2014-07-21 15:59:07 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Mon Jul 21 13:56:20 UTC 2014 - sndirsch@suse.com
|
|
|
|
|
|
|
|
- Update to final release 1.5.0
|
|
|
|
* no changes since 1.4.99.901
|
|
|
|
|
2014-03-18 15:27:59 +01:00
|
|
|
-------------------------------------------------------------------
|
2014-07-09 15:00:45 +02:00
|
|
|
Wed Jul 9 12:24:00 UTC 2014 - sndirsch@suse.com
|
|
|
|
|
|
|
|
- Update to version 1.4.99.901
|
|
|
|
* This is a release candidate of libXfont 1.5.0 - please test and
|
|
|
|
report any issues found, so we can have a final/stable release
|
|
|
|
soon to go with the xorg-server 1.16 release.
|
|
|
|
* *IMPORTANT* This release works with fontsproto 2.1.3 or later
|
|
|
|
and is for use with the upcoming release of xorg-server 1.16
|
|
|
|
and later. It will *not* work with older versions of
|
|
|
|
fontsproto or xorg-server (prior to 1.15.99.901).
|
|
|
|
* This release includes all the security & bug fixes from
|
|
|
|
libXfont 1.4.8, plus these additional significant changes:
|
|
|
|
- Support for SNF font format (deprecated since X11R5 in 1991)
|
|
|
|
is now disabled by default at build time. For now, adding
|
|
|
|
--enable-snfformat to configure flags may re-enable it, but
|
|
|
|
support may be fully removed in future libXfont releases.
|
|
|
|
- Many compiler warnings cleaned up, including some which
|
|
|
|
required API changes around type declarations (const char *,
|
|
|
|
Pointer, etc.).
|
|
|
|
- README file expanded to explain all the different formats/
|
|
|
|
options.
|
|
|
|
- supersedes patches:
|
|
|
|
* U_0001-CVE-2014-0209-integer-overflow-of-realloc-size-in-Fo.patch
|
|
|
|
* U_0002-CVE-2014-0209-integer-overflow-of-realloc-size-in-le.patch
|
|
|
|
* U_0003-CVE-2014-0210-unvalidated-length-in-_fs_recv_conn_se.patch
|
|
|
|
* U_0004-CVE-2014-0210-unvalidated-lengths-when-reading-repli.patch
|
|
|
|
* U_0005-CVE-2014-0211-Integer-overflow-in-fs_get_reply-_fs_s.patch
|
|
|
|
* U_0006-CVE-2014-0210-unvalidated-length-fields-in-fs_read_q.patch
|
|
|
|
* U_0007-CVE-2014-0211-integer-overflow-in-fs_read_extent_inf.patch
|
|
|
|
* U_0008-CVE-2014-0211-integer-overflow-in-fs_alloc_glyphs.patch
|
|
|
|
* U_0009-CVE-2014-0210-unvalidated-length-fields-in-fs_read_e.patch
|
|
|
|
* U_0010-CVE-2014-0210-unvalidated-length-fields-in-fs_read_g.patch
|
|
|
|
* U_0011-CVE-2014-0210-unvalidated-length-fields-in-fs_read_l.patch
|
|
|
|
* U_0012-CVE-2014-0210-unvalidated-length-fields-in-fs_read_l.patch
|
2014-07-10 05:59:43 +02:00
|
|
|
- added baselibs.conf as source to spec file
|
2014-07-09 15:00:45 +02:00
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
Accepting request 234717 from home:michalsrb:branches:X11:XOrg
- U_0001-CVE-2014-0209-integer-overflow-of-realloc-size-in-Fo.patch,
U_0002-CVE-2014-0209-integer-overflow-of-realloc-size-in-le.patch,
U_0003-CVE-2014-0210-unvalidated-length-in-_fs_recv_conn_se.patch,
U_0004-CVE-2014-0210-unvalidated-lengths-when-reading-repli.patch,
U_0005-CVE-2014-0211-Integer-overflow-in-fs_get_reply-_fs_s.patch,
U_0006-CVE-2014-0210-unvalidated-length-fields-in-fs_read_q.patch,
U_0007-CVE-2014-0211-integer-overflow-in-fs_read_extent_inf.patch,
U_0008-CVE-2014-0211-integer-overflow-in-fs_alloc_glyphs.patch,
U_0009-CVE-2014-0210-unvalidated-length-fields-in-fs_read_e.patch,
U_0010-CVE-2014-0210-unvalidated-length-fields-in-fs_read_g.patch,
U_0011-CVE-2014-0210-unvalidated-length-fields-in-fs_read_l.patch,
U_0012-CVE-2014-0210-unvalidated-length-fields-in-fs_read_l.patch
* Security fixes. (CVE-2014-0209, CVE-2014-0210, CVE-2014-0211,
bnc#857544)
