--- libxfont-2.0.1.orig/autogen.sh +++ libxfont-2.0.1/autogen.sh @@ -0,0 +1,14 @@ +#! /bin/sh + +srcdir=`dirname $0` +test -z "$srcdir" && srcdir=. + +ORIGDIR=`pwd` +cd $srcdir + +autoreconf -v --install || exit 1 +cd $ORIGDIR || exit $? + +if test -z "$NOCONFIGURE"; then + $srcdir/configure "$@" +fi --- libxfont-2.0.1.orig/debian/README.source +++ libxfont-2.0.1/debian/README.source @@ -0,0 +1,49 @@ +------------------------------------------------------ +Quick Guide To Patching This Package For The Impatient +------------------------------------------------------ + +1. Make sure you have quilt installed +2. Unpack the package as usual with "dpkg-source -x" +3. Run the "patch" target in debian/rules +4. Create a new patch with "quilt new" (see quilt(1)) +5. Edit all the files you want to include in the patch with "quilt edit" + (see quilt(1)). +6. Write the patch with "quilt refresh" (see quilt(1)) +7. Run the "clean" target in debian/rules + +Alternatively, instead of using quilt directly, you can drop the patch in to +debian/patches and add the name of the patch to debian/patches/series. + +------------------------------------ +Guide To The X Strike Force Packages +------------------------------------ + +The X Strike Force team maintains X packages in git repositories on +git.debian.org in the pkg-xorg subdirectory. Most upstream packages +are actually maintained in git repositories as well, so they often +just need to be pulled into git.debian.org in a "upstream-*" branch. +Otherwise, the upstream sources are manually installed in the Debian +git repository. + +The .orig.tar.gz upstream source file could be generated this +"upstream-*" branch in the Debian git repository but it is actually +copied from upstream tarballs directly. + +Due to X.org being highly modular, packaging all X.org applications +as their own independent packages would have created too many Debian +packages. For this reason, some X.org applications have been grouped +into larger packages: xutils, xutils-dev, x11-apps, x11-session-utils, +x11-utils, x11-xfs-utils, x11-xkb-utils, x11-xserver-utils. +Most packages, including the X.org server itself and all libraries +and drivers are, however maintained independently. + +The Debian packaging is added by creating the "debian-*" git branch +which contains the aforementioned "upstream-*" branch plus the debian/ +repository files. +When a patch has to be applied to the Debian package, two solutions +are involved: +* If the patch is available in one of the upstream branches, it + may be git'cherry-picked into the Debian repository. In this + case, it appears directly in the .diff.gz. +* Otherwise, the patch is added to debian/patches/ which is managed + with quilt as documented in /usr/share/doc/quilt/README.source. --- libxfont-2.0.1.orig/debian/changelog +++ libxfont-2.0.1/debian/changelog @@ -0,0 +1,414 @@ +libxfont (1:2.0.1-4) unstable; urgency=high + + * Check for end of string in PatternMatch (CVE-2017-13720) + * pcfGetProperties: Check string boundaries (CVE-2017-13722) + + -- Julien Cristau Fri, 06 Oct 2017 22:19:41 +0200 + +libxfont (1:2.0.1-3) unstable; urgency=medium + + [ Andreas Boll ] + * Remove dh-autoreconf build-dep. Not needed with debhelper 10. + * Remove obsolete Conflicts from pre-wheezy. + * Update a bunch of URLs in packaging to https. + * Remove superfluous --libdir from dh_auto_configure. Not needed with + debhelper compat level >= 9. + + -- Timo Aaltonen Thu, 24 Nov 2016 21:27:58 +0200 + +libxfont (1:2.0.1-2) unstable; urgency=medium + + * Switch to -dbgsym packages. + * Bump debhelper compat to 10. Drop --with quilt and --parallel flags, + they are enabled by default now. + * Upload to unstable. + + -- Emilio Pozuelo Monfort Tue, 22 Nov 2016 23:50:03 +0100 + +libxfont (1:2.0.1-1) experimental; urgency=medium + + * Team upload. + * New upstream release. + * Add Keith Packard's key to debian/upstream/signing-key.asc. + * watch: Updated to match upstream rename to libXfont2. + * control, rules, *.install: Changes to match new soname. + * control: Add myself to uploaders. + + -- Timo Aaltonen Wed, 28 Sep 2016 15:12:22 +0300 + +libxfont (1:1.5.2-1) unstable; urgency=medium + + * Team upload. + * New upstream release. + * Use https URL in watch file. + * Add Adam Jackson's key to debian/upstream/signing-key.asc. + * Bump Standards-Version to 3.9.8. + * Use https URLs in Vcs-* control fields. + * Remove Drew from Uploaders. + + -- Julien Cristau Sat, 24 Sep 2016 12:46:32 +0200 + +libxfont (1:1.5.1-1) unstable; urgency=high + + * New upstream release + + bdfReadProperties: property count needs range check [CVE-2015-1802] + + bdfReadCharacters: bailout if a char's bitmap cannot be read + [CVE-2015-1803] + + bdfReadCharacters: ensure metrics fit into xCharInfo struct + [CVE-2015-1804] + + -- Julien Cristau Tue, 17 Mar 2015 16:55:21 +0100 + +libxfont (1:1.4.99.901-1) unstable; urgency=medium + + * New upstream release candidate. + + includes the CVE-2014-{0209,0210,0211} patches + * Remove Cyril from Uploaders. + * Allow uscan to verify tarball signature. + + -- Julien Cristau Sat, 12 Jul 2014 17:44:11 +0200 + +libxfont (1:1.4.7-2) unstable; urgency=high + + * Pull from upstream git to fix FTBFS with new fontsproto (closes: #746052) + * CVE-2014-0209: integer overflow of allocations in font metadata + * CVE-2014-0210: unvalidated length fields when parsing xfs protocol replies + * CVE-2014-0211: integer overflows calculating memory needs for xfs replies + * Add breaks on xfs because we broke it by disabling font protocol support + in 1.4.7. + + -- Julien Cristau Tue, 13 May 2014 17:25:49 +0200 + +libxfont (1:1.4.7-1) unstable; urgency=high + + * New upstream release + + CVE-2013-6462: unlimited sscanf overflows stack buffer in + bdfReadCharacters() + * Don't put dbg symbols from the udeb in the dbg