[Touch-packages] [Bug 145604] Re: VRGB sub-pixel hinting causes black-on-black text rendering
nice. http://www.hairvitamins6.com http://www.uaegoldpricetoday.com http://www.saudigoldpricetoday.com -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to cairo in Ubuntu. https://bugs.launchpad.net/bugs/145604 Title: VRGB sub-pixel hinting causes black-on-black text rendering Status in libcairo: Unknown Status in cairo package in Ubuntu: Triaged Status in compiz package in Ubuntu: Invalid Status in compiz-fusion-plugins-main package in Ubuntu: Invalid Bug description: Binary package hint: libcairo2 There is a long-standing problem (Gutsy, Hardy, Intrepid - possibly Jaunty too) with sub-pixel rendering which affects metacity or compiz composition (see the images attached to this bug) when VRGB is chosen as the sub-pixel format. Comment #15 by MoMaT demonstrates a non- compiz scenario. My comments #2 and #10 demonstrate the issue with Compiz enabled. The underlying issue essentially seems to be: where should sub-pixel rendering should be done - in libcairo or in the font renderer (FreeType in this case) ? There have been two versions of the Ubuntu patch in libcairo/libcairo2. Reports seem to suggest that both versions may be responsible for the VRGB problem (however, that supposition needs checking - see Bob McElrath's comment #19). We need to be aware that libcairo (libcairo 1.5.4 in Universe) and libcairo2 (cairo 1.6.0 in Main) are similarly patched and will need similar fixes. To manage notifications about this bug go to: https://bugs.launchpad.net/libcairo/+bug/145604/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 164640] Re: Build Firefox 3 against a subpixel-patched cairo
great work. http://www.hairvitamins6.com http://www.uaegoldpricetoday.com http://www.saudigoldpricetoday.com -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to fontconfig in Ubuntu. https://bugs.launchpad.net/bugs/164640 Title: Build Firefox 3 against a subpixel-patched cairo Status in Fontconfig: Fix Released Status in libcairo: Unknown Status in fontconfig package in Ubuntu: Fix Released Status in libcairo package in Ubuntu: Fix Released Status in xulrunner-1.9 package in Ubuntu: Fix Released Bug description: Binary package hint: firefox-3.0 In Ubuntu 7.10 and newer, Firefox 3.0 looks out of place with subpixel rendering enabled, due to the fact that it uses an unpatched, bundled version of Cairo. The patch should be ported to Cairo 1.5 and applied in the firefox-3.0 package. To manage notifications about this bug go to: https://bugs.launchpad.net/fontconfig/+bug/164640/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1639372] Re: CVE-2016-9082: DOS attack in converting SVG to PNG
very good post. http://www.hairvitamins6.com http://www.uaegoldpricetoday.com http://www.saudigoldpricetoday.com -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to cairo in Ubuntu. https://bugs.launchpad.net/bugs/1639372 Title: CVE-2016-9082: DOS attack in converting SVG to PNG Status in cairo: Unknown Status in cairo package in Ubuntu: Fix Released Status in cairo source package in Precise: Won't Fix Status in cairo source package in Trusty: Confirmed Status in cairo source package in Xenial: Fix Released Status in cairo source package in Yakkety: Confirmed Status in cairo package in Debian: Fix Released Bug description: I'm attaching debdiffs for trusty, xenial and yakkety. Zesty is already fixed by syncing cairo 1.14.6-1.1 from Debian. Maybe someone else can work on the precise update. Proof of Concept at http://seclists.org/oss-sec/2016/q4/44 I didn't get gdb to work, but when I tried to convert the file, I got a crash report named /var/crash/_usr_bin_rsvg-convert.1000.crash . After the update, no crash happened. I reproduced the crash and verified that the new package doesn't crash on yakkety. In xenial I wasn't able to reproduce the crash. I did not test on trusty. To manage notifications about this bug go to: https://bugs.launchpad.net/cairo/+bug/1639372/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
