[Bug 450773] CVE-2008-1807 FreeType invalid free() flaw

2008-06-18 Thread bugzilla
Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug report.

Summary: CVE-2008-1807 FreeType invalid free() flaw
Alias: CVE-2008-1807

https://bugzilla.redhat.com/show_bug.cgi?id=450773


Bug 450773 depends on bug 451212, which changed state.

Bug 451212 Summary: CVE-2008-1806 CVE-2008-1807 CVE-2008-1808 Multiple freetype 
vulnerabilities [Fedora 8]
https://bugzilla.redhat.com/show_bug.cgi?id=451212

   What|Old Value   |New Value

 Status|MODIFIED|CLOSED
 Resolution||CURRENTRELEASE



--- Additional Comments From [EMAIL PROTECTED]  2008-06-18 02:55 EST ---
Hi All,

I see that an update for this for freetype2 has been released, good! I still
need to push the freetype1 builds fixing some of the same issues through bodhi.

But I needs some help to know what (and which CVE's) to put in bodhi.

I know that not all issues apply to freetype1 due to it not having support for
bdf and type1 fonts, still some parts of the patch provided here did apply to
freetype1 (and more then just the BCI fix).

I'll attach the backported patch here, and hope that some of you can shed some
light on this. I cannot find out what to put in the advisory myself, as the
parts of the patch that have been backported do not seem to match any of the CVE
descriptions.


-- 
Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are on the CC list for the bug, or are watching someone who is.

___
Fedora-fonts-bugs-list mailing list
Fedora-fonts-bugs-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-fonts-bugs-list


[Bug 450773] CVE-2008-1807 FreeType invalid free() flaw

2008-06-18 Thread bugzilla
Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug report.

Summary: CVE-2008-1807 FreeType invalid free() flaw
Alias: CVE-2008-1807

https://bugzilla.redhat.com/show_bug.cgi?id=450773





--- Additional Comments From [EMAIL PROTECTED]  2008-06-18 03:21 EST ---
Hans, moving this discussion to the bug for CVE-2008-1808, as it better fits
there.  For reply, see:

https://bugzilla.redhat.com/show_bug.cgi?id=450774#c13

-- 
Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are on the CC list for the bug, or are watching someone who is.

___
Fedora-fonts-bugs-list mailing list
Fedora-fonts-bugs-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-fonts-bugs-list


[Bug 16792] [GTK] Fails to render Japanese/Chinese text with simple path

2008-06-18 Thread bugzilla-daemon
https://bugs.webkit.org/show_bug.cgi?id=16792





--- Comment #6 from [EMAIL PROTECTED]  2008-06-18 17:50 PDT ---
I think this workaround doesn't actually work, or works with a major flaw--it
just causes the font matching to always match Arial Unicode MS, even when I
specify font face=Serif.

(In reply to comment #2)
 Bin Chen tracked down the issue. The problem is font fallback. A very simple
 workaround (substitute Arial Unicode MS with any full-Unicode font you have
 on your system):
 
 
 Index: WebCore/platform/graphics/gtk/FontPlatformDataGtk.cpp
 ===
 --- WebCore/platform/graphics/gtk/FontPlatformDataGtk.cpp   (revision
 30082)
 +++ WebCore/platform/graphics/gtk/FontPlatformDataGtk.cpp   (working copy)
 @@ -81,6 +81,8 @@ FontPlatformData::FontPlatformData(const
 
  if (!FcPatternAddString(pattern, FC_FAMILY, reinterpret_castconst
 FcChar8*(fcfamily)))
  goto freePattern;
 +if (!FcPatternAddString(pattern, FC_FAMILY, reinterpret_castconst
 FcChar8*(Arial Unicode MS)))
 +goto freePattern;
  if (!FcPatternAddInteger(pattern, FC_SLANT, fcslant))
  goto freePattern;
  if (!FcPatternAddInteger(pattern, FC_WEIGHT, fcweight))
 
 
 
 
 We haven't figured out what the correct fix for this is yet. (Perhaps the 
 Pango
 font selection patch would have helped here, but it has not been 
 re-submitted.)
 


-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are on the CC list for the bug, or are watching someone who is.

___
Fedora-fonts-bugs-list mailing list
Fedora-fonts-bugs-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-fonts-bugs-list