https://bugzilla.redhat.com/show_bug.cgi?id=1191092
Bug ID: 1191092
Summary: CVE-2014-9669 freetype: Multiple integer overflows in
sfnt/ttcmap.c
Product: Security Response
Component: vulnerability
Keywords: Security
Severity: medium
Priority: medium
Assignee: security-response-team(a)redhat.com
Reporter: vkaigoro(a)redhat.com
CC: behdad(a)fedoraproject.org,
fonts-bugs(a)lists.fedoraproject.org,
kevin(a)tigcc.ticalc.org, mkasik(a)redhat.com
Common Vulnerabilities and Exposures assigned CVE-2014-9669 to the following
issue:
Multiple integer overflows in sfnt/ttcmap.c in FreeType before 2.5.4 allow
remote attackers to cause a denial of service (out-of-bounds read or memory
corruption) or possibly have unspecified other impact via a crafted cmap SFNT
table.
http://code.google.com/p/google-security-research/issues/detail?id=163http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=602040b1…
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=lbZKQCjzZ4&a=cc_unsubscribe
https://bugzilla.redhat.com/show_bug.cgi?id=1191090
Bug ID: 1191090
Summary: CVE-2014-9667 freetype: integer overflow and
out-of-bounds read in sfnt/ttload.c
Product: Security Response
Component: vulnerability
Keywords: Security
Severity: medium
Priority: medium
Assignee: security-response-team(a)redhat.com
Reporter: vkaigoro(a)redhat.com
CC: behdad(a)fedoraproject.org,
fonts-bugs(a)lists.fedoraproject.org,
kevin(a)tigcc.ticalc.org, mkasik(a)redhat.com
Common Vulnerabilities and Exposures assigned CVE-2014-9667 to the following
issue:
sfnt/ttload.c in FreeType before 2.5.4 proceeds with offset+length calculations
without restricting the values, which allows remote attackers to cause a denial
of service (integer overflow and out-of-bounds read) or possibly have
unspecified other impact via a crafted SFNT table.
http://code.google.com/p/google-security-research/issues/detail?id=166http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=677ddf4f…
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=zImGNf0ZHS&a=cc_unsubscribe
https://bugzilla.redhat.com/show_bug.cgi?id=1191085
Bug ID: 1191085
Summary: CVE-2014-9663 freetype: out-of-bounds read in the
tt_cmap4_validate function in sfnt/ttcmap.c
Product: Security Response
Component: vulnerability
Keywords: Security
Severity: medium
Priority: medium
Assignee: security-response-team(a)redhat.com
Reporter: vkaigoro(a)redhat.com
CC: behdad(a)fedoraproject.org,
fonts-bugs(a)lists.fedoraproject.org,
kevin(a)tigcc.ticalc.org, mkasik(a)redhat.com
Common Vulnerabilities and Exposures assigned CVE-2014-9663 to the following
issue:
The tt_cmap4_validate function in sfnt/ttcmap.c in FreeType before 2.5.4
validates a certain length field before that field's value is completely
calculated, which allows remote attackers to cause a denial of service
(out-of-bounds read) or possibly have unspecified other impact via a crafted
cmap SFNT table.
http://code.google.com/p/google-security-research/issues/detail?id=184http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=9bd20b73…
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=RqfqmMYrge&a=cc_unsubscribe
https://bugzilla.redhat.com/show_bug.cgi?id=1191082
Bug ID: 1191082
Summary: CVE-2014-9660 freetype: NULL pointer dereference in
the _bdf_parse_glyphs function in bdf/bdflib.c
Product: Security Response
Component: vulnerability
Keywords: Security
Severity: medium
Priority: medium
Assignee: security-response-team(a)redhat.com
Reporter: vkaigoro(a)redhat.com
CC: behdad(a)fedoraproject.org,
fonts-bugs(a)lists.fedoraproject.org,
kevin(a)tigcc.ticalc.org, mkasik(a)redhat.com
Common Vulnerabilities and Exposures assigned CVE-2014-9660 to the following
issue:
The _bdf_parse_glyphs function in bdf/bdflib.c in FreeType before 2.5.4 does
not
properly handle a missing ENDCHAR record, which allows remote attackers to
cause
a denial of service (NULL pointer dereference) or possibly have unspecified
other impact via a crafted BDF font.
