[Bug 723469] New: CVE-2011-0226 freetype: postscript type1 font parsing vulnerability [fedora-all]
by Red Hat Bugzilla
Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug.
Summary: CVE-2011-0226 freetype: postscript type1 font parsing vulnerability [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=723469
Summary: CVE-2011-0226 freetype: postscript type1 font parsing
vulnerability [fedora-all]
Product: Fedora
Version: 14
Platform: All
OS/Version: Linux
Status: NEW
Keywords: Security, SecurityTracking
Severity: high
Priority: high
Component: freetype
AssignedTo: mkasik(a)redhat.com
ReportedBy: huzaifas(a)redhat.com
QAContact: extras-qa(a)fedoraproject.org
CC: behdad(a)fedoraproject.org, kevin(a)tigcc.ticalc.org,
fonts-bugs(a)lists.fedoraproject.org, mkasik(a)redhat.com
Blocks: 722701
Classification: Fedora
Story Points: ---
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected Fedora
versions.
For comments that are specific to the vulnerability please use bugs filed
against "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When creating a Bodhi update request, please include the bug IDs of the
respective parent bugs filed against the "Security Response" product.
Please mention CVE ids in the RPM changelog when available.
Bodhi update submission link:
https://admin.fedoraproject.org/updates/new/?type_=security&bugs=722701
Please note: this issue affects multiple supported versions of Fedora.
Only one tracking bug has been filed; please only close it when all
affected versions are fixed.
[bug automatically created by: add-tracking-bugs]
--
Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.
12 years, 9 months
[Bug 734352] New: [PATCH] some fonts missing Makefile
by Red Hat Bugzilla
Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug.
Summary: [PATCH] some fonts missing Makefile
https://bugzilla.redhat.com/show_bug.cgi?id=734352
Summary: [PATCH] some fonts missing Makefile
Product: Fedora
Version: rawhide
Platform: All
OS/Version: All
Status: NEW
Severity: urgent
Priority: unspecified
Component: lohit-fonts
AssignedTo: extras-orphan(a)fedoraproject.org
ReportedBy: abdulkarimmemon(a)gmail.com
QAContact: extras-qa(a)fedoraproject.org
CC: petersen(a)redhat.com, extras-orphan(a)fedoraproject.org,
pnemade(a)redhat.com,
fonts-bugs(a)lists.fedoraproject.org,
psatpute(a)redhat.com, i18n-bugs(a)lists.fedoraproject.org
Classification: Fedora
Story Points: ---
Type: ---
Created attachment 520535
--> https://bugzilla.redhat.com/attachment.cgi?id=520535
"Patch file (text/plain, patch)"
Description of problem:
Some of the fonts (Or, As, Bn) are missing the Makefile in the source package
which causes an error during pacaking.
Version-Release number of selected component (if applicable):
Assamee 2.4.3
Bengali 2.4.3
Oriya 2.4.3
--
Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.
12 years, 9 months
[Bug 720354] New: [abrt] fontforge-20100501-8.fc14: myerrorhandler: Process /usr/bin/fontforge was killed by signal 6 (SIGABRT)
by Red Hat Bugzilla
Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug.
Summary: [abrt] fontforge-20100501-8.fc14: myerrorhandler: Process /usr/bin/fontforge was killed by signal 6 (SIGABRT)
https://bugzilla.redhat.com/show_bug.cgi?id=720354
Summary: [abrt] fontforge-20100501-8.fc14: myerrorhandler:
Process /usr/bin/fontforge was killed by signal 6
(SIGABRT)
Product: Fedora
Version: 14
Platform: x86_64
OS/Version: Unspecified
Status: NEW
Status Whiteboard: abrt_hash:5558fd9231fad29222cece202666e4495ff04ac2
Severity: unspecified
Priority: unspecified
Component: fontforge
AssignedTo: kevin(a)scrye.com
ReportedBy: bernardobarros(a)gmail.com
QAContact: extras-qa(a)fedoraproject.org
CC: kevin(a)scrye.com, fonts-bugs(a)lists.fedoraproject.org,
paul(a)frixxon.co.uk
Classification: Fedora
Story Points: ---
abrt version: 1.1.18
architecture: x86_64
Attached file: backtrace, 23603 bytes
cmdline: /usr/bin/fontforge
/home/smoge/workspace/fonts/inspiration/acoustica/ACOUSTIC.TTF
component: fontforge
Attached file: coredump, 21905408 bytes
crash_function: myerrorhandler
executable: /usr/bin/fontforge
kernel: 2.6.35.13-92.fc14.x86_64
package: fontforge-20100501-8.fc14
rating: 4
reason: Process /usr/bin/fontforge was killed by signal 6 (SIGABRT)
release: Fedora release 14 (Laughlin)
time: 1310392243
uid: 500
How to reproduce
-----
1. Browsing a TTF font
2.
3.
--
Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.
12 years, 9 months
[Bug 726561] New: freetype-config breaks when only freetype-devel.i686 installed
by Red Hat Bugzilla
Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug.