package. + * dev package is no longer Multi-Arch: same (closes: #720026). + * Disable support for connecting to a font server. That code is horrible and + full of holes. + + -- Julien Cristau Tue, 07 Jan 2014 17:51:29 +0100 + +libxfont (1:1.4.6-1) unstable; urgency=low + + * New upstream release. + * Build for multiarch (closes: #654252). Patch by Riku Voipio, thanks! + * Disable silent build rules. + + -- Julien Cristau Mon, 12 Aug 2013 18:28:57 +0200 + +libxfont (1:1.4.5-2) unstable; urgency=low + + * Ease sync for Ubuntu: strip -Bsymbolic-functions from LDFLAGS + (LP: #992745). + + -- Cyril Brulebois Thu, 03 May 2012 19:59:46 +0200 + +libxfont (1:1.4.5-1) unstable; urgency=low + + [ Cyril Brulebois ] + * New upstream release. + * Switch to dh: + - Bump debhelper build-dep and compat. + - Rewrite debian/rules, using autoreconf and quilt sequences. + - Adjust build dependencies accordingly. + - Use build-main and build-udeb as build directories. + - Adjust .install accordingly. + * Remove xsfbs accordingly. + * Add support for hardened build flags through dpkg-buildflags, based + on a patch by Moritz Muehlenhoff, thanks! (Closes: #654154). + + [ Julien Cristau ] + * Remove David Nusinow from Uploaders. + + -- Cyril Brulebois Sun, 04 Mar 2012 09:24:59 +0000 + +libxfont (1:1.4.4-1) unstable; urgency=high + + [ Julien Cristau ] + * Drop Pre-Depends on x11-common (only needed for upgrades from the + monolith) and Replaces on xlibs-static-dev (hasn't existed in forever). + + [ Cyril Brulebois ] + * New upstream release: + - LZW decompress: fix for CVE-2011-2895. From the commit message: + “Specially crafted LZW stream can crash an application using libXfont + that is used to open untrusted font files. With X server, this may + allow privilege escalation when exploited.” + * Set urgency to “high” accordingly. + * Update debian/copyright from upstream COPYING. + * Bump xorg-sgml-doctools build-dep. + * Drop xorg.css from .install, no longer shipped upstream. + + -- Cyril Brulebois Thu, 11 Aug 2011 11:17:16 +0200 + +libxfont (1:1.4.3-2) unstable; urgency=low + + * Upload to unstable. + + -- Cyril Brulebois Sat, 05 Feb 2011 11:48:49 +0100 + +libxfont (1:1.4.3-1) experimental; urgency=low + + * New upstream release. + * Bump xutils-dev build-dep for new macros. + * Add xmlto, xorg-sgml-doctools, and w3m build-dep for the doc. + * Pass --with-xmlto and --without-fop for the regular build (we want + html and txt only). Disable both for the udeb build. + * Tweak doc filenames, and handle that through dh_install. + * Add --fail-missing -XlibXfont.la for the second dh_install call (the + udeb one), for additional safety. + + -- Cyril Brulebois Fri, 19 Nov 2010 01:17:48 +0100 + +libxfont (1:1.4.2-1) experimental; urgency=low + + * New upstream release. + * Bump xutils-dev build-dep for new xorg-macros. + * Bump shlibs for register_fpe_functions(). + * Update debian/copyright. + * Bump Standards-Version to 3.9.0, no changes. + + -- Julien Cristau Wed, 07 Jul 2010 18:25:15 +0100 + +libxfont (1:1.4.1-2) unstable; urgency=low + + [ Julien Cristau ] + * Rename the build directory to not include DEB_BUILD_GNU_TYPE for no + good reason. Thanks, Colin Watson! + * Remove myself from Uploaders + + [ Cyril Brulebois ] + * Use dh_makeshlibs’s -V argument instead of debian/libxfont1.shlibs + * Add udeb needed for the graphical installer: libxfont1-udeb. + * Version the B-D on libfontenc-dev to ensure libxfont1-udeb gets a + dependency on libfontenc1-udeb. + * Use a bzip2-less flavour for the udeb. + * Bump Standards-Version from 3.8.3 to 3.8.4 (no changes needed). + * Fix obsolete-relation-form-in-source by using “<<” instead of “<” for + xprint in Conflicts, thanks to lintian. + * Add myself to Uploaders. + + -- Cyril Brulebois Wed, 10 Mar 2010 20:05:31 +0100 + +libxfont (1:1.4.1-1) unstable; urgency=low + + * New upstream release. + * Bump xutils-dev build-dep for new util-macros. + * Build documentation, install it in libxfont-dev. + * Enable support for bzip2 compressed bitmap fonts. + * Don't use LDFLAGS from the environment. Ubuntu sets that to + -Bsymbolic-functions, which breaks libXfont's weak symbols usage. + + -- Julien Cristau Wed, 02 Dec 2009 11:12:13 +0100 + +libxfont (1:1.4.0-3) unstable; urgency=low + + * libxfont1 Conflicts: xprint (< 2:1.6.0-1). + The requiem release of xprint (1.6) will not conflict with + libxfont1. I am assured the garlic wreaths should prove most + efficacious at protecting the general public from the undead. + * Standards version 3.8.3. + + -- Drew Parsons Sat, 31 Oct 2009 11:29:34 +1100 + +libxfont (1:1.4.0-2) unstable; urgency=high + + * libxfont1 Conflicts with xprint, printer font support was removed upstream + in 1.4.0 (closes: #535952). + * Add README.source from xsfbs. Bump Standards-Version to 3.8.2. + + -- Julien Cristau Sun, 02 Aug 2009 13:36:46 +0200 + +libxfont (1:1.4.0-1) unstable; urgency=low + + * New upstream release. + * Move libxfont1-dbg to new section 'debug'. + + -- Julien Cristau Mon, 13 Apr 2009 12:11:23 +0100 + +libxfont (1:1.3.4-2) unstable; urgency=low + + * Update debian/copyright from upstream COPYING. + * Upload to unstable. + + -- Julien Cristau Mon, 16 Feb 2009 19:31:59 +0100 + +libxfont (1:1.3.4-1) experimental; urgency=low + + * Wrap build-deps in debian/control. + * Run autoreconf on build; build-dep on xutils-dev, autoconf, automake and + libtool. + * Handle parallel builds. + * New upstream release. + * Drop obsolete x11proto-fontcache-dev build-dependency. + + -- Julien Cristau Tue, 23 Dec 2008 15:06:37 +0100 + +libxfont (1:1.3.3-1) unstable; urgency=high + + [ Julien Cristau ] + * Drop dependency on x11-common from libxfont1{,-dbg}. + * New upstream bugfix release. + * Disable the type1 rasterizer and support for speedo font files. The + former is a security hazard, and Speedo fonts are disabled