OBS-URL: https://build.opensuse.org/request/show/234717
OBS-URL: https://build.opensuse.org/package/show/X11:XOrg/libXfont?expand=0&rev=15
2014-05-19 15:57:03 +02:00
|
|
|
Mon May 19 13:33:08 UTC 2014 - msrb@suse.com
|
|
|
|
|
|
|
|
- U_0001-CVE-2014-0209-integer-overflow-of-realloc-size-in-Fo.patch,
|
|
|
|
U_0002-CVE-2014-0209-integer-overflow-of-realloc-size-in-le.patch,
|
|
|
|
U_0003-CVE-2014-0210-unvalidated-length-in-_fs_recv_conn_se.patch,
|
|
|
|
U_0004-CVE-2014-0210-unvalidated-lengths-when-reading-repli.patch,
|
|
|
|
U_0005-CVE-2014-0211-Integer-overflow-in-fs_get_reply-_fs_s.patch,
|
|
|
|
U_0006-CVE-2014-0210-unvalidated-length-fields-in-fs_read_q.patch,
|
|
|
|
U_0007-CVE-2014-0211-integer-overflow-in-fs_read_extent_inf.patch,
|
|
|
|
U_0008-CVE-2014-0211-integer-overflow-in-fs_alloc_glyphs.patch,
|
|
|
|
U_0009-CVE-2014-0210-unvalidated-length-fields-in-fs_read_e.patch,
|
|
|
|
U_0010-CVE-2014-0210-unvalidated-length-fields-in-fs_read_g.patch,
|
|
|
|
U_0011-CVE-2014-0210-unvalidated-length-fields-in-fs_read_l.patch,
|
|
|
|
U_0012-CVE-2014-0210-unvalidated-length-fields-in-fs_read_l.patch
|
|
|
|
* Security fixes. (CVE-2014-0209, CVE-2014-0210, CVE-2014-0211,
|
|
|
|
bnc#857544)
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
2014-03-18 15:27:59 +01:00
|
|
|
Tue Mar 18 14:24:59 UTC 2014 - sndirsch@suse.com
|
|
|
|
|
|
|
|
- update to current git commit a96cc1f to match current fontsproto
|
|
|
|
git sources
|
|
|
|
|
2014-01-08 10:56:42 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Wed Jan 8 09:51:40 UTC 2014 - sndirsch@suse.com
|
|
|
|
|
|
|
|
- Update to version 1.4.7
|
|
|
|
This release includes the fix for CVE-2013-6462, as well as
|
|
|
|
other security hardening and code cleanups, and makes libXfont
|
|
|
|
compatible with libXtrans 1.3 on Solaris. (bnc#854915)
|
|
|
|
|
2013-08-18 21:34:56 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Sat Aug 17 22:04:16 UTC 2013 - zaitor@opensuse.org
|
|
|
|
|
|
|
|
- Update to version 1.4.6:
|
|
|
|
+ Require ANSI C89 pre-processor, drop pre-C89 token pasting
|
|
|
|
support.
|
|
|
|
+ Protect config.h inclusion with ifdef HAVE_CONFIG_H, like
|
|
|
|
usual.
|
|
|
|
+ Replace deprecated Automake INCLUDES variable with AM_CPPFLAGS.
|
|
|
|
+ autogen.sh: Implement GNOME Build API.
|
|
|
|
+ configure: Remove AM_MAINTAINER_MODE.
|
|
|
|
+ catalogue: Fix obvious thinko.
|
|
|
|
+ Omit catalogue support on systems without symlinks.
|
|
|
|
+ If socket is interrupted with signal EINTR, re-attempt read.
|
|
|
|
|
2013-03-19 20:47:32 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Sun Feb 17 17:21:53 UTC 2013 - jengelh@inai.de
|
|
|
|
|
|
|
|
- Use more robust make install call
|
|
|
|
|
2012-04-12 13:55:36 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Thu Apr 12 06:24:00 UTC 2012 - vuntz@opensuse.org
|
|
|
|
|
|
|
|
- Update to version 1.4.5:
|
|
|
|
+ Updates to better handle fonts compressed with compress(1)
|
|
|
|
+ Do proper input validation to fix for CVE-2011-2895
|
|
|
|
+ Fix crash if pcf header is corrupted
|
|
|
|
+ Cleanups for compiler warnings
|
|
|
|
+ Improvements for the developer documentation
|
|
|
|
+ Build configuration improvements
|
|
|
|
- Changes from version 1.4.4:
|
|
|
|
+ LZW decompress: fix for CVE-2011-2895
|
|
|
|
+ Fix memory leak
|
|
|
|
+ Build configuration improvements
|
|
|
|
- Drop U_libXfont_LZW-decompress-fix-for-CVE-2011-2895.patch: fixed
|
|
|
|
upstream.
|
|
|
|
|
2012-02-09 14:18:07 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Tue Feb 7 22:17:49 UTC 2012 - jengelh@medozas.de
|
|
|
|
|
|
|
|
- Split xorg-x11-libs into separate packages
|