Sign Up
Log In
Log In
or
Sign Up
Places
All Projects
Status Monitor
Collapse sidebar
openSUSE:Leap:42.3
libXfont
libXfont.changes
Overview
Repositories
Revisions
Requests
Users
Attributes
Meta
File libXfont.changes of Package libXfont
------------------------------------------------------------------- Fri Apr 1 09:49:03 UTC 2016 - sndirsch@suse.com - Package update needed for xorg-server 1.18.2 update on sle12 (fate #320388) ------------------------------------------------------------------- Fri Apr 1 09:21:45 UTC 2016 - sndirsch@suse.com - Update to release 1.5.1 * This release of libXfont provides the fixes for the security advisory about BDF font parsing bugs (CVE-2015-1802, CVE-2015-1803, CVE-2015-1804) - supersedes patches: * u_libxfont_bdfreadproperties_property_count_needs_range_check.patch * u_libxfont_bdfreadcharacters_bailout_if_a_char_s_bitmap_cannot_be_read.patch * u_libxfont_bdfreadcharacters_ensure_metrics_fit_into_xcharinfo_struct.patch ------------------------------------------------------------------- Fri Apr 1 09:21:45 UTC 2016 - sndirsch@suse.com - Update to final release 1.5.0 * no changes since 1.4.99.901 ------------------------------------------------------------------- Fri Apr 1 09:21:45 UTC 2016 - sndirsch@suse.com - Update to version 1.4.99.901 * This is a release candidate of libXfont 1.5.0 - please test and report any issues found, so we can have a final/stable release soon to go with the xorg-server 1.16 release. * *IMPORTANT* This release works with fontsproto 2.1.3 or later and is for use with the upcoming release of xorg-server 1.16 and later. It will *not* work with older versions of fontsproto or xorg-server (prior to 1.15.99.901). * This release includes all the security & bug fixes from libXfont 1.4.8, plus these additional significant changes: - Support for SNF font format (deprecated since X11R5 in 1991) is now disabled by default at build time. For now, adding --enable-snfformat to configure flags may re-enable it, but support may be fully removed in future libXfont releases. - Many compiler warnings cleaned up, including some which required API changes around type declarations (const char *, Pointer, etc.). - README file expanded to explain all the different formats/ options. - supersedes patches: * u_0001-CVE-2014-0209-integer-overflow-of-realloc-size-in-Fo.patch * u_0002-CVE-2014-0209-integer-overflow-of-realloc-size-in-le.patch * u_0003-CVE-2014-0210-unvalidated-length-in-_fs_recv_conn_se.patch * u_0004-CVE-2014-0210-unvalidated-lengths-when-reading-repli.patch * u_0005-CVE-2014-0211-Integer-overflow-in-fs_get_reply-_fs_s.patch * u_0006-CVE-2014-0210-unvalidated-length-fields-in-fs_read_q.patch * u_0007-CVE-2014-0211-integer-overflow-in-fs_read_extent_inf.patch * u_0008-CVE-2014-0211-integer-overflow-in-fs_alloc_glyphs.patch * u_0009-CVE-2014-0210-unvalidated-length-fields-in-fs_read_e.patch * u_0010-CVE-2014-0210-unvalidated-length-fields-in-fs_read_g.patch * u_0011-CVE-2014-0210-unvalidated-length-fields-in-fs_read_l.patch * u_0012-CVE-2014-0210-unvalidated-length-fields-in-fs_read_l.patch - added baselibs.conf as source to spec file ------------------------------------------------------------------- Fri Apr 1 09:21:45 UTC 2016 - sndirsch@suse.com - update to current git commit a96cc1f to match current fontsproto git sources ------------------------------------------------------------------- Tue Dec 8 16:07:25 UTC 2015 - eich@suse.com - U_bdfReadCharacters-Allow-negative-DWIDTH-values.patch Negative DWIDTH is legal. This was broken by the fix for CVE-2015-1804. Fixed