libxfont (1:1.3.1-2) unstable; urgency=high * High urgency upload for security fix. * Fix a buffer overflow in the PCF font parser (CVE-2008-0006). * debian/control updates + add myself to Uploaders, and remove Branden and Fabio with their permission + s/^XS-Vcs/Vcs/ + bump Standards-Version to 3.7.3 (no changes) + libxfont1 is Section: libs + libxfont-dev and libxfont1-dbg are Section: libdevel -- Julien Cristau Thu, 17 Jan 2008 00:09:38 +0100 libxfont (1:1.3.1-1) unstable; urgency=low * New upstream release. * Add libxfont1.shlibs, bump shlibs to >= 1:1.2.9. -- Julien Cristau Wed, 05 Sep 2007 22:45:57 +0200 libxfont (1:1.2.9-1) unstable; urgency=low * New upstream version. - Add a new 'catalogue' FPE (font path element), which takes font paths from symlinks in a dir. * Use libxfont1 (= ${binary:Version}) instead of ${Source-Version} in debian/control. -- Drew Parsons Sat, 23 Jun 2007 09:40:45 +1000 libxfont (1:1.2.8-1) unstable; urgency=low * Add XS-Vcs-Browser to debian/control. * New upstream release. + drop patch from 1:1.2.2-2, applied upstream. * Upload to unstable. -- Julien Cristau Wed, 11 Apr 2007 15:52:11 +0200 libxfont (1:1.2.7-1) experimental; urgency=low * New upstream release. * Add XS-Vcs-Git header to debian/control, and drop obsolete CVS information. * Install the upstream ChangeLog. -- Julien Cristau Fri, 16 Feb 2007 14:32:57 +0100 libxfont (1:1.2.2-2) unstable; urgency=high * Grab patch from upstream git to fix security issues: + CVE-2007-1351: BDFFont Parsing Integer Overflow + CVE-2007-1352: fonts.dir File Parsing Integer Overflow -- Julien Cristau Tue, 03 Apr 2007 19:31:24 +0200 libxfont (1:1.2.2-1) unstable; urgency=high * New upstream version. - closes security bug in CID encoded fonts (iDefense CVE-ID 2006-3739, 2006-3740) - applies patches 10_freetype_buffer_overflow.patch, 10_pcf_font.patch * dbg package has priority extra. -- Drew Parsons Wed, 13 Sep 2006 17:50:06 +1000 libxfont (1:1.2.0-2) unstable; urgency=high * Apply upstream patch 10_pcf_font.patch (security vulnerability CVE-2006-3467). Closes: #383353. * Upload to unstable to ensure patch is propagated quickly. * Apply patch 10_freetype_buffer_overflow.patch while we're at it (no known exploits). -- Drew Parsons Thu, 17 Aug 2006 07:45:40 +1000 libxfont (1:1.2.0-1) experimental; urgency=low * New upstream version. Closes: #364854. - builds and works with Freetype 2.2. Closes: #362920, #370149. * Standards version 3.7.2. * libxfont-dev doesn't need both Depends: and Pre-Depends: x11-common. * Use debhelper 5, tidy up debian/rules to match. * libxfont does not provide libfontcache.so! -- Drew Parsons Thu, 27 Jul 2006 15:08:14 +1000 libxfont (1:1.1.0-1) UNRELEASED; urgency=low [ David Nusinow ] * New upstream release * Remove obsolete patch 01_fontserver_fix_SEGV.diff [ Andres Salomon ] * Test for obj-$(DEB_BUILD_GNU_TYPE) before creating it during build; idempotency fix. * Run dh_install w/ --list-missing. -- Andres Salomon Mon, 17 Jul 2006 01:20:57 -0400 libxfont (1:1.0.0-4) unstable; urgency=low * Reorder makeshlib command in rules file so that ldconfig is run properly. Thanks Drew Parsons and Steve Langasek. * Add quilt to build-depends -- David Nusinow Wed, 19 Apr 2006 00:10:33 -0400 libxfont (1:1.0.0-3) unstable; urgency=low * Upload to unstable -- David Nusinow Thu, 23 Mar 2006 22:44:39 -0500 libxfont (1:1.0.0-2) experimental; urgency=low * Have libxfont-dev depend on libfreetype6-dev and libfontenc-dev. Thanks Eugene Konev. * Port patches from trunk + general/099v_fontserver_fix_SEGV.diff -- David Nusinow Sun, 26 Feb 2006 18:35:44 -0500 libxfont (1:1.0.0-1) experimental; urgency=low * First upload to Debian -- David Nusinow Thu, 29 Dec 2005 20:51:40 -0500 libxfont (1:0.99.0+cvs.20050909-1) breezy; urgency=low * Fix the XFONT_FONTCACHE/FONTCACHE define in configure.ac (close: Ubuntu#14319). -- Daniel Stone Fri, 9 Sep 2005 15:39:57 +1000 libxfont (1:0.99.0-1) breezy; urgency=low * First libxfont release. -- Daniel Stone Mon, 16 May 2005 22:10:17 +1000