in the X server + since before etch anyway. + * Urgency high so the above gets in lenny. + + [ Brice Goglin ] + * Add upstream URL to debian/copyright. + * Add a link to www.X.org and a reference to the upstream module + in the long description. + + -- Julien Cristau Thu, 17 Jul 2008 22:50:03 +0200 + +libxfont (1:1.3.2-1) unstable; urgency=low + + * New upstream release + * Drop CVE-2008-0006.diff, included upstream. + + -- Julien Cristau Fri, 07 Mar 2008 13:32:43 +0100 + +libxfont (1:1.3.1-2) unstable; urgency=high + + * High urgency upload for security fix. + * Fix a buffer overflow in the PCF font parser (CVE-2008-0006). + * debian/control updates + + add myself to Uploaders, and remove Branden and Fabio with their + permission + + s/^XS-Vcs/Vcs/ + + bump Standards-Version to 3.7.3 (no changes) + + libxfont1 is Section: libs + + libxfont-dev and libxfont1-dbg are Section: libdevel + + -- Julien Cristau Thu, 17 Jan 2008 00:09:38 +0100 + +libxfont (1:1.3.1-1) unstable; urgency=low + + * New upstream release. + * Add libxfont1.shlibs, bump shlibs to >= 1:1.2.9. + + -- Julien Cristau Wed, 05 Sep 2007 22:45:57 +0200 + +libxfont (1:1.2.9-1) unstable; urgency=low + + * New upstream version. + - Add a new 'catalogue' FPE (font path element), which takes font + paths from symlinks in a dir. + * Use libxfont1 (= ${binary:Version}) instead of ${Source-Version} + in debian/control. + + -- Drew Parsons Sat, 23 Jun 2007 09:40:45 +1000 + +libxfont (1:1.2.8-1) unstable; urgency=low + + * Add XS-Vcs-Browser to debian/control. + * New upstream release. + + drop patch from 1:1.2.2-2, applied upstream. + * Upload to unstable. + + -- Julien Cristau Wed, 11 Apr 2007 15:52:11 +0200 + +libxfont (1:1.2.7-1) experimental; urgency=low + + * New upstream release. + * Add XS-Vcs-Git header to debian/control, and drop obsolete CVS information. + * Install the upstream ChangeLog. + + -- Julien Cristau Fri, 16 Feb 2007 14:32:57 +0100 + +libxfont (1:1.2.2-2) unstable; urgency=high + + * Grab patch from upstream git to fix security issues: + + CVE-2007-1351: BDFFont Parsing Integer Overflow + + CVE-2007-1352: fonts.dir File Parsing Integer Overflow + + -- Julien Cristau Tue, 03 Apr 2007 19:31:24 +0200 + +libxfont (1:1.2.2-1) unstable; urgency=high + + * New upstream version. + - closes security bug in CID encoded fonts (iDefense CVE-ID + 2006-3739, 2006-3740) + - applies patches 10_freetype_buffer_overflow.patch, 10_pcf_font.patch + * dbg package has priority extra. + + -- Drew Parsons Wed, 13 Sep 2006 17:50:06 +1000 + +libxfont (1:1.2.0-2) unstable; urgency=high + + * Apply upstream patch 10_pcf_font.patch (security vulnerability + CVE-2006-3467). Closes: #383353. + * Upload to unstable to ensure patch is propagated quickly. + * Apply patch 10_freetype_buffer_overflow.patch while we're at it + (no known exploits). + + -- Drew Parsons Thu, 17 Aug 2006 07:45:40 +1000 + +libxfont (1:1.2.0-1) experimental; urgency=low + + * New upstream version. Closes: #364854. + - builds and works with Freetype 2.2. Closes: #362920, #370149. + * Standards version 3.7.2. + * libxfont-dev doesn't need both Depends: and Pre-Depends: x11-common. + * Use debhelper 5, tidy up debian/rules to match. + * libxfont does not provide libfontcache.so! + + -- Drew Parsons Thu, 27 Jul 2006 15:08:14 +1000 + +libxfont (1:1.1.0-1) UNRELEASED; urgency=low + + [ David Nusinow ] + * New upstream release + * Remove obsolete patch 01_fontserver_fix_SEGV.diff + + [ Andres Salomon ] + * Test for obj-$(DEB_BUILD_GNU_TYPE) before creating it during build; + idempotency fix. + * Run dh_install w/ --list-missing. + + -- Andres Salomon Mon, 17 Jul 2006 01:20:57 -0400 + +libxfont (1:1.0.0-4) unstable; urgency=low + + * Reorder makeshlib command in rules file so that ldconfig is run + properly. Thanks Drew Parsons and Steve Langasek. + * Add quilt to build-depends + + -- David Nusinow Wed, 19 Apr 2006 00:10:33 -0400 + +libxfont (1:1.0.0-3) unstable; urgency=low + + * Upload to unstable + + -- David Nusinow Thu, 23 Mar 2006 22:44:39 -0500 + +libxfont (1:1.0.0-2) experimental; urgency=low + + * Have libxfont-dev depend on libfreetype6-dev and libfontenc-dev. Thanks + Eugene Konev. + * Port patches from trunk + + general/099v_fontserver_fix_SEGV.diff + + -- David Nusinow Sun, 26 Feb 2006 18:35:44 -0500 + +libxfont (1:1.0.0-1) experimental; urgency=low + + * First upload to Debian + + -- David Nusinow Thu, 29 Dec 2005 20:51:40 -0500 + +libxfont (1:0.99.0+cvs.20050909-1) breezy; urgency=low + + * Fix the XFONT_FONTCACHE/FONTCACHE define in configure.ac (close: + Ubuntu#14319). + + -- Daniel Stone Fri, 9 Sep 2005 15:39:57 +1000 + +libxfont (1:0.99.0-1) breezy; urgency=low + + * First libxfont release. + + -- Daniel Stone Mon, 16 May 2005 22:10:17 +1000 --- libxfont-2.0.1.orig/debian/compat +++ libxfont-2.0.1/debian/compat @@ -0,0 +1 @@ +10 --- libxfont-2.0.1.orig/debian/control +++ libxfont-2.0.1/debian/control @@ -0,0 +1,64 @@ +Source: libxfont +Section: x11 +Priority: optional +Maintainer: Debian X Strike Force +Uploaders: Timo Aaltonen +Build-Depends: + debhelper (>= 10), + quilt, + pkg-config, + libfontenc-dev (>= 1:1.0.5-2), + x11proto-core-dev, + xtrans-dev, + x11proto-fonts-dev, + libfreetype6-dev, + zlib1g-dev, + libbz2-dev, + xutils-dev (>= 1:7.5+4), +# devel-docs + xmlto, xorg-sgml-doctools (>= 1:1.7), w3m, +Standards-Version: 3.9.8 +Vcs-Git: https://anonscm.debian.org/git/pkg-xorg/lib/libxfont.git +Vcs-Browser: https://anonscm.debian.org/git/pkg-xorg/lib/libxfont.git + +Package: libxfont2 +Section: libs +Architecture: any +Depends: ${shlibs:Depends}, ${misc:Depends} +Breaks: xfs (<< 1:1.1.4) +Pre-Depends: ${misc:Pre-Depends} +Multi-Arch: same +Description: X11 font rasterisation library + libXfont provides various services for X servers, most notably font + selection and rasterisation (through external