[FFe] Sync freetype 2.4.6-2 (main) from Debian unstable (main)

Bug #844601 reported by Rex Tsai
20
This bug affects 3 people
Affects Status Importance Assigned to Milestone
freetype (Ubuntu)
Fix Released
Undecided
Unassigned

Bug Description

Please sync freetype 2.4.6-2 (main) from Debian unstable (main)

FreeType 2.4.6[1] and 2.4.5[2] has been released, this version fixed several
issues. Also fixed broken cjk fonts renderring in evince and other software.

Highlights from changelog
    - For TrueType based fonts, the ascender and descender values were
      incorrect sometimes (off by a pixel if the ppem value was not a
      multiple of 5). Depending on the use you might now experience
      a different layout; the change should result in better, more
      consistent line spacing.

    - Fix CVE-2011-0226 which causes a vulnerability while handling
      Type 1 fonts.

    - BDF fonts containing glyphs with negative values for ENCODING
      were incorrectly rejected. This bug has been introduced in
      FreeType version 2.2.0.

    - David Bevan contributed a major revision of the FreeType stroker
      code:

      . The behaviour of FT_STROKER_LINEJOIN_BEVEL has been corrected.

      . A new line join style, FT_STROKER_LINEJOIN_MITER_FIXED, has
        been introduced to support PostScript and PDF miter joins.

      . FT_STROKER_LINEJOIN_MITER_VARIABLE has been introduced as an
        alias for FT_STROKER_LINEJOIN_MITER.

      . Various stroking glitches has been fixed.

    - A rendering regression for second-order Bézier curves has been
      fixed, introduced in 2.4.3.

    - If autohinting is not explicitly disabled, FreeType now uses
      the autohinter if a TrueType based font doesn't contain native
      hints.

    - The load flag FT_LOAD_IGNORE_GLOBAL_ADVANCE_WIDTH has been made
      redundant and is simply ignored; this means that FreeType now
      ignores the global advance width value in TrueType fonts.

    - Again some fixes to better handle broken fonts.

    - Just Fill Bugs contributed (experimental) code to compute blue
      zones for CJK Ideographs, improving the alignment of horizontal
      stems at the top or bottom edges.

[1] https://sourceforge.net/projects/freetype/files/freetype2/2.4.6/README/view
[2] https://sourceforge.net/projects/freetype/files/freetype2/2.4.5/README/view

Changelog entries since current oneiric version 2.4.4-2ubuntu1:

freetype (2.4.6-2) unstable; urgency=low

  * debian/patches-freetype/0001-Fix-Savannah-bug-33992.patch: [PATCH]
    Fix Savannah bug #33992. Thanks to David Bevan
    <email address hidden>. Closes: #638348.

 -- Steve Langasek <email address hidden> Sat, 20 Aug 2011 06:30:18 +0000

freetype (2.4.6-1) unstable; urgency=low

  * New upstream release
    - fixes CVE-2011-0226, a vulnerability in parsing of Type 1 fonts.
      Closes: #635871.
    - upstream now builds cleanly with -Werror and the new gcc-4.6 upstream
      warnings. Closes: #625328.

 -- Steve Langasek <email address hidden> Thu, 04 Aug 2011 05:49:09 +0000

Revision history for this message
Rex Tsai (chihchun) wrote :
description: updated
Revision history for this message
Rex Tsai (chihchun) wrote :
Revision history for this message
Martin Pitt (pitti) wrote :

This looks fine to me, as it is only bug fixes. However, it is a rather central library with a lot of rdepends. How much has this been tested in oneiric with GNOME, KDE, and XFCE?

Revision history for this message
Rex Tsai (chihchun) wrote :

I am testing freetype 2.4.6 from my ppa[1] in oneiric with GNOME since last week, works fine for me. Need more test though.

[1] https://launchpad.net/~chihchun/+archive/experimental

Revision history for this message
Keng-Yu Lin (lexical) wrote :

using the ppa above, it fixes the broken Chinese font issue as described in bug 209145 in my testing.

Revision history for this message
Martin Pitt (pitti) wrote :

Thanks Rex and Keng-Yü Lin! Would anyone be able to test the PPA with the new fontconfig on Kubuntu?

Changed in freetype (Ubuntu):
status: New → Confirmed
Revision history for this message
Rex Tsai (chihchun) wrote :

Upstream/Debian has 2.4.8-1 available, which fix two CVE security issue. Please sync with latest version.

http://packages.debian.org/sid/libfreetype6
http://packages.debian.org/changelogs/pool/main/f/freetype/freetype_2.4.8-1/changelog

Revision history for this message
Steve Langasek (vorlon) wrote :

freetype 2.4.8-1 is already in precise.

Changed in freetype (Ubuntu):
status: Confirmed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.