-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 libXfont provides the core of the legacy X11 font system, handling the index files (fonts.dir, fonts.alias, fonts.scale), the various font file formats, and rasterizing them. It is used by the X servers, the X Font Server (xfs), and some font utilities (bdftopcf for instance), but should not be used by normal X11 clients. X11 clients access fonts via either the new API's in libXft, or the legacy API's in libX11.
The major change in this release is a fix for: LZW decompress: fix for CVE-2011-2895 Specially crafted LZW stream can crash an application using libXfont that is used to open untrusted font files. With X server, this may allow privilege escalation when exploited More information about this security issue can be found in the advisory at: http://lists.freedesktop.org/archives/xorg-announce/2011-August/001721.html Alan Coopersmith (2): Sun's copyrights belong to Oracle now Fix memory leak in allocation failure path of BitmapOpenScalable() Gaetan Nadon (4): config: HTML file generation: use the installed copy of xorg.css config: remove AC_PROG_CC as it overrides AC_PROG_C_C99 config: comment, minor upgrade, quote and layout configure.ac doc: use common makefile for developers documentation Matthieu Herrb (1): libXfont 1.4.4 Paulo Zanoni (1): Use docbookx.dtd version 4.3 for all docs Thomas Hoger (1): LZW decompress: fix for CVE-2011-2895 git tag: libXfont-1.4.4 http://xorg.freedesktop.org/archive/individual/lib/libXfont-1.4.4.tar.bz2 MD5: f9942bc818d39094d7295b156a729393 SHA1: 189dd7a3756cb80bcf41b779bf05ec3c366e3041 SHA256: a2065f5f66882f7a9cb0eb674e16d284da48e449af443eda272e99832be8239a http://xorg.freedesktop.org/archive/individual/lib/libXfont-1.4.4.tar.gz MD5: 21312cee1347deaca18453f70c272ab0 SHA1: e5db2aaf6f35a28efdb0ef24e8839a5cd8f7d84d SHA256: c52a978748d12ba0bbf54e60542e8e2ae5b624821e02b78cd2dc30b2aa9bb804 - -- -Alan Coopersmith- alan.coopersm...@oracle.com Oracle Solaris Platform Engineering: X Window System -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.17 (SunOS) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk5DDw0ACgkQovueCB8tEw6HwQCaA46BZnpP5Uvt9qkmmdE/u5o6 SsMAn1DK3Y8nIeu0fqL5WsgRL9oztlcs =BD1h -----END PGP SIGNATURE----- _______________________________________________ xorg@lists.freedesktop.org: X.Org support Archives: http://lists.freedesktop.org/archives/xorg Info: http://lists.freedesktop.org/mailman/listinfo/xorg Your subscription address: arch...@mail-archive.com