[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

250039

 
 

909

 
 

195882

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

SUSE-SU-2020:1353-1 -- SLES freetype2, libfreetype6

ID: oval:org.secpod.oval:def:89050361Date: (C)2023-10-10   (M)2023-10-10
Class: PATCHFamily: unix




This update for freetype2 to version 2.10.1 fixes the following issues: Security issue fixed: - CVE-2018-6942: Fixed a NULL pointer dereference within ttinerp.c . Non-security issues fixed: - Update to version 2.10.1 * The bytecode hinting of OpenType variation fonts was flawed, since the data in the `CVAR" table wasn"t correctly applied. * Auto-hinter support for Mongolian. * The handling of the default character in PCF fonts as introduced in version 2.10.0 was partially broken, causing premature abortion of charmap iteration for many fonts. * If `FT_Set_Named_Instance" was called with the same arguments twice in a row, the function returned an incorrect error code the second time. * Direct rendering using FT_RASTER_FLAG_DIRECT crashed . * Increased precision while computing OpenType font variation instances. * The flattening algorithm of cubic Bezier curves was slightly changed to make it faster. This can cause very subtle rendering changes, which aren"t noticeable by the eye, however. * The auto-hinter now disables hinting if there are blue zones defined for a `style" but the font doesn"t contain any characters needed to set up at least one blue zone. - Add tarball signatures and freetype2.keyring - Update to version 2.10.0 * A bunch of new functions has been added to access and process COLR/CPAL data of OpenType fonts with color-layered glyphs. * As a GSoC 2018 project, Nikhil Ramakrishnan completely overhauled and modernized the API reference. * The logic for computing the global ascender, descender, and height of OpenType fonts has been slightly adjusted for consistency. * `TT_Set_MM_Blend" could fail if called repeatedly with the same arguments. * The precision of handling deltas in Variation Fonts has been increased.The problem did only show up with multidimensional designspaces. * New function `FT_Library_SetLcdGeometry" to set up the geometry of LCD subpixels. * FreeType now uses the `defaultChar" property of PCF fonts to set the glyph for the undefined character at glyph index 0 . As a consequence, the order of glyphs of a PCF font if accessed with FreeType can be different now compared to previous versions. This change doesn"t affect PCF font access with cmaps. * `FT_Select_Charmap" has been changed to allow parameter value `FT_ENCODING_NONE", which is valid for BDF, PCF, and Windows FNT formats to access built-in cmaps that don"t have a predefined `FT_Encoding" value. * A previously reserved field in the `FT_GlyphSlotRec" structure now holds the glyph index. * The usual round of fuzzer bug fixes to better reject malformed fonts. * `FT_Outline_New_Internal" and `FT_Outline_Done_Internal" have been removed.These two functions were public by oversight only and were never documented. * A new function `FT_Error_String" returns descriptions of error codes if configuration macro FT_CONFIG_OPTION_ERROR_STRINGS is defined. * `FT_Set_MM_WeightVector" and `FT_Get_MM_WeightVector" are new functions limited to Adobe MultiMaster fonts to directly set and get the weight vector. - Enable subpixel rendering with infinality config: - Re-enable freetype-config, there is just too many fallouts. - Update to version 2.9.1 * Type 1 fonts containing flex features were not rendered correctly . * CVE-2018-6942: Older FreeType versions can crash with certain malformed variation fonts. * Bug fix: Multiple calls to `FT_Get_MM_Var" returned garbage. * Emboldening of bitmaps didn"t work correctly sometimes, showing various artifacts . * The auto-hinter script ranges have been updated for Unicode 11. No support for new scripts have been added, however, with the exception of Georgian Mtavruli. - freetype-config is now deprecated by upstream and not enabled by default. - Update to version 2.10.1 * The `ftmulti" demo program now supports multiple hidden axes with the same name tag. * `ftview", `ftstring", and `ftgrid" got a `-k" command line option to emulate a sequence of keystrokes at start-up. * `ftview", `ftstring", and `ftgrid" now support screen dumping to a PNG file. * The bytecode debugger, `ttdebug", now supports variation TrueType fonts; a variation font instance can be selected with the new `-d" command line option. - Add tarball signatures and freetype2.keyring - Update to version 2.10.0 * The `ftdump" demo program has new options `-c" and `-C" to display charmaps in compact and detailed format, respectively. Option `-V" has been removed. * The `ftview", `ftstring", and `ftgrid" demo programs use a new command line option `-d" to specify the program window"s width, height, and color depth. * The `ftview" demo program now displays red boxes for zero-width glyphs. * `ftglyph" has limited support to display fonts with color-layered glyphs.This will be improved later on. * `ftgrid" can now display bitmap fonts also. * The `ttdebug" demo program has a new option `-f" to select a member of a TrueType collection . * Other various improvements to the demo programs. - Remove "Supplements: fonts-config" to avoid accidentally pulling in Qt dependencies on some non-Qt based desktops. fonts-config is fundamental but ft2demos seldom installs by end users. only fonts-config maintainers/debuggers may use ft2demos along to debug some issues. - Update to version 2.9.1 * No changelog upstream.

Platform:
SUSE Linux Enterprise Desktop 15 SP1
SUSE Linux Enterprise Server 15 SP1
Product:
freetype2
libfreetype6
Reference:
SUSE-SU-2020:1353-1
CVE-2018-6942
CVE    1
CVE-2018-6942
CPE    3
cpe:/o:suse:suse_linux_enterprise_server:15:sp1
cpe:/a:freetype:freetype2
cpe:/a:freetype:libfreetype6

© SecPod Technologies