upstream with commit 1a73d6 (boo#958383). ------------------------------------------------------------------- Mon Mar 16 05:36:09 UTC 2015 - msrb@suse.com - u_libxfont_bdfreadproperties_property_count_needs_range_check.patch u_libxfont_bdfreadcharacters_bailout_if_a_char_s_bitmap_cannot_be_read.patch u_libxfont_bdfreadcharacters_ensure_metrics_fit_into_xcharinfo_struct.patch * Security fixes. (bnc#921978, CVE-2015-1802, CVE-2015-1803, CVE-2015-1804) ------------------------------------------------------------------- Fri May 9 13:34:50 UTC 2014 - msrb@suse.com - u_0001-CVE-2014-0209-integer-overflow-of-realloc-size-in-Fo.patch, u_0002-CVE-2014-0209-integer-overflow-of-realloc-size-in-le.patch, u_0003-CVE-2014-0210-unvalidated-length-in-_fs_recv_conn_se.patch, u_0004-CVE-2014-0210-unvalidated-lengths-when-reading-repli.patch, u_0005-CVE-2014-0211-Integer-overflow-in-fs_get_reply-_fs_s.patch, u_0006-CVE-2014-0210-unvalidated-length-fields-in-fs_read_q.patch, u_0007-CVE-2014-0211-integer-overflow-in-fs_read_extent_inf.patch, u_0008-CVE-2014-0211-integer-overflow-in-fs_alloc_glyphs.patch, u_0009-CVE-2014-0210-unvalidated-length-fields-in-fs_read_e.patch, u_0010-CVE-2014-0210-unvalidated-length-fields-in-fs_read_g.patch, u_0011-CVE-2014-0210-unvalidated-length-fields-in-fs_read_l.patch, u_0012-CVE-2014-0210-unvalidated-length-fields-in-fs_read_l.patch * Security fixes. (CVE-2014-0209, CVE-2014-0210, CVE-2014-0211, bnc#857544) ------------------------------------------------------------------- Wed Jan 8 09:51:40 UTC 2014 - sndirsch@suse.com - Update to version 1.4.7 This release includes the fix for CVE-2013-6462, as well as other security hardening and code cleanups, and makes libXfont compatible with libXtrans 1.3 on Solaris. (bnc#854915) ------------------------------------------------------------------- Sat Aug 17 22:04:16 UTC 2013 - zaitor@opensuse.org - Update to version 1.4.6: + Require ANSI C89 pre-processor, drop pre-C89 token pasting support. + Protect config.h inclusion with ifdef HAVE_CONFIG_H, like usual. + Replace deprecated Automake INCLUDES variable with AM_CPPFLAGS. + autogen.sh: Implement GNOME Build API. + configure: Remove AM_MAINTAINER_MODE. + catalogue: Fix obvious thinko. + Omit catalogue support on systems without symlinks. + If socket is interrupted with signal EINTR, re-attempt read. ------------------------------------------------------------------- Sun Feb 17 17:21:53 UTC 2013 - jengelh@inai.de - Use more robust make install call ------------------------------------------------------------------- Thu Apr 12 06:24:00 UTC 2012 - vuntz@opensuse.org - Update to version 1.4.5: + Updates to better handle fonts compressed with compress(1) + Do proper input validation to fix for CVE-2011-2895 + Fix crash if pcf header is corrupted + Cleanups for compiler warnings + Improvements for the developer documentation + Build configuration improvements - Changes from version 1.4.4: + LZW decompress: fix for CVE-2011-2895 + Fix memory leak + Build configuration improvements - Drop U_libXfont_LZW-decompress-fix-for-CVE-2011-2895.patch: fixed upstream. ------------------------------------------------------------------- Tue Feb 7 22:17:49 UTC 2012 - jengelh@medozas.de - Split xorg-x11-libs into separate packages
Locations
Projects
Search
Status Monitor
Help
OpenBuildService.org
Documentation
API Documentation
Code of Conduct
Contact
Support
@OBShq
Terms
openSUSE Build Service is sponsored by
The Open Build Service is an
openSUSE project
.
Sign Up
Log In
Places
Places
All Projects
Status Monitor