libraries). + . + More information about X.Org can be found at: + + . + This module can be found at + git://anongit.freedesktop.org/git/xorg/lib/libXfont + +Package: libxfont2-udeb +XC-Package-Type: udeb +Section: debian-installer +Architecture: any +Depends: ${shlibs:Depends}, ${misc:Depends} +Description: X11 font rasterisation library + This is a udeb, or a microdeb, for the debian-installer. + +Package: libxfont-dev +Section: libdevel +Architecture: any +Depends: ${shlibs:Depends}, ${misc:Depends}, libxfont2 (= ${binary:Version}), libx11-dev, x11proto-core-dev, x11proto-fonts-dev, libfreetype6-dev, libfontenc-dev (>= 1:1.0.1-1) +Description: X11 font rasterisation library (development headers) + libXfont provides various services for X servers, most notably font + selection and rasterisation (through external libraries). + . + This package contains the development headers for the library found in + libxfont2. Non-developers likely have little use for this package. + . + More information about X.Org can be found at: + + . + This module can be found at + git://anongit.freedesktop.org/git/xorg/lib/libXfont --- libxfont-2.0.1.orig/debian/copyright +++ libxfont-2.0.1/debian/copyright @@ -0,0 +1,265 @@ +This package was downloaded from +https://xorg.freedesktop.org/releases/individual/lib/ + +Copyright © 2007 Red Hat, Inc +Copyright (c) 2008, 2009, Oracle and/or its affiliates. All rights reserved. + +Permission is hereby granted, free of charge, to any person obtaining a +copy of this software and associated documentation files (the "Software"), +to deal in the Software without restriction, including without limitation +the rights to use, copy, modify, merge, publish, distribute, sublicense, +and/or sell copies of the Software, and to permit persons to whom the +Software is furnished to do so, subject to the following conditions: + +The above copyright notice and this permission notice (including the next +paragraph) shall be included in all copies or substantial portions of the +Software. + +THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR +IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, +FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL +THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER +LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING +FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER +DEALINGS IN THE SOFTWARE. + +Copyright (c) 1997 by Mark Leisher +Copyright (c) 1998-2003 by Juliusz Chroboczek +Copyright (c) 1998 Go Watanabe, All rights reserved. +Copyright (c) 1998 Kazushi (Jam) Marukawa, All rights reserved. +Copyright (c) 1998 Takuya SHIOZAKI, All rights reserved. +Copyright (c) 1998 X-TrueType Server Project, All rights reserved. +Copyright (c) 2003-2004 After X-TT Project, All rights reserved. + +Permission is hereby granted, free of charge, to any person obtaining a copy +of this software and associated documentation files (the "Software"), to deal +in the Software without restriction, including without limitation the rights +to use, copy, modify, merge, publish, distribute, sublicense, and/or sell +copies of the Software, and to permit persons to whom the Software is +furnished to do so, subject to the following conditions: + +The above copyright notice and this permission notice shall be included in +all copies or substantial portions of the Software. + +THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR +IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, +FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE +AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER +LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, +OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN +THE SOFTWARE. + + +Copyright 1990, 1998 The Open Group + +Permission to use, copy, modify, distribute, and sell this software and its +documentation for any purpose is hereby granted without fee, provided that +the above copyright notice appear in all copies and that both that +copyright notice and this permission notice appear in supporting +documentation. + +The above copyright notice and this permission notice shall be included +in all copies or substantial portions of the Software. + +THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS +OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF +MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. +IN NO EVENT SHALL THE OPEN GROUP BE LIABLE FOR ANY CLAIM, DAMAGES OR +OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, +ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR +OTHER DEALINGS IN THE SOFTWARE. + +Except as contained in this notice, the name of The Open Group shall +not be used in advertising or otherwise to promote the sale, use or +other dealings in this Software without prior written authorization +from The Open Group. + + +Copyright 1989 by Digital Equipment Corporation, Maynard, Massachusetts. + + All Rights Reserved + +Permission to use, copy, modify, and distribute this software and its +documentation for any purpose and without fee is hereby granted, +provided that the above copyright notice appear in all copies and that +both that copyright notice and this permission notice appear in +supporting documentation, and that the name of Digital not be +used in advertising or publicity pertaining to distribution of the +software without specific, written prior permission. + +DIGITAL DISCLAIMS ALL WARRANTIES WITH REGARD TO THIS SOFTWARE, INCLUDING +ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS, IN NO EVENT SHALL +DIGITAL BE LIABLE FOR ANY SPECIAL, INDIRECT OR CONSEQUENTIAL DAMAGES OR +ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, +WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, +ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS +SOFTWARE. + + +Copyright 1999 SuSE, Inc. + +Permission to