libcairo (1.0.4-0ubuntu1.2) dapper-security; urgency=low * debian/patches/90_fix_zero_sized_bitmap_handling.patch: - backport patch from git, "Under rare circumstances we may need to extract a surface that represents a bitmap with width==0 and rows==0. Detect this case at the start and simply return a zero-sized surface." This fix some pdf being displayed as mostly blank when using evince (LP: #116236) -- Kees Cook Wed, 12 Dec 2007 14:39:26 -0800 libcairo (1.0.4-0ubuntu1.1) dapper-security; urgency=low * SECURITY UPDATE: arbitrary code execution via integer overflows in PNG handling. * Add debian/patches/91_malloc-overflow-fixes.patch: backported upstream fixes. * References http://gitweb.freedesktop.org/?p=cairo;a=commitdiff;h=5c7d2d14d78e4dfb1ef6d2c40f0910f177e07360 http://gitweb.freedesktop.org/?p=cairo;a=commitdiff;h=e49bcde27f88e21d5b8037a0089a226096f6514b CVE-2007-5503 -- Kees Cook Thu, 29 Nov 2007 13:35:15 -0800 libcairo (1.0.4-0ubuntu1) dapper; urgency=low * New upstream version: - _cairo_xlib_surface_show_glyphs: Break up rendering into chunks to fit into X max request length protocol limits, fix CVE-2006-0528 * debian/patches/01-INT_pixman.patch: - fixed with the new version -- Sebastien Bacher Wed, 22 Mar 2006 14:11:36 +0100 libcairo (1.0.2-3ubuntu2) dapper; urgency=low * debian/patches/cairo-1.0.2-embedded-bitmaps.patch: - support for embedded bitmaps fonts, patch from the fedora package -- Sebastien Bacher Mon, 13 Mar 2006 14:36:49 +0100 libcairo (1.0.2-3ubuntu1) dapper; urgency=low * Sync with Debian. * debian/patches/02-no-ft-glyphslot-embolden.patch: - not required. -- Sebastien Bacher Thu, 1 Dec 2005 17:34:54 +0100 libcairo (1.0.2-3) unstable; urgency=low * Bump libcairo2 shlibs to 1.0.2-2 given all the freetype version changes. -- Dave Beckett Wed, 30 Nov 2005 09:21:02 -0800 libcairo (1.0.2-2) unstable; urgency=low * Fix libcairo2-doc section to doc (Closes: #337515) * Re-add patch 02-no-ft-glyphslot-embolden.patch to use only freetype 2.1.7 symbols even though sid has freetype 2.1.10. The latter has ABI changes beyond it's declared shlibs of 2.1.5 and is undergoing a large transition. Require freetype 2.1.7+ again. (Closes: #338817) * Added patch 01-INT_pixman.patch from CVS to remove spurious INT_ items that broke build with recent binutils (Closes: #340073) * Require pkg-config >= 0.18 since cairo.pc uses Require.private: -- Dave Beckett Fri, 25 Nov 2005 04:01:51 +0000 libcairo (1.0.2-1) unstable; urgency=low * New upstream release * Removed patch 01-endianess-cairo-xlib-surface.patch previously taken from upstream CVS. * Removed patch 02-no-ft-glyphslot-embolden.patch to re-allow configure to use FT_GlyphSlot_Embolden provided in freetype 2.1.10 which is now in sid. * Require freetype 2.1.10+ -- Dave Beckett Tue, 25 Oct 2005 18:45:57 +0100 libcairo (1.0.0-3) unstable; urgency=low * Added patch 02-no-ft-glyphslot-embolden.patch to disable use of FT_GlyphSlot_Embolden in freetype, which was added after the freetype version 2.1.7 currently in testing (closes: #325526) * Require freetype 2.1.7+ -- Dave Beckett Tue, 13 Sep 2005 19:33:38 +0100 libcairo (1.0.0-2) unstable; urgency=low * Added patch 01-endianess-cairo-xlib-surface.patch from CVS to fix endianess problem when running over remote X (Closes: #326920) * Register cairo docs with doc-base (Closes: #325541) -- Dave Beckett Tue, 6 Sep 2005 18:15:57 +0100 libcairo (1.0.0-1) unstable; urgency=low * New upstream release * Removed glitz backend as currently experimental and unsupported * debian/watch: update to use stable release area * Removed patch cairo-0.9.2-cache-eviction-fix.patch merged upstream. -- Dave Beckett Wed, 24 Aug 2005 18:14:23 +0100 libcairo (0.9.2-2) unstable; urgency=low * Add patch cairo-0.9.2-cache-eviction-fix.patch from Kristian Høgsberg to make the freetype font cache evict correctly. -- Dave Beckett Mon, 15 Aug 2005 19:48:43 +0100 libcairo (0.9.2-1) unstable; urgency=low * New upstream release * First stable API release - remove patching sonames * libcairo2, libcairo2-dev and libcairo2-doc replace all previous versions * No longer Depends: on libpixman, now an internal library -- Dave Beckett Sat, 13 Aug 2005 14:16:46 +0100 libcairo (0.9.0-1) unstable; urgency=low * New upstream release * libcairo0.9.0 replaces libcairo0.6.0 * Functions were added so create new sonames and libraries -- Dave Beckett Tue, 9 Aug 2005 08:21:50 +0100 libcairo (0.6.0-1) unstable; urgency=low * New upstream release * libcairo0.6.0 replaces libcairo0.5.1 * Functions were added so create new sonames and libraries * Require glitz 0.4.4 API