Summary: freetype-config breaks when only freetype-devel.i686 installed
https://bugzilla.redhat.com/show_bug.cgi?id=726561
Summary: freetype-config breaks when only freetype-devel.i686
installed
Product: Fedora
Version: 15
Platform: x86_64
OS/Version: Linux
Status: NEW
Severity: low
Priority: unspecified
Component: freetype
AssignedTo: mkasik(a)redhat.com
ReportedBy: awiggins(a)redhat.com
QAContact: extras-qa(a)fedoraproject.org
CC: behdad(a)fedoraproject.org, kevin(a)tigcc.ticalc.org,
fonts-bugs(a)lists.fedoraproject.org, mkasik(a)redhat.com
Classification: Fedora
Story Points: ---
Type: ---
Description of problem:
freetype-config doesn't return the correct include paths when
freetype-devel.i686 is installed without freetype-devel.x86_64 being installed.
Version-Release number of selected component (if applicable):
freetype-devel.2.4.4-4.fc15
How reproducible:
At will
Steps to Reproduce:
1. Ensure that freetype-devel is not installed.
2. yum install freetype-devel.i686
3. freetype-config --cflags
Actual results:
output of command in step 3 is:
-I/freetype2 -I
Expected results:
output should be:
-I/usr/include/freetype2
Additional info:
Everything works fine once freetype-devel.x86_64 is also installed. So, on
x86_64, I suppose freetype-devel.i686 should either work by itself, or pull the
.x86_64 package in as a dependency.
--
Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.
12 years, 9 months
[Bug 3512] Implement font-stretch property
by Bugzilla＠Mozilla
Do not reply to this email. You can add comments to this bug at
https://bugzilla.mozilla.org/show_bug.cgi?id=3512
Jonathan Kew <jfkthame(a)gmail.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Attachment #556151|0 |1
is obsolete| |
Attachment #556151|review?(jdaggett(a)mozilla.co |
Flags|m) |
Attachment #556253| |review?(jdaggett(a)mozilla.co
Flags| |m)
--- Comment #75 from Jonathan Kew <jfkthame(a)gmail.com> 2011-08-27 04:22:44 PDT ---
Created attachment 556253
--> https://bugzilla.mozilla.org/attachment.cgi?id=556253&action=edit
(updated) patch to fix computation of StyleDistance to account for font-stretch
more accurately
Previous version did not correctly implement the CSS3-Fonts draft for the case
where requested stretch is "normal", but the family contains *only* condensed
and extended faces. Spec says to prefer condensed in this case, so fixed the
computation to behave accordingly.
--
Configure bugmail: https://bugzilla.mozilla.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.
12 years, 9 months
[Bug 3512] Implement font-stretch property
by Bugzilla＠Mozilla
Do not reply to this email. You can add comments to this bug at
https://bugzilla.mozilla.org/show_bug.cgi?id=3512
Jonathan Kew <jfkthame(a)gmail.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Attachment #556238| |review?(jdaggett(a)mozilla.co
Flags| |m)
--- Comment #74 from Jonathan Kew <jfkthame(a)gmail.com> 2011-08-27 01:57:15 PDT ---
Created attachment 556238
--> https://bugzilla.mozilla.org/attachment.cgi?id=556238&action=edit
patch to support font-stretch in the GDI font backend (for @font-face families)
There's not much we can do for platform fonts under GDI, as the GDI font family
model doesn't support "rich" families with multiple widths (similar to the
limitation on number of weights). However, for @font-face families we should
have the same behavior across all backends. This patch adds support for
font-stretch to the GDI font entry, so that user fonts work as expected.
With this, the DejaVu Sans [Normal/Condensed] testcase works on all desktop
platforms (OS X, Linux, Win-DWrite, Win-GDI).
--
Configure bugmail: https://bugzilla.mozilla.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.
12 years, 9 months
[Bug 3512] Implement font-stretch property
by Bugzilla＠Mozilla
Do not reply to this email. You can add comments to this bug at
https://bugzilla.mozilla.org/show_bug.cgi?id=3512
Jonathan Kew <jfkthame(a)gmail.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Attachment #556151| |review?(jdaggett(a)mozilla.co
Flags| |m)
AssignedTo|jdaggett(a)mozilla.com |jfkthame(a)gmail.com
--- Comment #72 from Jonathan Kew <jfkthame(a)gmail.com> 2011-08-26 15:35:29 PDT ---
Created attachment 556151
--> https://bugzilla.mozilla.org/attachment.cgi?id=556151&action=edit
patch to fix computation of StyleDistance to account for font-stretch more
accurately
(Reassigning this bug to me, as I'm hoping to actually make progress here.)
Testing showed somewhat erratic results with @font-face families, because the
style-matching code didn't differentiate among font-stretch mismatches - it
would use the matching width if available, but if there was no exact match, you
could get any of the available widths.
To fix this, we need to improve the calculation of "style distance" so as to
prefer the closest available width if no exact match is available.
This gives the expected behavior (as per CSS3 Fonts draft, I believe) for
@font-face families, and should apply to platform fonts on OS X and Windows as
well (not yet tested with those - I think Windows will need further work). Note
that we get slightly different behavior with platform fonts on Linux, because
apparently fontconfig uses a different matching algorithm. This may need
further investigation.
--
Configure bugmail: https://bugzilla.mozilla.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.
12 years, 9 months