Re: [BLFS Trac] #23573: libXfont2-2.0.8 (Xorg library)

#23573: libXfont2-2.0.8 (Xorg library)
-------------------------+------------------------
 Reporter:  Bruce Dubbs  |       Owner:  blfs-book
     Type:  enhancement  |      Status:  new
 Priority:  elevated     |   Milestone:  13.1
Component:  BOOK         |     Version:  git
 Severity:  normal       |  Resolution:
 Keywords:               |
-------------------------+------------------------
Changes (by Joe Locash):

 * priority:  normal => elevated

Comment:

 {{{
 This release contains the fixes for the issues reported in today's
 security advisory:

 https://lists.x.org/archives/xorg-announce/2026-July/003714.html

   - CVE-2026-56001: BitmapScaleBitmaps Integer Overflow Heap Buffer
 Overflow
   - CVE-2026-56002: PCF Font Parsing Heap Buffer Overflow
   - CVE-2026-56003: computeProps Property Buffer Heap Buffer Overflow

 Additionally it contains a number of minor cleanup patches and the
 removal of a decades-obsolete compat API.

 Adam Jackson (3):
       freetype: Fix encoding string assembly
       freetype: Remove misguided ifdef around BDF charset query
       fontfile: Remove ridiculously old compat API

 Alan Coopersmith (2):
       gitlab CI: drop the ci-fairy check-mr job
       gitlab CI: move back to Debian stable image

 Peter Hutterer (12):
       pcfread: fix strings memory leak in pcfGetProperties error path
       bdfread: fix copy-paste error in RESOLUTION_X/Y property generation
       bdfread: fix BDF_GENPROPS undercount causing heap buffer overflow
       fsio: fix unchecked realloc
       render: use calloc for FontRec to prevent use of uninitialized
 memory
       freetype: Remove premature break in find_cmap() Unicode fallback
       bitscale: fix integer overflow in BitmapScaleBitmaps bytestoalloc
       pcfread: validate bitmap sizes and offsets against per-glyph metrics
       bitscale: add bounds check to computeProps for property buffer
       test: fix stubs in font-test-utils for use outside the X server
       test: add PCF security regression tests
       libXfont2 2.0.8

 git tag: libXfont2-2.0.8
 }}}
-- 
Ticket URL: <https://wiki.linuxfromscratch.org/blfs/ticket/23573#comment:1>
BLFS Trac <https://wiki.linuxfromscratch.org/blfs/>
Beyond Linux From Scratch

-- 
http://lists.linuxfromscratch.org/sympa/info/blfs-book
Unsubscribe: See the above information page