-
2c58463...
by
Timo Aaltonen
on 2016-09-28
-
Import patches-unapplied version 1:2.0.1-1 to debian/experimental
Imported using git-ubuntu import.
Changelog parent: e35357dd9efa767edc48e7e3faf1b56c324b307a
New changelog entries:
* Team upload.
* New upstream release.
* Add Keith Packard's key to debian/upstream/signing-key.asc.
* watch: Updated to match upstream rename to libXfont2.
* control, rules, *.install: Changes to match new soname.
* control: Add myself to uploaders.
-
e35357d...
by
Julien Cristau
on 2016-09-24
-
Import patches-unapplied version 1:1.5.2-1 to debian/sid
Imported using git-ubuntu import.
Changelog parent: 5eac1ae7567e6cbba052fdc29aeb0c19a3e4349a
New changelog entries:
* Team upload.
* New upstream release.
* Use https URL in watch file.
* Add Adam Jackson's key to debian/upstream/signing-key.asc.
* Bump Standards-Version to 3.9.8.
* Use https URLs in Vcs-* control fields.
* Remove Drew from Uploaders.
-
5eac1ae...
by
Julien Cristau
on 2015-03-17
-
Import patches-unapplied version 1:1.5.1-1 to debian/sid
Imported using git-ubuntu import.
Changelog parent: 698a2b7f423756164929c95bfa57245f526af2b9
New changelog entries:
* New upstream release
+ bdfReadProperties: property count needs range check [CVE-2015-1802]
+ bdfReadCharacters: bailout if a char's bitmap cannot be read
[CVE-2015-1803]
+ bdfReadCharacters: ensure metrics fit into xCharInfo struct
[CVE-2015-1804]
-
698a2b7...
by
Julien Cristau
on 2014-07-12
-
Import patches-unapplied version 1:1.4.99.901-1 to debian/sid
Imported using git-ubuntu import.
Changelog parent: 1166f427fea11d026b7463292e0d55d3a6e388c0
New changelog entries:
* New upstream release candidate.
+ includes the CVE-2014-{0209,0210,0211} patches
* Remove Cyril from Uploaders.
* Allow uscan to verify tarball signature.
-
1166f42...
by
Julien Cristau
on 2014-05-13
-
Import patches-unapplied version 1:1.4.7-2 to debian/sid
Imported using git-ubuntu import.
Changelog parent: 05c9f70de42c9f3635447a43560b9e4d754b8221
New changelog entries:
* Pull from upstream git to fix FTBFS with new fontsproto (closes: #746052)
* CVE-2014-0209: integer overflow of allocations in font metadata
* CVE-2014-0210: unvalidated length fields when parsing xfs protocol replies
* CVE-2014-0211: integer overflows calculating memory needs for xfs replies
* Add breaks on xfs because we broke it by disabling font protocol support
in 1.4.7.
-
05c9f70...
by
Julien Cristau
on 2014-01-07
-
Import patches-unapplied version 1:1.4.7-1 to debian/sid
Imported using git-ubuntu import.
Changelog parent: 9366b44d71d5183b688d6c0ff98814cf434514ea
New changelog entries:
* New upstream release
+ CVE-2013-6462: unlimited sscanf overflows stack buffer in
bdfReadCharacters()
* Don't put dbg symbols from the udeb in the dbg package.
* dev package is no longer Multi-Arch: same (closes: #720026).
* Disable support for connecting to a font server. That code is horrible and
full of holes.
-
9366b44...
by
Julien Cristau
on 2013-08-12
-
Import patches-unapplied version 1:1.4.6-1 to debian/sid
Imported using git-ubuntu import.
Changelog parent: b9dfc5deaf0697c27a2b83d987e428a1c937b453
New changelog entries:
* New upstream release.
* Build for multiarch (closes: #654252). Patch by Riku Voipio, thanks!
* Disable silent build rules.
-
b9dfc5d...
by
Cyril Brulebois
on 2012-05-03
-
Import patches-unapplied version 1:1.4.5-2 to debian/sid
Imported using git-ubuntu import.
Changelog parent: a93378db5878d94bb66100aecf5533e90b293a33
New changelog entries:
* Ease sync for Ubuntu: strip -Bsymbolic-functions from LDFLAGS
(LP: #992745).
-
a93378d...
by
Cyril Brulebois
on 2012-03-04
-
Import patches-unapplied version 1:1.4.5-1 to debian/sid
Imported using git-ubuntu import.
Changelog parent: 9b53e894a8f4e75306533d59d6bec6319d372f4f
New changelog entries:
[ Cyril Brulebois ]
* New upstream release.
* Switch to dh:
- Bump debhelper build-dep and compat.
- Rewrite debian/rules, using autoreconf and quilt sequences.
- Adjust build dependencies accordingly.
- Use build-main and build-udeb as build directories.
- Adjust .install accordingly.
* Remove xsfbs accordingly.
* Add support for hardened build flags through dpkg-buildflags, based
on a patch by Moritz Muehlenhoff, thanks! (Closes: #654154).
[ Julien Cristau ]
* Remove David Nusinow from Uploaders.
-
9b53e89...
by
Cyril Brulebois
on 2011-08-11
-
Import patches-unapplied version 1:1.4.4-1 to debian/sid
Imported using git-ubuntu import.
Changelog parent: ac010e6bd79f641aa360142589eb3c53a6825be9
New changelog entries:
[ Julien Cristau ]
* Drop Pre-Depends on x11-common (only needed for upgrades from the
monolith) and Replaces on xlibs-static-dev (hasn't existed in forever).
[ Cyril Brulebois ]
* New upstream release:
- LZW decompress: fix for CVE-2011-2895. From the commit message:
“Specially crafted LZW stream can crash an application using libXfont
that is used to open untrusted font files. With X server, this may
allow privilege escalation when exploited.”
* Set urgency to “high” accordingly.
* Update debian/copyright from upstream COPYING.
* Bump xorg-sgml-doctools build-dep.
* Drop xorg.css from .install, no longer shipped upstream.
