-
pango1.0 (1.20.5-0ubuntu1.2) hardy-security; urgency=low
* SECURITY UPDATE: denial of service via crafted font file
- debian/patches/14_security_CVE-2010-0421.patch: validate glyphs in
pango/opentype/harfbuzz-gdef.c.
- CVE-2010-0421
* SECURITY UPDATE: denial of service and possible code execution via
crafted font file (LP: #696616)
- debian/patches/15_security_CVE-2011-0020.patch: check for overflow in
pango/pangoft2-render.c.
- CVE-2011-0020
-- Marc Deslauriers <email address hidden> Tue, 01 Mar 2011 11:02:04 -0500
-
pango1.0 (1.20.5-0ubuntu1.1) hardy-security; urgency=low
* SECURITY UPDATE: Possible remote code execution via integer overflow
with very long glyphstrings
- debian/patches/13_security_CVE-2009-1194.patch: check length so we
don't overflow in pango/glyphstring.c.
- CVE-2009-1194
-- Marc Deslauriers <email address hidden> Tue, 05 May 2009 10:52:11 -0400
-
pango1.0 (1.20.5-0ubuntu1) hardy-proposed; urgency=low
* New upstream version (lp: #245212)
-- Sebastien Bacher <email address hidden> Thu, 03 Jul 2008 16:22:10 +0200
-
pango1.0 (1.20.1-1) unstable; urgency=low
* New upstream bugfix release.
-- Sebastien Bacher <email address hidden> Wed, 09 Apr 2008 15:51:46 +0100
-
pango1.0 (1.20.0-1) unstable; urgency=low
* New upstream stable release:
+ debian/rules:
- Upload to unstable, drop check-dist include.
pango1.0 (1.19.4-1) experimental; urgency=low
* New upstream release, the new API may still change incompatibly.
-- Sebastien Bacher <email address hidden> Tue, 11 Mar 2008 15:59:52 +0000
-
pango1.0 (1.19.4-0ubuntu1) hardy; urgency=low
* New upstream release.
- Refresh patch 30_anymetrics to apply cleanly.
- Upstream NEWS:
. Fixed blocker bug with pango_layout_set_height() and positive height.
. Fixed small leak in ATSUI backend.
. Improved docs.
. Bugs fixes.
-- Loic Minier <email address hidden> Tue, 26 Feb 2008 12:20:37 +0100
-
pango1.0 (1.19.3-1ubuntu1) hardy; urgency=low
* Sync with Debian; Ubuntu changes are:
- Add patch 30_anymetrics, turns on FC_ANY_METRICS whenever looking up
fonts with fontconfig; lets fontconfig's configuration know that we
don't care about getting a font with exactly the same shape as the
family we asked for and fixes (eg) a firefox vs. evince font metrics
ugliness issue.
* Refresh 30_anymetrics to apply cleanly.
-- Loic Minier <email address hidden> Tue, 22 Jan 2008 18:47:55 +0100
-
pango1.0 (1.19.2-1ubuntu1) hardy; urgency=low
* Sync with Debian; Ubuntu changes are:
- Add patch 30_anymetrics, turns on FC_ANY_METRICS whenever looking up
fonts with fontconfig; lets fontconfig's configuration know that we
don't care about getting a font with exactly the same shape as the
family we asked for and fixes (eg) a firefox vs. evince font metrics
ugliness issue.
-- Loic Minier <email address hidden> Tue, 18 Dec 2007 21:11:37 +0100
-
pango1.0 (1.19.1-1ubuntu1) hardy; urgency=low
* Sync with Debian; Ubuntu changes are:
- Add patch 30_anymetrics, turns on FC_ANY_METRICS whenever looking up
fonts with fontconfig; lets fontconfig's configuration know that we
don't care about getting a font with exactly the same shape as the
family we asked for and fixes (eg) a firefox vs. evince font metrics
ugliness issue.
-- Loic Minier <email address hidden> Tue, 04 Dec 2007 09:27:40 +0100
-
pango1.0 (1.19.0-1ubuntu1) hardy; urgency=low
* Sync with Debian; Ubuntu changes are:
- Add patch 30_anymetrics, turns on FC_ANY_METRICS whenever looking up
fonts with fontconfig; lets fontconfig's configuration know that we
don't care about getting a font with exactly the same shape as the
family we asked for and fixes (eg) a firefox vs. evince font metrics
ugliness issue.
-- Loic Minier <email address hidden> Thu, 01 Nov 2007 17:34:39 +0100
-
pango1.0 (1.18.2-0ubuntu1) gutsy; urgency=low
* New upstream version:
- Require libthai >= 0.1.9 for enabling thai-lang module
- Misc bug fixes
- Bugs fixed in this release:
Bug 474708 – pangocairo leaks memory
Bug 472891 – Bad consistency check in pango_get_log_attrs
Bug 302952 – The placement of a diacritic marks for an arabic ligature
is not correct
Bug 410152 – testboundaries test fails
* debian/control.in:
- updated libthai requirement
-- Sebastien Bacher <email address hidden> Tue, 18 Sep 2007 23:24:12 +0200
