ubuntu/+source/libxfont:ubuntu/utopic-devel

Last commit made on 2015-03-18
Get this branch:
git clone -b ubuntu/utopic-devel https://git.launchpad.net/ubuntu/+source/libxfont
Members of Ubuntu Server Dev import team can upload to this branch. Log in for directions.

Branch merges

Branch information

Name:
ubuntu/utopic-devel
Repository:
lp:ubuntu/+source/libxfont

Recent commits

9ac37bc... by Marc Deslauriers on 2015-03-18

Import patches-unapplied version 1:1.4.99.901-1ubuntu0.1 to ubuntu/utopic-security

Imported using git-ubuntu import.

Changelog parent: 698a2b7f423756164929c95bfa57245f526af2b9

New changelog entries:
  * SECURITY UPDATE: arbitrary code exection via invalid property count
    - debian/patches/CVE-2015-1802.patch: check for integer overflow in
      src/bitmap/bdfread.c.
    - CVE-2015-1802
  * SECURITY UPDATE: arbitrary code execution via bitmap data parse failure
    - debian/patches/CVE-2015-1803.patch: bail out if bitmap can't be read
      in src/bitmap/bdfread.c.
    - CVE-2015-1803
  * SECURITY UPDATE: arbitrary code execution via invalid metrics
    - debian/patches/CVE-2015-1804.patch: ensure metrics fit in struct in
      src/bitmap/bdfread.c.
    - CVE-2015-1804

698a2b7... by Julien Cristau on 2014-07-12

Import patches-unapplied version 1:1.4.99.901-1 to debian/sid

Imported using git-ubuntu import.

Changelog parent: 1166f427fea11d026b7463292e0d55d3a6e388c0

New changelog entries:
  * New upstream release candidate.
    + includes the CVE-2014-{0209,0210,0211} patches
  * Remove Cyril from Uploaders.
  * Allow uscan to verify tarball signature.

1166f42... by Julien Cristau on 2014-05-13

Import patches-unapplied version 1:1.4.7-2 to debian/sid

Imported using git-ubuntu import.

Changelog parent: 05c9f70de42c9f3635447a43560b9e4d754b8221

New changelog entries:
  * Pull from upstream git to fix FTBFS with new fontsproto (closes: #746052)
  * CVE-2014-0209: integer overflow of allocations in font metadata
  * CVE-2014-0210: unvalidated length fields when parsing xfs protocol replies
  * CVE-2014-0211: integer overflows calculating memory needs for xfs replies
  * Add breaks on xfs because we broke it by disabling font protocol support
    in 1.4.7.

05c9f70... by Julien Cristau on 2014-01-07

Import patches-unapplied version 1:1.4.7-1 to debian/sid

Imported using git-ubuntu import.

Changelog parent: 9366b44d71d5183b688d6c0ff98814cf434514ea

New changelog entries:
  * New upstream release
    + CVE-2013-6462: unlimited sscanf overflows stack buffer in
      bdfReadCharacters()
  * Don't put dbg symbols from the udeb in the dbg package.
  * dev package is no longer Multi-Arch: same (closes: #720026).
  * Disable support for connecting to a font server. That code is horrible and
    full of holes.

9366b44... by Julien Cristau on 2013-08-12

Import patches-unapplied version 1:1.4.6-1 to debian/sid

Imported using git-ubuntu import.

Changelog parent: b9dfc5deaf0697c27a2b83d987e428a1c937b453

New changelog entries:
  * New upstream release.
  * Build for multiarch (closes: #654252). Patch by Riku Voipio, thanks!
  * Disable silent build rules.

b9dfc5d... by Cyril Brulebois on 2012-05-03

Import patches-unapplied version 1:1.4.5-2 to debian/sid

Imported using git-ubuntu import.

Changelog parent: a93378db5878d94bb66100aecf5533e90b293a33

New changelog entries:
  * Ease sync for Ubuntu: strip -Bsymbolic-functions from LDFLAGS
    (LP: #992745).

a93378d... by Cyril Brulebois on 2012-03-04

Import patches-unapplied version 1:1.4.5-1 to debian/sid

Imported using git-ubuntu import.

Changelog parent: 9b53e894a8f4e75306533d59d6bec6319d372f4f

New changelog entries:
  [ Cyril Brulebois ]
  * New upstream release.
  * Switch to dh:
    - Bump debhelper build-dep and compat.
    - Rewrite debian/rules, using autoreconf and quilt sequences.
    - Adjust build dependencies accordingly.
    - Use build-main and build-udeb as build directories.
    - Adjust .install accordingly.
  * Remove xsfbs accordingly.
  * Add support for hardened build flags through dpkg-buildflags, based
    on a patch by Moritz Muehlenhoff, thanks! (Closes: #654154).
  [ Julien Cristau ]
  * Remove David Nusinow from Uploaders.

9b53e89... by Cyril Brulebois on 2011-08-11

Import patches-unapplied version 1:1.4.4-1 to debian/sid

Imported using git-ubuntu import.

Changelog parent: ac010e6bd79f641aa360142589eb3c53a6825be9

New changelog entries:
  [ Julien Cristau ]
  * Drop Pre-Depends on x11-common (only needed for upgrades from the
    monolith) and Replaces on xlibs-static-dev (hasn't existed in forever).
  [ Cyril Brulebois ]
  * New upstream release:
    - LZW decompress: fix for CVE-2011-2895. From the commit message:
      “Specially crafted LZW stream can crash an application using libXfont
       that is used to open untrusted font files. With X server, this may
       allow privilege escalation when exploited.”
  * Set urgency to “high” accordingly.
  * Update debian/copyright from upstream COPYING.
  * Bump xorg-sgml-doctools build-dep.
  * Drop xorg.css from .install, no longer shipped upstream.

ac010e6... by Cyril Brulebois on 2011-02-05

Import patches-unapplied version 1:1.4.3-2 to debian/sid

Imported using git-ubuntu import.

Changelog parent: d21de72de58121fb125a598fac84d5693ccaf2b3

New changelog entries:
  * Upload to unstable.

d21de72... by Cyril Brulebois on 2010-11-19

Import patches-unapplied version 1:1.4.3-1 to debian/experimental

Imported using git-ubuntu import.

Changelog parent: 2185214ce51f4b6df27b245c67080e4c6cad92e4

New changelog entries:
  * New upstream release.
  * Bump xutils-dev build-dep for new macros.
  * Add xmlto, xorg-sgml-doctools, and w3m build-dep for the doc.
  * Pass --with-xmlto and --without-fop for the regular build (we want
    html and txt only). Disable both for the udeb build.
  * Tweak doc filenames, and handle that through dh_install.
  * Add --fail-missing -XlibXfont.la for the second dh_install call (the
    udeb one), for additional safety.