Commit Graph

26 Commits

Author SHA1 Message Date
matthieu
164d06ad38 Fixes for CVE-2009-0946 from freetype2 git repository:
Multiple integer overflows in FreeType 2.3.9 and earlier allow remote
attackers to execute arbitrary code via vectors related to large values
in certain inputs in (1) smooth/ftsmooth.c, (2) sfnt/ttcmap.c,
and (3) cff/cffload.c.
Plus one additional fix for malformed compressed data.
2009-04-27 07:11:16 +00:00
matthieu
e2d272f607 put libz back into Libs:. Fixes vax linking. 2009-03-26 19:04:00 +00:00
matthieu
703afbb0a2 update to freetype-docs 2.3.9 2009-03-26 07:36:34 +00:00
matthieu
8a907a311b Update to Freetype 2.3.9.
Bump major to be safe.
Small arm assembler fix in ftconfig.h by drahn@
2009-03-26 07:31:44 +00:00
matthieu
87859a9c26 Update to Freetype 2.3.8. Tested by jsg@. 2009-03-10 20:28:33 +00:00
matthieu
f8e0dbd0cd Update to Freetype 2.3.7. This is a bug fix release. No API change. 2008-08-21 05:09:08 +00:00
matthieu
6f11b80c67 Update to freetype 2.3.6.
Contains security fixes for CVE-2008-1806, CVE-2008-1807 and CVE-2008-1808.
Tested by many.
2008-06-22 17:37:35 +00:00
matthieu
1969f0b7b1 Don't hard-code sizeof(long) in ftconfig.h. Fixes 64bit architectures.
Problem noticed by sturm@.
2007-11-24 15:48:33 +00:00
matthieu
8f07cc07fd Use buils/unix/ftsystem.c instead of the generic ANSI C one, which
doesn't set CLOSE_ON_EXEC on files descriptors opened by freetype.
Fixes a fd leak reported by kurt@. Tested by naddy@ and others.
2007-10-27 07:09:48 +00:00
matthieu
3c28b922f5 More bits for freetype 2.3.5 2007-09-08 16:59:03 +00:00
matthieu
f4cb73c397 Merge freetype 2.3.5. Tested by naddy@ and mbalmer@. 2007-09-08 16:39:54 +00:00
matthieu
f731f6acb5 import freetype 2.3.5 2007-09-08 16:28:30 +00:00
matthieu
e51592142f fix two instances XORG_PREFIX that escaped renaming to X11BASE. 2007-05-29 15:37:57 +00:00
matthieu
15235d0d22 Fix for CVE-2007-2754: integer overflow that can lead to an heap overflow.
Discovered by Victor Stinner. Patch from Freetype repository.
2007-05-25 01:23:29 +00:00
matthieu
8c80956fab Don't include debugging symbols. 2007-04-07 15:37:50 +00:00
david
0440c6780f fix $OpenBSD$ RCS tags; ok matthieu@ 2007-04-04 22:30:55 +00:00
todd
517a55a2c5 bdf CVE-2007-1351
BDFFont Parsing Integer Overflow Vulnerability

The discoverer of this vulnerability wishes to remain anonymous.

from matthieu@
2007-04-04 02:51:57 +00:00
matthieu
77cb7f251b Revert local debug stuff that wasn't meant to be committed. 2007-03-25 13:22:40 +00:00
matthieu
00a847b3f8 regen with libtool 1.5.22p9 2007-03-25 13:02:54 +00:00
matthieu
d94e76056c Missed a sed substitution for freetype2.pc.
Noticed by Frederick C. Druseikis, thanks.
2006-12-23 10:42:41 +00:00
matthieu
6a5579f8e8 Make 'obj' now can make symlinks to /usr/obj/xenocara (or any other
directory designed by XENOCARA_OBJDIR in /etc/mk.conf).
2006-12-02 16:28:48 +00:00
matthieu
111eb3bc11 Disable profiled libs. 2006-11-29 18:03:09 +00:00
matthieu
b455532e54 $Xenocara$ -> $OpenBSD$ 2006-11-27 19:56:35 +00:00
matthieu
a6d8ae2911 ${DIST} is gone. 2006-11-27 00:27:52 +00:00
matthieu
f956426aeb build infrastructure and OpenBSD customisation for Freetype 2.2.1 2006-11-26 11:54:18 +00:00
matthieu
68f868c8f6 Import freetype 2.2.1 2006-11-25 18:44:16 +00:00