http://code.google.com/p/google-security-research/issues/detail?id=188http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=af834617…
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=934GUlEIr0&a=cc_unsubscribe
https://bugzilla.redhat.com/show_bug.cgi?id=1191080
Bug ID: 1191080
Summary: CVE-2014-9658 freetype: DoS in the tt_face_load_kern
function in sfnt/ttkern.c
Product: Security Response
Component: vulnerability
Keywords: Security
Severity: medium
Priority: medium
Assignee: security-response-team(a)redhat.com
Reporter: vkaigoro(a)redhat.com
CC: behdad(a)fedoraproject.org,
fonts-bugs(a)lists.fedoraproject.org,
kevin(a)tigcc.ticalc.org, mkasik(a)redhat.com
Common Vulnerabilities and Exposures assigned CVE-2014-9658 to the following
issue:
The tt_face_load_kern function in sfnt/ttkern.c in FreeType before 2.5.4
enforces an incorrect minimum table length, which allows remote attackers to
cause a denial of service (out-of-bounds read) or possibly have unspecified
other impact via a crafted TrueType font.
http://code.google.com/p/google-security-research/issues/detail?id=194http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=f70d9342…
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=NNjC60WFxk&a=cc_unsubscribe
https://bugzilla.redhat.com/show_bug.cgi?id=1191079
Bug ID: 1191079
Summary: CVE-2014-9657 freetype: DoS in the tt_face_load_hdmx
function in truetype/ttpload.c
Product: Security Response
Component: vulnerability
Keywords: Security
Severity: medium
Priority: medium
Assignee: security-response-team(a)redhat.com
Reporter: vkaigoro(a)redhat.com
CC: behdad(a)fedoraproject.org,
fonts-bugs(a)lists.fedoraproject.org,
kevin(a)tigcc.ticalc.org, mkasik(a)redhat.com
Common Vulnerabilities and Exposures assigned CVE-2014-9657 to the following
issue:
The tt_face_load_hdmx function in truetype/ttpload.c in FreeType before 2.5.4
does not establish a minimum record size, which allows remote attackers to
cause
a denial of service (out-of-bounds read) or possibly have unspecified other
impact via a crafted TrueType font.
http://code.google.com/p/google-security-research/issues/detail?id=195http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=eca0f067…
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=JxlmnOGyZ0&a=cc_unsubscribe
Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug.
Summary: Proper Bold for Lohit Devanagari
https://bugzilla.redhat.com/show_bug.cgi?id=648350
Summary: Proper Bold for Lohit Devanagari
Product: Fedora
Version: rawhide
Platform: All
OS/Version: All
Status: NEW
Severity: medium
Priority: low
Component: lohit-devanagari-fonts
AssignedTo: psatpute(a)redhat.com
ReportedBy: ujjwol(a)fedoraproject.org
QAContact: extras-qa(a)fedoraproject.org
CC: fonts-bugs(a)lists.fedoraproject.org,
psatpute(a)redhat.com, i18n-bugs(a)lists.fedoraproject.org
Classification: Fedora
Created attachment 456789
--> https://bugzilla.redhat.com/attachment.cgi?id=456789
Picture showing the bold and regular typeface
Description of problem:
The existing font provided Lohit Devangari only contains the regular version.
It does not contain the bold version. When the computer generates bold using
the regular font, and the results are ugly. The siro-rekha is broken and many
other stuffs are also broken.
Version-Release number of selected component (if applicable):
How reproducible:
Exactly reproducible
Steps to Reproduce:
1.See any hindi/nepali/marathi/sanskrit pages in firefox with bold text
2. type devanagari text in openoffice and bold it
Actual results:
The a broken lohit devanagari font is displayed.
Expected results:
A well maintained bold should be shown.
Additional info:
The typographic value is lost when bold is used though it is still readable.
--
Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=1192818
Bug ID: 1192818
Summary: PT Sans OFL files have wrong Rupee sign
Product: Fedora
Version: 21
Component: paratype-pt-sans-fonts
Assignee: nicolas.mailhot(a)laposte.net
Reporter: rajeeshknambiar(a)gmail.com
QA Contact: extras-qa(a)fedoraproject.org
CC: fonts-bugs(a)lists.fedoraproject.org,
nicolas.mailhot(a)laposte.net, paul(a)frixxon.co.uk,
pnemade(a)redhat.com
Description of problem:
PT Sans ttf files (from the OFL source archive) have wrong glyph (Ruble) in
place of Indian Rupee (currency sybmbol U+20B9). Websites with rupee character
falls back to PT Sans and shows Ruble sign as fontconfig priority is higher
than most Indic fonts.
Version-Release number of selected component (if applicable):
20101909-5.fc2
How reproducible:
Always
Steps to Reproduce:
1.
2.
3.
Actual results:
Ruble sign is shown in place of Rupee sign.
Expected results:
Rupee sign (₹) is displayed.
Additional info:
Contacted upstream (fonts at paratype dot com) and they have directed to the
fonts available at http://www.paratype.com/public/. The files at
http://www.paratype.com/uni/public/PTSans.zip indeed are fixed. OFL versions of
PT Serif and PT Mono are ok.
I understand Fedora prefers the OFL version, is there an alternative?
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=Sqpy3V088J&a=cc_unsubscribe