dimstar_suse d1897c6615 Accepting request 1345117 from M17N ...

OBS-URL: https://build.opensuse.org/request/show/1345117
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/fontforge?expand=0&rev=67

2026-04-09 14:08:26 +00:00

.gitattributes

Add fontforge-CVE-2025-15270.patch: Backport d01333a5 from upstream, add validation to check for negative kern class name length values before using them as array indices. This fixes a heap buffer overflow where malicious SFD files could supply negative length values (e.g., -1, -38, -139), causing writes to memory before the allocated buffer through kc->firsts[i][temp] = '\0' and kc->seconds[i][temp] = '\0' operations. (CVE-2025-15270, ZDI-CAN-28563, ZDI-25-1194, bsc#1256031)

2026-04-08 06:19:35 +00:00

.gitignore

Add fontforge-CVE-2025-15270.patch: Backport d01333a5 from upstream, add validation to check for negative kern class name length values before using them as array indices. This fixes a heap buffer overflow where malicious SFD files could supply negative length values (e.g., -1, -38, -139), causing writes to memory before the allocated buffer through kc->firsts[i][temp] = '\0' and kc->seconds[i][temp] = '\0' operations. (CVE-2025-15270, ZDI-CAN-28563, ZDI-25-1194, bsc#1256031)

2026-04-08 06:19:35 +00:00

add-bitmap-transform-support.patch

Add fontforge-CVE-2025-15270.patch: Backport d01333a5 from upstream, add validation to check for negative kern class name length values before using them as array indices. This fixes a heap buffer overflow where malicious SFD files could supply negative length values (e.g., -1, -38, -139), causing writes to memory before the allocated buffer through kc->firsts[i][temp] = '\0' and kc->seconds[i][temp] = '\0' operations. (CVE-2025-15270, ZDI-CAN-28563, ZDI-25-1194, bsc#1256031)

2026-04-08 06:19:35 +00:00

fontforge-20251009.tar.xz

Add fontforge-CVE-2025-15270.patch: Backport d01333a5 from upstream, add validation to check for negative kern class name length values before using them as array indices. This fixes a heap buffer overflow where malicious SFD files could supply negative length values (e.g., -1, -38, -139), causing writes to memory before the allocated buffer through kc->firsts[i][temp] = '\0' and kc->seconds[i][temp] = '\0' operations. (CVE-2025-15270, ZDI-CAN-28563, ZDI-25-1194, bsc#1256031)

2026-04-08 06:19:35 +00:00

fontforge-CVE-2025-15269.patch

Add fontforge-CVE-2025-15270.patch: Backport d01333a5 from upstream, add validation to check for negative kern class name length values before using them as array indices. This fixes a heap buffer overflow where malicious SFD files could supply negative length values (e.g., -1, -38, -139), causing writes to memory before the allocated buffer through kc->firsts[i][temp] = '\0' and kc->seconds[i][temp] = '\0' operations. (CVE-2025-15270, ZDI-CAN-28563, ZDI-25-1194, bsc#1256031)

2026-04-08 06:19:35 +00:00

fontforge-CVE-2025-15270.patch

Add fontforge-CVE-2025-15270.patch: Backport d01333a5 from upstream, add validation to check for negative kern class name length values before using them as array indices. This fixes a heap buffer overflow where malicious SFD files could supply negative length values (e.g., -1, -38, -139), causing writes to memory before the allocated buffer through kc->firsts[i][temp] = '\0' and kc->seconds[i][temp] = '\0' operations. (CVE-2025-15270, ZDI-CAN-28563, ZDI-25-1194, bsc#1256031)

2026-04-08 06:19:35 +00:00

fontforge-CVE-2025-15275.patch

Add fontforge-CVE-2025-15270.patch: Backport d01333a5 from upstream, add validation to check for negative kern class name length values before using them as array indices. This fixes a heap buffer overflow where malicious SFD files could supply negative length values (e.g., -1, -38, -139), causing writes to memory before the allocated buffer through kc->firsts[i][temp] = '\0' and kc->seconds[i][temp] = '\0' operations. (CVE-2025-15270, ZDI-CAN-28563, ZDI-25-1194, bsc#1256031)

2026-04-08 06:19:35 +00:00

fontforge-CVE-2025-15279-part01_7d67700c.patch

Add fontforge-CVE-2025-15270.patch: Backport d01333a5 from upstream, add validation to check for negative kern class name length values before using them as array indices. This fixes a heap buffer overflow where malicious SFD files could supply negative length values (e.g., -1, -38, -139), causing writes to memory before the allocated buffer through kc->firsts[i][temp] = '\0' and kc->seconds[i][temp] = '\0' operations. (CVE-2025-15270, ZDI-CAN-28563, ZDI-25-1194, bsc#1256031)

2026-04-08 06:19:35 +00:00

fontforge-CVE-2025-15279-part02_720ea950.patch

Add fontforge-CVE-2025-15270.patch: Backport d01333a5 from upstream, add validation to check for negative kern class name length values before using them as array indices. This fixes a heap buffer overflow where malicious SFD files could supply negative length values (e.g., -1, -38, -139), causing writes to memory before the allocated buffer through kc->firsts[i][temp] = '\0' and kc->seconds[i][temp] = '\0' operations. (CVE-2025-15270, ZDI-CAN-28563, ZDI-25-1194, bsc#1256031)