and libpixman 0.1.5 -- Dave Beckett Fri, 29 Jul 2005 23:31:05 +0100 libcairo (0.5.1-2) unstable; urgency=low * Upload to unstable * libcairo0.5.1 replaces older libcairo1 * libcairo0.5.1-dev already conflicted with libcairo1-dev so enable shipping libcairo.so and delete patch 05-cairo.pc.in.patch as the cairo.pc.in is ok again -- Dave Beckett Sun, 10 Jul 2005 22:07:22 +0100 libcairo (0.5.1-1) experimental; urgency=low * New upstream release * Revert to source package name libcairo * Reflect ABI version into both library soname as libcairo-1debian0.5.1 and package name libcairo0.5.1 (Closes: #314776) * libcairo0.5.1 no longer conflicts with libcairo1 * Added a libcairo0.5.1-doc package with the HTML documentation -- Dave Beckett Wed, 22 Jun 2005 21:06:01 +0100 cairo (0.5.0-2) unstable; urgency=low * Fix the shlibs dependencies for libcairo0.5 -- Dave Beckett Thu, 9 Jun 2005 21:56:08 +0100 cairo (0.5.0-1) unstable; urgency=low * New upstream release (Closes: 311042) * Change source package s/lib// and add API version to binary packages * Enable glitz backend (Closes: 307573) -- Dave Beckett Thu, 9 Jun 2005 20:51:11 +0100 libcairo (0.4.0-1) unstable; urgency=low * New upstream release * API changes for fonts so shlib version is now 0.4.0 * Require libpixman 0.1.4 -- Dave Beckett Wed, 9 Mar 2005 19:39:44 +0000 libcairo (0.3.0-1) unstable; urgency=low * New upstream release. Closes: 284205 * Bumped shlibs version since new functions were added. * Headers have moved to below /usr/include/cairo * Require libpixman 0.1.3 -- Dave Beckett Sun, 6 Feb 2005 12:40:04 +0000 libcairo (0.2.0-1) unstable; urgency=low * New upstream release * Bumped shlibs version since new functions were added. * Require libpixman 0.1.2 * Still keep glitz disabled -- Dave Beckett Mon, 8 Nov 2004 22:19:29 +0000 libcairo (0.1.23-2) unstable; urgency=low * Replace Build-Depend on xlibs-dev with libx11-dev * Changed to LGPL license (in CVS 2004-08-02) * Disable use of glitz explicitly -- Dave Beckett Mon, 23 Aug 2004 22:25:16 +0100 libcairo (0.1.23-1) unstable; urgency=low * New upstream release. Closes: 248705 * Add PNG backend, require libpng12-dev * Requires libpixman >= 0.1.1 -- Dave Beckett Sat, 29 May 2004 21:10:58 +0100 libcairo (0.1.18-1) unstable; urgency=low * New upstream release * Remove xlib-surface-debian.patch, not needed for XFree86 4.3.0+ -- Dave Beckett Thu, 19 Feb 2004 23:08:25 +0000 libcairo (0.1.17-4) unstable; urgency=low * Initial version to debian archive. Closes: #205346 -- Dave Beckett Sun, 15 Feb 2004 21:45:47 +0000 libcairo (0.1.17-3) unstable; urgency=low * Setting me as the maintainer temporarily -- Eduard Bloch Sat, 14 Feb 2004 16:49:18 +0100 libcairo (0.1.17-2) unstable; urgency=low * Add patch/xlib-surface-debian.patch to restore this to working for X. -- Dave Beckett Sat, 24 Jan 2004 18:02:38 +0000 libcairo (0.1.17-1) unstable; urgency=low * New upstream release * Replace libpixman/libic dependencies with libpixman -- Dave Beckett Tue, 16 Dec 2003 17:49:55 +0000 libcairo (0.1.16-1) unstable; urgency=low * New upstream release * Added libxrender-dev (>=0.6.0) requirement to match configure.in -- Dave Beckett Mon, 8 Dec 2003 20:39:59 +0000 libcairo (0.1.13-1) unstable; urgency=low * New upstream release * Remove patch for src/config.h - merged upstream. * Return libfreetype6 minimum version to 2.1.0. -- Dave Beckett Fri, 21 Nov 2003 20:05:38 +0000 libcairo (0.1.12-3) unstable; urgency=low * Pull patch from CVS to allow building with newer freetype using the new include via defines mechanism now enforced in freetype 2.1.6 -- Dave Beckett Tue, 18 Nov 2003 20:15:08 +0000 libcairo (0.1.12-2) unstable; urgency=low * Remove dependency on libxft-dev, replaced with libfreetype6-dev and libfontconfig1-dev -- Dave Beckett Sat, 8 Nov 2003 18:44:19 +0000 libcairo (0.1.12-1) unstable; urgency=low * New upstream release -- Dave Beckett Fri, 7 Nov 2003 20:43:33 +0000 libcairo (0.1.11-1) unstable; urgency=low * New upstream release -- Dave Beckett Tue, 4 Nov 2003 15:10:14 +0000 libcairo (0.1.10-1) unstable; urgency=low * New upstream release -- Dave Beckett Tue, 4 Nov 2003 00:23:16 +0000 libcairo (0.1.9-2) unstable; urgency=low * Generate packages correctly named after the library major soname: libcairo1, libcairo1-dev -- Dave Beckett Thu, 30 Oct 2003 23:16:43 +0000 libcairo (0.1.9-1) unstable; urgency=low * New upstream release. * Removed dependency on automake, autoconf, libtool -- Dave Beckett Thu, 30 Oct 2003 21:37:25 +0000 libcairo (0.1.8-1) unstable; urgency=low * Initial package -- Dave Beckett Wed, 29 Oct 2003 23:20:26 +0000