog parent: c51801e73e486af8fdbfce1bc5fe598e09aded01
Unapplied parent: 5eac1ae7567e6cbba052fdc29aeb0c19a3e4349a

New changelog entries:
  * New upstream release
    + bdfReadProperties: property count needs range check [CVE-2015-1802]
    + bdfReadCharacters: bailout if a char's bitmap cannot be read
      [CVE-2015-1803]
    + bdfReadCharacters: ensure metrics fit into xCharInfo struct
      [CVE-2015-1804]

5eac1ae... by Julien Cristau on 2015-03-17

Import patches-unapplied version 1:1.5.1-1 to debian/sid

Imported using git-ubuntu import.

Changelog parent: 698a2b7f423756164929c95bfa57245f526af2b9

New changelog entries:
  * New upstream release
    + bdfReadProperties: property count needs range check [CVE-2015-1802]
    + bdfReadCharacters: bailout if a char's bitmap cannot be read
      [CVE-2015-1803]
    + bdfReadCharacters: ensure metrics fit into xCharInfo struct
      [CVE-2015-1804]

c51801e... by Julien Cristau on 2014-07-12

Import patches-applied version 1:1.4.99.901-1 to applied/debian/sid

Imported using git-ubuntu import.

Changelog parent: e781fb19ce7f9b2b25edd446efbc78420443bed5
Unapplied parent: 698a2b7f423756164929c95bfa57245f526af2b9

New changelog entries:
  * New upstream release candidate.
    + includes the CVE-2014-{0209,0210,0211} patches
  * Remove Cyril from Uploaders.
  * Allow uscan to verify tarball signature.

698a2b7... by Julien Cristau on 2014-07-12

Import patches-unapplied version 1:1.4.99.901-1 to debian/sid

Imported using git-ubuntu import.

Changelog parent: 1166f427fea11d026b7463292e0d55d3a6e388c0

New changelog entries:
  * New upstream release candidate.
    + includes the CVE-2014-{0209,0210,0211} patches
  * Remove Cyril from Uploaders.
  * Allow uscan to verify tarball signature.

e781fb1... by Julien Cristau on 2014-05-13

Import patches-applied version 1:1.4.7-2 to applied/debian/sid

Imported using git-ubuntu import.

Changelog parent: 2943876436e7cdf9f5ea72770bd8f086aedb882e
Unapplied parent: 1166f427fea11d026b7463292e0d55d3a6e388c0

New changelog entries:
  * Pull from upstream git to fix FTBFS with new fontsproto (closes: #746052)
  * CVE-2014-0209: integer overflow of allocations in font metadata
  * CVE-2014-0210: unvalidated length fields when parsing xfs protocol replies
  * CVE-2014-0211: integer overflows calculating memory needs for xfs replies
  * Add breaks on xfs because we broke it by disabling font protocol support
    in 1.4.7.

1166f42... by Julien Cristau on 2014-05-13

Import patches-unapplied version 1:1.4.7-2 to debian/sid

Imported using git-ubuntu import.

Changelog parent: 05c9f70de42c9f3635447a43560b9e4d754b8221

New changelog entries:
  * Pull from upstream git to fix FTBFS with new fontsproto (closes: #746052)
  * CVE-2014-0209: integer overflow of allocations in font metadata
  * CVE-2014-0210: unvalidated length fields when parsing xfs protocol replies
  * CVE-2014-0211: integer overflows calculating memory needs for xfs replies
  * Add breaks on xfs because we broke it by disabling font protocol support
    in 1.4.7.

2943876... by Julien Cristau on 2014-01-07

Import patches-applied version 1:1.4.7-1 to applied/debian/sid

Imported using git-ubuntu import.

Changelog parent: 5181030d23fc44d8e59f4ed0e543eb683b81ea86
Unapplied parent: 05c9f70de42c9f3635447a43560b9e4d754b8221

New changelog entries:
  * New upstream release
    + CVE-2013-6462: unlimited sscanf overflows stack buffer in
      bdfReadCharacters()
  * Don't put dbg symbols from the udeb in the dbg package.
  * dev package is no longer Multi-Arch: same (closes: #720026).
  * Disable support for connecting to a font server. That code is horrible and
    full of holes.

05c9f70... by Julien Cristau on 2014-01-07

Import patches-unapplied version 1:1.4.7-1 to debian/sid

Imported using git-ubuntu import.

Changelog parent: 9366b44d71d5183b688d6c0ff98814cf434514ea

New changelog entries:
  * New upstream release
    + CVE-2013-6462: unlimited sscanf overflows stack buffer in
      bdfReadCharacters()
  * Don't put dbg symbols from the udeb in the dbg package.
  * dev package is no longer Multi-Arch: same (closes: #720026).
  * Disable support for connecting to a font server. That code is horrible and
    full of holes.