2026-04-08 06:19:35 +00:00

fontforge-fix-crash-for-content-over-32767-characters-in-GDraw.patch

Add fontforge-CVE-2025-15270.patch: Backport d01333a5 from upstream, add validation to check for negative kern class name length values before using them as array indices. This fixes a heap buffer overflow where malicious SFD files could supply negative length values (e.g., -1, -38, -139), causing writes to memory before the allocated buffer through kc->firsts[i][temp] = '\0' and kc->seconds[i][temp] = '\0' operations. (CVE-2025-15270, ZDI-CAN-28563, ZDI-25-1194, bsc#1256031)

2026-04-08 06:19:35 +00:00

fontforge-fix-crash-in-Metrics-View.patch

Add fontforge-CVE-2025-15270.patch: Backport d01333a5 from upstream, add validation to check for negative kern class name length values before using them as array indices. This fixes a heap buffer overflow where malicious SFD files could supply negative length values (e.g., -1, -38, -139), causing writes to memory before the allocated buffer through kc->firsts[i][temp] = '\0' and kc->seconds[i][temp] = '\0' operations. (CVE-2025-15270, ZDI-CAN-28563, ZDI-25-1194, bsc#1256031)

2026-04-08 06:19:35 +00:00

fontforge-fix-crash-issue-in-allmarkglyphs.patch

Add fontforge-CVE-2025-15270.patch: Backport d01333a5 from upstream, add validation to check for negative kern class name length values before using them as array indices. This fixes a heap buffer overflow where malicious SFD files could supply negative length values (e.g., -1, -38, -139), causing writes to memory before the allocated buffer through kc->firsts[i][temp] = '\0' and kc->seconds[i][temp] = '\0' operations. (CVE-2025-15270, ZDI-CAN-28563, ZDI-25-1194, bsc#1256031)

2026-04-08 06:19:35 +00:00

fontforge-fix-crash-on-UpDown-keypress-in-the-feature-list.patch

Add fontforge-CVE-2025-15270.patch: Backport d01333a5 from upstream, add validation to check for negative kern class name length values before using them as array indices. This fixes a heap buffer overflow where malicious SFD files could supply negative length values (e.g., -1, -38, -139), causing writes to memory before the allocated buffer through kc->firsts[i][temp] = '\0' and kc->seconds[i][temp] = '\0' operations. (CVE-2025-15270, ZDI-CAN-28563, ZDI-25-1194, bsc#1256031)

2026-04-08 06:19:35 +00:00

fontforge-fix-multiple-crashes-in-Multiple-Masters.patch

Add fontforge-CVE-2025-15270.patch: Backport d01333a5 from upstream, add validation to check for negative kern class name length values before using them as array indices. This fixes a heap buffer overflow where malicious SFD files could supply negative length values (e.g., -1, -38, -139), causing writes to memory before the allocated buffer through kc->firsts[i][temp] = '\0' and kc->seconds[i][temp] = '\0' operations. (CVE-2025-15270, ZDI-CAN-28563, ZDI-25-1194, bsc#1256031)

2026-04-08 06:19:35 +00:00

fontforge-fix-UFO-crash-for-empty-contours.patch

Add fontforge-CVE-2025-15270.patch: Backport d01333a5 from upstream, add validation to check for negative kern class name length values before using them as array indices. This fixes a heap buffer overflow where malicious SFD files could supply negative length values (e.g., -1, -38, -139), causing writes to memory before the allocated buffer through kc->firsts[i][temp] = '\0' and kc->seconds[i][temp] = '\0' operations. (CVE-2025-15270, ZDI-CAN-28563, ZDI-25-1194, bsc#1256031)

2026-04-08 06:19:35 +00:00

fontforge-version.patch

Add fontforge-CVE-2025-15270.patch: Backport d01333a5 from upstream, add validation to check for negative kern class name length values before using them as array indices. This fixes a heap buffer overflow where malicious SFD files could supply negative length values (e.g., -1, -38, -139), causing writes to memory before the allocated buffer through kc->firsts[i][temp] = '\0' and kc->seconds[i][temp] = '\0' operations. (CVE-2025-15270, ZDI-CAN-28563, ZDI-25-1194, bsc#1256031)

2026-04-08 06:19:35 +00:00

fontforge.changes

Add fontforge-CVE-2025-15270.patch: Backport d01333a5 from upstream, add validation to check for negative kern class name length values before using them as array indices. This fixes a heap buffer overflow where malicious SFD files could supply negative length values (e.g., -1, -38, -139), causing writes to memory before the allocated buffer through kc->firsts[i][temp] = '\0' and kc->seconds[i][temp] = '\0' operations. (CVE-2025-15270, ZDI-CAN-28563, ZDI-25-1194, bsc#1256031)

2026-04-08 06:19:35 +00:00

fontforge.spec

Add fontforge-CVE-2025-15270.patch: Backport d01333a5 from upstream, add validation to check for negative kern class name length values before using them as array indices. This fixes a heap buffer overflow where malicious SFD files could supply negative length values (e.g., -1, -38, -139), causing writes to memory before the allocated buffer through kc->firsts[i][temp] = '\0' and kc->seconds[i][temp] = '\0' operations. (CVE-2025-15270, ZDI-CAN-28563, ZDI-25-1194, bsc#1256031)

2026-04-08 06:19:35 +00:00

S

Description

No description provided

1,018 MiB

Languages

Diff 100%