-
70f8168...
by
Marc Deslauriers
on 2015-03-18
-
Import patches-unapplied version 1:1.4.4-1ubuntu0.3 to ubuntu/precise-security
Imported using git-ubuntu import.
Changelog parent: e5847993956f5f57e9b3b0ae232b566110c60b6b
New changelog entries:
* SECURITY UPDATE: arbitrary code exection via invalid property count
- debian/patches/CVE-2015-1802.patch: check for integer overflow in
src/bitmap/bdfread.c.
- CVE-2015-1802
* SECURITY UPDATE: arbitrary code execution via bitmap data parse failure
- debian/patches/CVE-2015-1803.patch: bail out if bitmap can't be read
in src/bitmap/bdfread.c.
- CVE-2015-1803
* SECURITY UPDATE: arbitrary code execution via invalid metrics
- debian/patches/CVE-2015-1804.patch: ensure metrics fit in struct in
src/bitmap/bdfread.c.
- CVE-2015-1804
-
e584799...
by
Marc Deslauriers
on 2014-05-13
-
Import patches-unapplied version 1:1.4.4-1ubuntu0.2 to ubuntu/precise-security
Imported using git-ubuntu import.
Changelog parent: 685bb9e3ff4a0e7071679d27d913cf62fb073154
New changelog entries:
* SECURITY UPDATE: denial of service and possible code execution via
font metadata file parsing
- debian/patches/CVE-2014-0209.patch: check for overflows in
src/fontfile/dirfile.c, src/fontfile/fontdir.c.
- CVE-2014-0209
* SECURITY UPDATE: denial of service and possible code execution via
xfs font server replies
- debian/patches/CVE-2014-021x.patch: check lengths and sizes in
src/fc/fsconvert.c, src/fc/fserve.c.
- CVE-2014-0210
- CVE-2014-0211
-
685bb9e...
by
Marc Deslauriers
on 2013-12-30
-
Import patches-unapplied version 1:1.4.4-1ubuntu0.1 to ubuntu/precise-security
Imported using git-ubuntu import.
Changelog parent: 9b53e894a8f4e75306533d59d6bec6319d372f4f
New changelog entries:
* SECURITY UPDATE: denial of service and possible code execution via
stack overflow
- debian/patches/CVE-2013-6462.patch: limit sscanf field in
src/bitmap/bdfread.c.
- CVE-2013-6462
-
9b53e89...
by
Cyril Brulebois
on 2011-08-11
-
Import patches-unapplied version 1:1.4.4-1 to debian/sid
Imported using git-ubuntu import.
Changelog parent: ac010e6bd79f641aa360142589eb3c53a6825be9
New changelog entries:
[ Julien Cristau ]
* Drop Pre-Depends on x11-common (only needed for upgrades from the
monolith) and Replaces on xlibs-static-dev (hasn't existed in forever).
[ Cyril Brulebois ]
* New upstream release:
- LZW decompress: fix for CVE-2011-2895. From the commit message:
“Specially crafted LZW stream can crash an application using libXfont
that is used to open untrusted font files. With X server, this may
allow privilege escalation when exploited.”
* Set urgency to “high” accordingly.
* Update debian/copyright from upstream COPYING.
* Bump xorg-sgml-doctools build-dep.
* Drop xorg.css from .install, no longer shipped upstream.
-
ac010e6...
by
Cyril Brulebois
on 2011-02-05
-
Import patches-unapplied version 1:1.4.3-2 to debian/sid
Imported using git-ubuntu import.
Changelog parent: d21de72de58121fb125a598fac84d5693ccaf2b3
New changelog entries:
* Upload to unstable.
-
d21de72...
by
Cyril Brulebois
on 2010-11-19
-
Import patches-unapplied version 1:1.4.3-1 to debian/experimental
Imported using git-ubuntu import.
Changelog parent: 2185214ce51f4b6df27b245c67080e4c6cad92e4
New changelog entries:
* New upstream release.
* Bump xutils-dev build-dep for new macros.
* Add xmlto, xorg-sgml-doctools, and w3m build-dep for the doc.
* Pass --with-xmlto and --without-fop for the regular build (we want
html and txt only). Disable both for the udeb build.
* Tweak doc filenames, and handle that through dh_install.
* Add --fail-missing -XlibXfont.la for the second dh_install call (the
udeb one), for additional safety.
-
2185214...
by
Julien Cristau
on 2010-07-07
-
Import patches-unapplied version 1:1.4.2-1 to debian/experimental
Imported using git-ubuntu import.
Changelog parent: ec50628e9779694a39d29a21928eaa158052ab02
New changelog entries:
* New upstream release.
* Bump xutils-dev build-dep for new xorg-macros.
* Bump shlibs for register_fpe_functions().
* Update debian/copyright.
* Bump Standards-Version to 3.9.0, no changes.
-
ec50628...
by
Cyril Brulebois
on 2010-03-10
-
Import patches-unapplied version 1:1.4.1-2 to debian/sid
Imported using git-ubuntu import.
Changelog parent: ef0b881156d6615c679e22ab5cab840439cd2cd1
New changelog entries:
[ Julien Cristau ]
* Rename the build directory to not include DEB_BUILD_GNU_TYPE for no
good reason. Thanks, Colin Watson!
* Remove myself from Uploaders
[ Cyril Brulebois ]
* Use dh_makeshlibs’s -V argument instead of debian/libxfont1.shlibs
* Add udeb needed for the graphical installer: libxfont1-udeb.
* Version the B-D on libfontenc-dev to ensure libxfont1-udeb gets a
dependency on libfontenc1-udeb.
* Use a bzip2-less flavour for the udeb.
* Bump Standards-Version from 3.8.3 to 3.8.4 (no changes needed).
* Fix obsolete-relation-form-in-source by using “<<” instead of “<” for
xprint in Conflicts, thanks to lintian.
* Add myself to Uploaders.
-
ef0b881...
by
Julien Cristau
on 2009-12-02
-
Import patches-unapplied version 1:1.4.1-1 to debian/sid
Imported using git-ubuntu import.
Changelog parent: b26cf92baff24eba1bb6903f9fe14656ead38652
New changelog entries:
* New upstream release.
* Bump xutils-dev build-dep for new util-macros.
* Build documentation, install it in libxfont-dev.
* Enable support for bzip2 compressed bitmap fonts.
* Don't use LDFLAGS from the environment. Ubuntu sets that to
-Bsymbolic-functions, which breaks libXfont's weak symbols usage.
-
b26cf92...
by
Drew Parsons
on 2009-10-31
-
Import patches-unapplied version 1:1.4.0-3 to debian/sid
Imported using git-ubuntu import.
Changelog parent: 8a359af427cad2c0533d1b3e1fc4faccdee91031
New changelog entries:
* libxfont1 Conflicts: xprint (< 2:1.6.0-1).
The requiem release of xprint (1.6) will not conflict with
libxfont1. I am assured the garlic wreaths should prove most
efficacious at protecting the general public from the undead.
* Standards version 3.8.3.