use, copy, modify, distribute, and sell this software and its +documentation for any purpose is hereby granted without fee, provided that +the above copyright notice appear in all copies and that both that +copyright notice and this permission notice appear in supporting +documentation, and that the name of SuSE not be used in advertising or +publicity pertaining to distribution of the software without specific, +written prior permission. SuSE makes no representations about the +suitability of this software for any purpose. It is provided "as is" +without express or implied warranty. + +SuSE DISCLAIMS ALL WARRANTIES WITH REGARD TO THIS SOFTWARE, INCLUDING ALL +IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS, IN NO EVENT SHALL SuSE +BE LIABLE FOR ANY SPECIAL, INDIRECT OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES +WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION +OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN +CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. + + +Copyright 1990 Network Computing Devices + +Permission to use, copy, modify, distribute, and sell this software and +its documentation for any purpose is hereby granted without fee, provided +that the above copyright notice appear in all copies and that both that +copyright notice and this permission notice appear in supporting +documentation, and that the name of Network Computing Devices not be used +in advertising or publicity pertaining to distribution of the software +without specific, written prior permission. Network Computing Devices +makes no representations about the suitability of this software for any +purpose. It is provided "as is" without express or implied warranty. + +NETWORK COMPUTING DEVICES DISCLAIMS ALL WARRANTIES WITH REGARD TO THIS +SOFTWARE, INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS, +IN NO EVENT SHALL NETWORK COMPUTING DEVICES BE LIABLE FOR ANY SPECIAL, +INDIRECT OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM +LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE +OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE +OR PERFORMANCE OF THIS SOFTWARE. + + +Copyright 1990 Network Computing Devices + +Permission to use, copy, modify, distribute, and sell this software and +its documentation for any purpose is hereby granted without fee, provided +that the above copyright notice appear in all copies and that both that +copyright notice and this permission notice appear in supporting +documentation, and that the names of Network Computing Devices, or Digital +not be used in advertising or publicity pertaining to distribution +of the software without specific, written prior permission. + +NETWORK COMPUTING DEVICES, AND DIGITAL AND DISCLAIM ALL WARRANTIES WITH +REGARD TO THIS SOFTWARE, INCLUDING ALL IMPLIED WARRANTIES OF +MERCHANTABILITY AND FITNESS, IN NO EVENT SHALL NETWORK COMPUTING DEVICES, +OR DIGITAL BE LIABLE FOR ANY SPECIAL, INDIRECT OR CONSEQUENTIAL +DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR +PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS +ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF +THIS SOFTWARE. + + +[Note: clause 3 in the following license, the "advertising clause", was +rescinded by Berkeley in 1999. See +] + +Copyright (c) 1991, 1993 + The Regents of the University of California. All rights reserved. + +Redistribution and use in source and binary forms, with or without +modification, are permitted provided that the following conditions +are met: +1. Redistributions of source code must retain the above copyright + notice, this list of conditions and the following disclaimer. +2. Redistributions in binary form must reproduce the above copyright + notice, this list of conditions and the following disclaimer in the + documentation and/or other materials provided with the distribution. +3. All advertising materials mentioning features or use of this software + must display the following acknowledgement: + This product includes software developed by the University of + California, Berkeley and its contributors. +4. Neither the name of the University nor the names of its contributors + may be used to endorse or promote products derived from this software + without specific prior written permission. + +THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND +ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE +IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE +ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE +FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL +DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS +OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) +HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT +LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY +OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF +SUCH DAMAGE. + + +Copyright (c) 1998-1999 Shunsuke Akiyama . +All rights reserved. +Copyright (c) 1998-1999 X-TrueType Server Project, All rights reserved. + +Redistribution and use in source and binary forms, with or without +modification, are permitted provided that the following conditions +are met: +1. Redistributions of source code must retain the above copyright + notice, this list of conditions and the following disclaimer. +2. Redistributions in binary form must reproduce the above copyright + notice, this list of conditions and the following disclaimer in the + documentation and/or other materials provided with the distribution. + +THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND +ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE +IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE +ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE +FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL +DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS +OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) +HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT +LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY +OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF +SUCH DAMAGE. + + +Copyright © 2004 Keith Packard + +Permission to use, copy, modify, distribute, and sell this software and its +documentation for any purpose is hereby granted without fee, provided that +the above copyright notice appear in all copies and that both that +copyright notice and this permission notice appear in supporting +documentation, and that the name of Keith Packard not be used in +advertising or publicity pertaining to distribution of the software without +specific, written prior permission. Keith Packard makes no +representations about the suitability of this software for any purpose. It +is provided "as is" without express or implied warranty. + +KEITH PACKARD DISCLAIMS ALL WARRANTIES WITH REGARD TO THIS SOFTWARE, +INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS, IN NO +EVENT SHALL KEITH PACKARD BE LIABLE FOR ANY SPECIAL, INDIRECT OR +CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE, +DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER +TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR +PERFORMANCE OF THIS SOFTWARE. + + +/* lib/font/fontfile/gunzip.c + written by Mark Eichin September 1996. + intended for inclusion in X11 public releases. */ + + +Copyright (c) 1999 The XFree86 Project Inc. + +All Rights Reserved. + +The above copyright notice and this permission notice shall be included in +all copies or substantial portions of the Software. + +THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR +IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, +FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE +OPEN GROUP BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN +AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN +CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. + +Except as contained in this notice, the name of The XFree86 Project +Inc. shall not be used in advertising or otherwise to promote the +sale, use or other dealings in this Software without prior written +authorization from The XFree86 Project Inc.. --- libxfont-2.0.1.orig/debian/libxfont-dev.install +++ libxfont-2.0.1/debian/libxfont-dev.install @@ -0,0 +1,8 @@ +usr/include/X11/* +usr/lib/*/libXfont2.a +usr/lib/*/libXfont2.so +usr/lib/*/pkgconfig/xfont2.pc + +# Extra doc, under noinst_* in doc/Makefile.am: +../../build-main/doc/*.html usr/share/doc/libxfont-dev/ +../../build-main/doc/*.txt usr/share/doc/libxfont-dev/ --- libxfont-2.0.1.orig/debian/libxfont2-udeb.install +++ libxfont-2.0.1/debian/libxfont2-udeb.install @@ -0,0 +1,2 @@ +usr/lib/*/libXfont2.so.2* usr/lib + --- libxfont-2.0.1.orig/debian/libxfont2.install +++ libxfont-2.0.1/debian/libxfont2.install @@ -0,0 +1 @@ +usr/lib/*/libXfont2.so.2* --- libxfont-2.0.1.orig/debian/patches/series +++ libxfont-2.0.1/debian/patches/series @@ -0,0 +1 @@ +# placeholder --- libxfont-2.0.1.orig/debian/rules +++ libxfont-2.0.1/debian/rules @@ -0,0 +1,56 @@ +#!/usr/bin/make -f + +PACKAGE = libxfont2 +OOT = --builddirectory=build + +CFLAGS = $(shell dpkg-buildflags --get CFLAGS) +CFLAGS += -Wall +CPPFLAGS = $(shell dpkg-buildflags --get CPPFLAGS) +LDFLAGS = $(shell dpkg-buildflags --get LDFLAGS) + +# Strip -Bsymbolic-functions (set by default on Ubuntu) to avoid breakages: +LDFLAGS := $(LDFLAGS:-Wl,-Bsymbolic-functions=) + +CONFFLAGS += \ + --disable-fc \ + --enable-builtins \ + --enable-pcfformat \ + --enable-bdfformat \ + --enable-devel-docs \ + --without-fop \ + --disable-silent-rules \ + CFLAGS="$(CFLAGS)" \ + CPPFLAGS="$(CPPFLAGS)" \ + LDFLAGS="$(LDFLAGS)" + + +override_dh_auto_clean: + dh_auto_clean + rm -rf build-main/ debian/tmp-main/ + rm -rf build-udeb/ debian/tmp-udeb/ + +override_dh_auto_configure: + dh_auto_configure $(OOT)-main/ -- --with-bzip2 --with-xmlto $(CONFFLAGS) + dh_auto_configure $(OOT)-udeb/ -- --without-bzip2 --without-xmlto $(CONFFLAGS) + +override_dh_auto_build: + $(MAKE) -C build-main/ + $(MAKE) -C build-udeb/ + +override_dh_auto_install: + $(MAKE) -C build-main/ install DESTDIR=$(CURDIR)/debian/tmp-main + $(MAKE) -C build-udeb/ install DESTDIR=$(CURDIR)/debian/tmp-udeb + +override_dh_install: + find debian/tmp-* -name '*.la' -delete + dh_install -a -N$(PACKAGE)-udeb --sourcedir=debian/tmp-main --fail-missing + dh_install -p$(PACKAGE)-udeb --sourcedir=debian/tmp-udeb --fail-missing + +override_dh_strip: + dh_strip --dbgsym-migration='libxfont2-dbg (<< 1:2.0.1-2~)' + +override_dh_makeshlibs: + dh_makeshlibs -V'libxfont2 (>= 1:2.0.1)' --add-udeb=$(PACKAGE)-udeb + +%: + dh $@ --with quilt --- libxfont-2.0.1.orig/debian/upstream/signing-key.asc +++ libxfont-2.0.1/debian/upstream/signing-key.asc @@ -0,0 +1,343 @@ +-----BEGIN PGP PUBLIC KEY BLOCK----- +Version: GnuPG v1 + +mQGiBEab+moRBACDH5yKqS3wcc5bdxY7PBNuwKvF5TKMfagmSvuRDtZjjIIWaA/n +Z1KboV9Gq5g7kP7+Kfu+Qgd8u65eVsWwmPW10fXvj3aCU53glx2EdGdrHcgiyH2g +EQfPiyBw+trIppWFRV0IDXSLMA1FNC92t2nSG/VFHaPTVwcgkIRSfcXDvwCglGdE +a6f4uLqoNHP+m4yYnzapFuMD/R4+2AJDAvEWKDdYCGZzlawjAmmWyXrmT7/C/mx9 +8qUR473l4buXjHgDkkXXlHqdzil1vK85PhrKzNJDCCmlHUJNz+QwiAMOLwpD+kwV +Pb57RG7y+a5JQ5+jtVw4RlUxZIk/wj2An9YBO3A5vR7PdjM32ZJCN2+aM4dYfNzQ +xQKTA/47icvBaBVTl9rztjg2pd2Aqpc1P/GsIYLGj7XjnnJvGAENBHSH1QjpZMJG +CTS9oJ+B0/wrIr+pA+MdFgYAb6ojMQJOO6UChjWWSGjMFcs/CeXhxlLBido3DtAE +TbNTwO6OEfAvdosvTdhJFnwvZlJ+zZGGy5CrF2Fd9PUe9tmASbQoQWxhbiBDb29w +ZXJzbWl0aCA8YWxhbmNAZnJlZWRlc2t0b3Aub3JnPohoBBMRAgAoAhsDBgsJCAcD +AgYVCAIJCgsEFgIDAQIeAQIXgAUCUXnRYgUJFEPYeAAKCRCi+54IHy0TDonxAKCP +cAgXNojuujUg5Wqi6v0RBFVSUgCggq1SsVEdq9NDWvXvkeGyNaBivSK0K0FsYW4g +Q29vcGVyc21pdGggPGFsYW4uY29vcGVyc21pdGhAc3VuLmNvbT6IZgQTEQIAJgIb +AwYLCQgHAwIEFQIIAwQWAgMBAh4BAheABQJRedFiBQkUQ9h4AAoJEKL7nggfLRMO +6sUAn0jl3h9rY4OJ13Lu7nsKclyhDpOqAKCFgTmaDGRuDRxloLg9jftrn7a7vrQu +QWxhbiBDb29wZXJzbWl0aCA8YWxhbi5jb29wZXJzbWl0aEBvcmFjbGUuY29tPohr +BBMRAgArAhsDBgsJCAcDAgYVCAIJCgsEFgIDAQIeAQIXgAIZAQUCUXnRYgUJFEPY +eAAKCRCi+54IHy0TDtBZAJ9IgVVNoFIPRjTsNjcSFaLznuDRJgCcC/WgV312IrxS +Q8PRAyEgozSB9Ke5Ag0ERpv6bxAIAJp5aUlho5rUhpS6ik7spsAQFPRuycPKMNu0 +J4F0v/OoPz085soV8ytLj4HqCGk2Zamh1jSgliZwuk9m7V7Wgxx+nBJawpWDX/eK +LObErfDwQ4dfOFvjbXLQMmNnQNaUGIWLPP3l8GuBOHMq60Bu+TPgh627vUntL5RE +QEQqTXIzWC6U10QsDblLwIvdOVSdGF5xl/N1myXzSKvrsZwWtoFc8G9v9hcCjhtN +1sm9b7Ojc51iZXvcetcvPy5RA6AUW3yEExaedUdLnvIF9sjFYIfJWFVYh2AgavnG +re6fF+NV2v3zfx3wRT7H9//m4YIDYJmgZgyQccXegTwfGBIq3osAAwYH/1FiMUMM +ES5Ilz2nDqId+DCWECAU6wgvIFRcXrZWxDxB+ZrnmTCXoAD0xedpfOkRHp8XTVc/ +9MU+wQ+lZRx2OQ6MJW0XGuFvHm94KZF/8HzWA2Ah7U4n0+3sLpk6zWceZq2zZNF0 +yVTjwD98+xNK1Q9sP8aOKdtg8yMH3hisKR6rdW+mfX5q0Q8Gol2hZsFH/qyIhnPz +hXDknuOh8E5iMkzrejVXUEn++Yzj23XjP59SObLznVkyxI+kBI9qvVEPfFBDybjH +WqLcgRcCpXAzjizEi+/d31iDa2ErJHV4R42obecFqiPnoDtiX3IiP7z9fmxM4aWP +ZZRqvq+1ht5wkn+ISQQYEQIACQUCRpv6bwIbDAAKCRCi+54IHy0TDoLoAKCHYRpw +/XfyEunw1YL/uMZzl78qIQCdFVcXNbqD83qVhW4Ly7hyDL8o0aK5Ag0EUXnVIQEQ +AKHpjOmY056n0tsZoW9q5egsMcl5tKC8uimrhO05nnq+5/60/YedC++V9c9b/3/X +7O28LyBkAtBgD0xJZSDQ0DhTzKAp6AzjQtBvI68uinGwxSjT+oQpPMxqhA1I0kzo +EDCdEqV+HsVOAEdbAi/tP9bbdTDzwVc8MWDriamBUqc53Rb00Mffy9435UgTS4gA +hMwANhy6XZmOMBhITOzxFJUEDTDJtLbE0b1jPRQS7NHQgak1inmuvPMc3wAuoEcS +CSt1xupbYsBoXOjK5wC/eE1LIdZoRyW2OkT140DqDZ8zfRID860hnirnYgb09TPN +tj93pudUAUt6T9+tcLN4/rxhxHOwse66KGHO4bQ1rZ6mfco6SYd9V60cL6hC2eMe +cyxZliMu17lj7EX8lxUH+omIgHc7HGoyUR6V+WB60cxWj5v05zdeLeZ2aLBcPFhx +lfDESm8f4ezdJSDS1QZmC0P5h3RJfhhfmdBr8kHzr7111D1/O71Av1VV5FyJ9YxU +Sxp4IPuzK7JbbgVHcA6PvXrDzWUslmZgPADpKH4hTmG/NdCqhEXcufvY6s5yNksB +8X3ReNvuSSyfGnRz3kvtyK0XzC7KRX2PquLI6A8KJprHwZGqEB1NDG8b2iaYnghO +jyfIYEVQF3nGfaBwv4lrCPEoZSUaK8f/NQZjNU8NQyTnABEBAAGJAm0EGBEKAA8F +AlF51SECGwIFCQlmAYACKQkQovueCB8tEw7BXSAEGQEKAAYFAlF51SEACgkQz98U +iCjGQqfW5g//dOdJHt23cdMyz5VADaE7u+L0E+eX9GtHF4J649eXsui59EtbHh2n +XdGhd5SqQ8FDi9GCEKaQ4S31n/YBLEBCkj7R0IMikW2o78/JxDovB8+aL606hgma +fNVx1aIshIglrl8Xlu3sjeAvG48W6YjdL2mfrIDHjIVwOZsMihbOJvST6Q3upHdn +mjDtM5HCQmI5NEXDWYj6IZuhJnnrDWwNsyYV4KPoUBxAcqIyCeZbVssuWWnHPXX8 +VavVq98vpVynfGzGYpJbDj19C/utMjKGI5dcvbVaucA7X/oktxrxS6SBDhuIaAE9 +4ZHlbxqfyHfETI/La2Z/ALDAtYdhJR2gSkTHyKSW1QqYlulSfB//lnna44mmTuRO +NbDNgb0FGSvtsBMZ80iHDqPgUfS60kxCfFrsSGfTFU+X4QAzpTtUJEcr+J4HULDe +MfwOgghVfmKxFXWfud8xDaCXuywLTtVgMCZp4P7MAyuJlaxsFTu+c1Vly94grk4U +MtALLMqCXSosA490gLTSdg3HSwxt2Q/LJdy427ZIMvjGXIruns8U/OmL9dVgWu3b +JHsL68Skx8Ts63qTN9QXM/PB+8VwOaC7PJ+g6t40DleOmdsS8cN31yf5KB8rsL4u +n4u1yrMJfpnSblPMu5wJi3kjoA+Dd5ZFqx9nTi4wBjfVYGCPsleq59K8kQCYx1Cn +lZcq630ITy9dB/aHCQry2gCbBwZ2Rsf9kr05S8uLhlwW3vRSvRs= +=tc6G +-----END PGP PUBLIC KEY BLOCK----- +-----BEGIN PGP PUBLIC KEY BLOCK----- +Version: GnuPG v2 + +mQGiBEDLnMIRBACNlsJkPRfH7RMOn7nirvYN5StKVvwdJa2MFUM3sjoaA11nW+Zw +Yxion4GkbIOtz25R29TcwuAaK1UWhy1Rz6aIOOMOzBeUNGGCvRXF76rKHBHOdSJw +AXEvNa/9rKOIaPL7PBN7Lb4CmrjEbA9gKYtZQD9qQSKcAwyyxszkW1e7TwCg7MbV +Bq5MWlATjOAzXLoSpgyENwMD/jPz53KmwUobbqri2pFhozacl5N93cy7b3pwpTZY +fM50cXVSSshYpqdCr5AoWG/DXNGRixv1DnBKOI2Cv6YAQLntcATHxR8ssemOZHRv +7D0hvWwC3o6GSKdg0rSOtRHfDhEL4IFVmPLZaXIRDZ0/ancrCuQPdZ9mzCi/LQmV +noTeA/kB73zJMYH7Z0TSKv490AMWQHbKVvos8+tXxATlq0Otib+s55LXQocSPjgp +GR5qKzqTn9elg2dyo4GYeAYvGBmhQtBdeYo1rVq2pC6HCzMG79zozL9O25SnDLpj +WoqJB6qHBAd9tlTHzkRxv1Fqr4jfIupNborXbhR25tiYOm72irQcQWRhbSBKYWNr +c29uIDxhamF4QG53bmsubmV0PohhBBMRAgAhAhsDBgsJCAcDAgMVAgMDFgIBAh4B +AheABQJEZNYGAhkBAAoJEFuKLVCg7NDTlj8AoL9RgTs++HaD5w5lYARcE+OB+0Jg +AKDZBhJhVgOsEjeg7atMglFR7s36mrQeQWRhbSBKYWNrc29uIDxhamF4QHJlZGhh +dC5jb20+iGAEExECACAFAkfENSICGwMGCwkIBwMCBBUCCAMEFgIDAQIeAQIXgAAK +CRBbii1QoOzQ0x6CAJ0fevUkaaBcTzKa0lTgfNFQ0E+JwgCfaWy44eNKttn4WWEZ +CTGF+e+zraS0IEFkYW0gSmFja3NvbiA8YWpheEBlbmdyLnNnaS5jb20+iF4EExEC +AB4FAkHB1gECGwMGCwkIBwMCAxUCAwMWAgECHgECF4AACgkQW4otUKDs0NNTOgCg +lu1MOCbysvn68WReXz+v02+y2VkAoL12gktA0TFZnPBk3cweEAwCkUlXtCZBZGFt +IEphY2tzb24gPGFqYXhAd2lsZG9wZW5zb3VyY2UuY29tPoheBBMRAgAeBQJBriSn +AhsDBgsJCAcDAgMVAgMDFgIBAh4BAheAAAoJEFuKLVCg7NDTOe4AnRUJ6FqQLaoY +XWCToQdl/Gry4UNZAJ97YYHMt1FIo1TLCWWozSiG+VtTq7QnQWRhbSBKYWNrc29u +IDxhamF4QGJlbnplZHJpbmUubnduay5uZXQ+iF4EExECAB4FAkRk1eACGwMGCwkI +BwMCAxUCAwMWAgECHgECF4AACgkQW4otUKDs0NN+fwCg2cPLDbAb07gMWBETKTRm +sj34FsAAn0SQ4kuqs9Ms0ZRKDqNQ1YTMwyEHuQINBEDLnNAQCACrbu13VZsigsM6 +8MzfdGQ4x/acO4Vd+Dg/aFj3EhPfXZHRauuJ7gQtWc9Mk2ghTjbqEXj0JILbif95 +IyShdC/fxEYiFybRODR6FHlXj6BFCxZFfqi4mOuaGQ4BeB57g/gW+FSoIPzYU4IY +85KD62qeS37zQEBAAK+mCEboUGfPT0wHrkFtkTObjOg7UTjpBp5/HknUREYo8mLo +WBv7CDlApicmXoqnKfAcFaNY2YLMjklwFHh2i2+6dPbkdWSEpuZhkxIQ/8JlYS6A +2g5DMKcNdmqr4Z6xjk8Fj1SO7ILc9EtR+ACqkqkmlU3m4AUHjdR/4kk7tEJ5DytP +c95JcuJnAAMFB/9KWUqJbdeHs47LJBksZ6tnHArcSG653e9uejtNt5xquJIz2wxb +exMV9Bkzwu9v/A8Vo7px7Bkhh++sBrgpGD4z5Jr+PaWOsw5qrO9OVVgzXkUf2QoD +gw4Hh8m9jpx1s6tNasPsy12OGMJ4a5a1GCGg8F7sPlWLBd491viavDyOWYkKozLH +hXwKlGOec0sCRGeHTiqPinxs29PXaTE7Dl/f2dYgiNzTSWetSx7Sv1H9EX4qxPgc +smdRuGV7k7dIw/J02rcI/Ol4OUORRMY2cgJnb5mNxIxTgTGJysm+MjfPrZnOeDVK +TroAYtas/uirqiNzk7fdIdUdgbOhsAl9n3QZiEYEGBECAAYFAkDLnNAACgkQW4ot +UKDs0NP3CACfS1DKwgN/rB7Ib+RJiuK0F/BQoEYAoOhr0VXCT5dP0Yr1kIad7njC +GBF1 +=bYOv +-----END PGP PUBLIC KEY BLOCK----- +-----BEGIN PGP PUBLIC KEY BLOCK----- +Version: GnuPG v1 + +mQINBE9iNskBEAC4ZlqFgnzmpGeN2MOk6dvxs3UQFEHycoNVxCb+KPF3R0q4ZTt/ +Qdmjg5ut3I6D+LshJoPPIajOp3Csm8Jjue8xWNY0HVN7/d+Nhok+6FAtD+H22hUz +rGxWfUTCmga1oLwxRjptSZeAUb/EFRzvaALB9JUt///VerzDUuuMttJ6gPNMo7+f +EOknT8fmRuxTT8Fa9o8/XJ0nDVKnEZfXMq+kaxFwRl7D/PfFSxzjOVvLDZYJ5gNT +qW/2e4YJCTAQWhWAOWYpUjuG+UsYc2m1xyt8Xoe1JOz0uD9sVypQgNt6iRKGG4QZ +R43SlKvJnp5LJVemiQAJydxb3Yh3aU64GT5p/nV9lU26+iycFVwpxWEpH4z/3lUj +HaaI2dM9JvTrcjeBmsLRUC32SwI2MjFiLwKa22Kzfp02w02s2XSw9m8jYkwUzHln +UAesFIwYXivckAf6ULSaMe8x22XtvXRmHdOy/q/uTC7i2JR33VEm0zNxSZRWTsX/ +sv0BETjNE525iz9sLAGmt60vThkO6zt8ke0A6lCekLUsi3rzok21oFqSnasJNXUY +eVOAW3LisGRrPBXHUPoztyB9n7OpC2xbBep2ce/Y4zBjHZZUngBZXxXj92X2CRSo +qezlP2cZfnXk0C7exUr4aTC44IjkZYEsFwQSNiJhzIoN5blVn1QU45J4RQARAQAB +tCFLZWl0aCBQYWNrYXJkIDxrZWl0aHBAZGViaWFuLm9yZz6JAjgEEwEIACIFAlBT +0bwCGy8GCwkIBwMCBhUIAgkKCwQWAgMBAh4BAheAAAoJENsiGmkAAAARyYMP/jC3 +uOmE25bvnTKmyYPDGk7wyCgkLNlFzsAYGuesiOnyw4T1FGM+ogIX2G7gYj9J/hdT +nX/WwEU8zfVkVRxNd9kb/BbJ+zcS28saSLG/6IsYcdtuBBw/1tvB7sR5cRZgEBij +NGoa8VvIY6cJozmw6zgXQqqS4el1jKZTtdQNpmwK95EV6TvmdAjmMqj4s5n742ou +bdD+lx5HQlGC+a20vosoX9kxrCtw3utQngXcgr6k75ZB22Uc15zQIQc9P78NnXnI +GyliT3z5SEYVoThpmAkexHUr9uK/rP3bBeMTTk88wzq7CYqMoxpTz4HzM+RdKLUA +pFZ7f181s/JP7PTksHVxTJtWQx+l09VAWLg1Gj2/F8j20xjEHSkywklPL0gg4g9o +dTPVbaSHJDS7xlNAhwHw4/7vupORU16Xiwt9wgAWvJ4k4dTrcXkd+HJ6FLJlAKBl +sQU+/G5e8oxTnmksfJcpbHaWT2quW+oDe3qadsXjKDGfZn0b1ocvGUjg5mTzN95B +PlGZ6pBmZgrgv3wWeFgjXScVnhQQeKHCF+G76c5c52H8jjOWFAv+RkpXD/J5N3I9 +QWR7DVVfvwPqLgwZ+SaAXPR4hQ0b3kanyaNHJgDNZWAG7hHA3EbnaVyVyyRmR+1M +2jXuzKVlbJp8/+ts3hrBeZ17bgu+xw6FydKN+ODJtCFLZWl0aCBQYWNrYXJkIDxr +ZWl0aHBAa2VpdGhwLmNvbT6JAjsEEwEIACUCGy8GCwkIBwMCBhUIAgkKCwQWAgMB +Ah4BAheABQJQU9N6AhkBAAoJENsiGmkAAAARpFsQALbybdFI85DE/NDfzNxGroru +pO96ecH7bLK1o4VjjIsBbybvlcF89FVHI4o+5w9SQRF+a+4Da9YWVXsrFAeRRVMV +iDRgW/GdXHYV+vRSVHzFeJGpsGV/IYApctwcS8y/aWzEJXjp5ARGK7lpBG4zZVOk +jjphTPFHF7Y8W2Yu5HoEjqG1t4PzcNN7sOrt6Nxkv5DWKjnzN+fB63SgfBsIk7NG +/ufWncrxa/eQl6zKu42LHlDnDgLm9HI9y/iPBwEStfoIM9tNyDuvtsxU6RXIBeuB +JgGMjkht6f97aK9Zv8vOXlk3mhaF4SbIXKHvyQDNJ4ZoZmzlZSsWBTLH/+eYNI6n +jUQHK5X4bscmUobFDbU2JNqaKA8gVtLAmE/nPOIuSk0Y7je5nVx4+HsQ+FC9ntFe +1aYKmn1S04QSS/bvmH52qSx7U+nnLnwGvtDhomQ5Q63ZIXwLsT+PBUb7XkECpJNI +B8lXWmCLxABrUTuEsUa1k6yGnYWCAWI/LX5MW1VZOg51rgKWNNsSQ2O1QI+7VG1S +85K3/HU70jUEDdWvr6ZCkr8VORLXehkbP0Mr4iOQCHUgljpul9wTINQw6FIO57H4 +85vwXiP4NdC5HKHy/BoUzcbg6HzX6ji+UlatiqOgxbrdWhpS3pQgzVUcwV90UWpe +o74gEp0cDIja3cCrDJDJtCZLZWl0aCBQYWNrYXJkIDxrZWl0aHBAZnJlZWRlc2t0 +b3Aub3JnPokCOAQTAQgAIgUCUFPRlgIbLwYLCQgHAwIGFQgCCQoLBBYCAwECHgEC +F4AACgkQ2yIaaQAAABHGNQ/9FoQfqNvPsyj/CII5y7Fyi6cSPDeTVBdxkB++2gJ9 +kDKsjL5ylr0MhNly37uu38cVGkgiEf5WJEbJqQGuLlvU6dbo75RIGUsDi+FLee7X +uwtEwY+WuMQTbxGyqEFbbOL3EuylqqD+7+Mh3iEMdleJfJhKUGScyDz4VwAvIzgS +LwKk1tyOl5io9f3QA0tKnohScV0X6ruVnS5/X7FG3boFxuN9d1W10uG1LOHDQMsC +a1rA2euBbYsDATM0DWCR4TOCz7RcBn6BnRV5U/UNmMgkgX6ZKrJRLk1oIZZYnBZF +5J2f+g3BhQ0t5lOkvFO1H2tWK38Ch1DzieKFjLodB4vW1XMV0C3Bjx3jGMYBMclR +jseyDvgt9G1QLA+O4/gGCZW/+AHorSDKJwJeR/5YpbfHPIQi/6W21gaqbJwAdoHO +xynzprPCUAPiTXJqv0tOUs5trteoj83+7Jn9hGFiFkr6uluILPeFurKvxuP63EaS +RNrYKjk3qAQq5EdJm9W+o2vBw5naN8M9I65I5uaXs3sz+MY/+fTJGHEsG3bQokTa +XppoE7rG+7GJwMX+s88ALU8lz4FzY3ZTWXxqnRFbDSzpxPq7eOMx7ovHjTXbyEE8 +v4STT6wWHllaYUMeR/0BqYDGoH03vm4vMJoBNdFPeM92skcdbZFITl9MaLriHlvk +qKO0J0tlaXRoIFBhY2thcmQgPGtlaXRoLnBhY2thcmRAaW50ZWwuY29tPokCKQQw +AQgAEwUCVLD2BAwdIExlZnQgSW50ZWwACgkQ2yIaaQAAABF8Qw//ZB5G6iQedBnb +xVPRhmG+wQVR8bI6Yl73ElDEl506gL4P/iHuU/tOz+lQ+aCmZhQMj5o2T0ywJ4t7 +XhQejuZlG1+/qhQ3teHxeV4Ird5SRbvoF/TdFZc93xHFkwz2YMOcSvBR7m9hDY+a +va4dUiM9JuGjnLTtz/HfbKhjtqlCDy36kO5hK4hsHYwbMp65Uu6tQB9cYL9KWlOC +H/3hJ5dhcuoVlWOb72uiXCH7O3ptdJaZTQz3DxhBUslZFFrxU/j9+dWdv9S6F+Ye +GHHmmVRwKf7IVWqkLQ3tPaG9n46hjO9T3B3EpO9CtG94RzG53yyGF72gpHo15g6i +OnrKz3xk0P3wDDpF469XxUrLpldeUx0q5GVpHKeOSyOe8CScOZEJCFo32Oyz8jw/ +7Iq8InwwiL+GmAqzX7HdDFBgllLqanA1VBCuFrGbbVnks9L0IHe68suj0bGPHzjR +bfw2yTO/euxy3atFDkQ8w0wMpdkNjeXyEtxRHdkVPGAuTn8Zn1KUXWltAwG8oM9i +PWpN7dextys5eA+kWw1amZ+CcDWycOzr1Clw7koaQKIVKm1i1vX9T7IyvD23isKR +SYCiE9ifN1WzJX14PfJiHz1jrpl83WvtFLjGZMT+mXQ3YQq/uQS0IfwD9Z+7WJIF +NB5NmHVmQ2DUAdJr1GawKioUrzgv9Ma0LUtlaXRoIFBhY2thcmQgKFdvcmsgQWRk +cmVzcykgPHBhY2thcmRAaHAuY29tPokCNwQTAQgAIQUCVLD0vAIbLwULCQgHAwUV +CgkICwUWAgMBAAIeAQIXgAAKCRDbIhppAAAAEWKWEACrwCXXRU5s+dy9J76FPaLW +Gx6QhoLqZ3+U+GtE+fRkY0gxK/poEh+FfSem5Z3rVH4PPl4pKtrP+WS8iUgrBOoO +o0SrFgmWORvZeBRII60nXlJ5gkivxvvRyqCqhNmkxqsPRVB0wgUnNIy4HAp0+5+l +Rigrj4OcyOxe/hlwd6BrAfdUhI34CK7s4TnBBIkEzQpZRopteE4xSjefs+LDgZED +pH4dW7rCRL3NeE2GCzDbt62zp2YXbLdydTzXEYUz/XRfrpmdoe19Sun8l/uiTC5/ +fsB2oMXdvPGX+sxnoaT/BWy0LwqWcCeVeU9Pyl+Kjh1FZso1U03+UtROtWOWN8Q3 +us7rzeHUb13+3un9+JmjFHGGoTVtqs/YYHepXB2vtVBYqpRbNTB36EGduix384MG +8HIqJss9darkmu4SjIPmmPPqIAGwynfsRCKleHhYc9NrD2KZGyMz7v8vSHiaAdLV +GUMq/UDA39U2nM73O9d9GoY528nXy5Tb7qgYIZJehKWie2afqt2LilCZPDFiL/oQ +gFC9lgxfOuBZp149Y9E/keki90d0E9puNivu8FwA4ihQf8NSyb9jyWeOzJsbMomE +i4nY1gG699T4mwUXvtK0M2vX+OnkkGtSf78kpI2w44M0lDzV1ycb26x2OAHwT3Yr +9NIvP8cbsnrbqOFB0QDJ37QuS2VpdGggUGFja2FyZCAod29yayBhZGRyZXNzKSA8 +cGFja2FyZEBocGUuY29tPokCNwQTAQgAIQUCVd3DugIbLwULCQgHAwUVCgkICwUW +AgMBAAIeAQIXgAAKCRDbIhppAAAAEdBJD/97SatOztEAGcr63px33/xLMTPOZWy7 +dCQnsdhZTeDBmLr8NLpPo/hr3VcO6WqhpOHe734YBbflc1ed/tE4ClwvnEeLNfkr +k1z6jCyaTDDrnrjvofsmVgvz4rh7lveuAMNhtjsiuMwwuwaLD9HtIzT7YWJx4Vvj +tWSNSZCCESSoK7RjU2a1srgtJ4x8ogoPPWhGAh3f6YGp6jXTF31zr4KZQNFRNbDF +hd2lvhfM9ewl+22yZyjTGQi8krlXPPJC5AQt/HH2eu3/Ge/cNlbN12Th8si5Gah+ +Sxa/C/FYQdOZu/zOH3+GQWZ2ds4y3dwudZsYTKUcjM61V3w6VEMS949ZgacXNu7C +cfcXJ2NHQ9tZ48qa/Ioj7qqe85cwZWdfxYFMtOK2qqXkmx9kgUk0YdNJe+jXqCPT +HkLwBefnVKnhCqiPUBzXOSRHJ6TggoHeTRyvf4+aBtD/5cbgid55HRtOPIRDaJNO +lmLk3fi42pf6ETvFivXjYWhro5dTAqIku10Fjlv0nb+VOYlCT6OvewK3jCmqFiLJ +2ZcXkNWjMgK3eAXD5UmmvJcow/0KUnctUk+aT8GyZkPq9lnBQHUslc5mItr4GOEB +XR0HR7VWz5eM3h7Rt3uOtXM9qisgD2NwpLcsv7Pp/i4QC2JbjUNXAOQ1HHXgiTaI +bXrFfVxKuq+kmNHU2dTXARAAAQEAAAAAAAAAAAAAAAD/2P/gABBKRklGAAEBAQBI +AEgAAP/bAEMABgQFBgUEBgYFBgcHBggKEAoKCQkKFA4PDBAXFBgYFxQWFhodJR8a +GyMcFhYgLCAjJicpKikZHy0wLSgwJSgpKP/bAEMBBwcHCggKEwoKEygaFhooKCgo +KCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKP/A +ABEIAOAAlgMBIgACEQEDEQH/xAAcAAABBQEBAQAAAAAAAAAAAAAFAAIDBAYHAQj/ +xAA1EAABBAEEAAUCBAYCAgMAAAABAAIDEQQFEiExEyJBUWEGcRQygZEHI0JSobEV +wdHhM0Px/8QAGQEAAgMBAAAAAAAAAAAAAAAAAQIAAwQF/8QAIhEAAgIDAQACAwEB +AAAAAAAAAAECEQMSITEEQRMiUTJh/9oADAMBAAIRAxEAPwD54w8SNrdwO53urduD +eHED4Q2OR0T/ACHj5V2KQSAc0qpJ2aItEzXO7J7SveHA2mD8oIPSkjaX3XqUg9gz +MwWkl7B+ypMge0g2RzyAtR4NgNoEn2U+LpZkcSWmvtVqxSr0rcE3wzsMUj7prgRz +91KYJGgmngg8LWwaY7gMAFcdK/8A8M9zeRz9lNh1BoyOPmyFvhZRcQD5XjtqutyZ +LG5xHPDr4ciGZo0jRYj3V7IWcYsJBtlHlrx/pVShFl0cko8ZdjyntHlJr7qyZ/EZ +2Q4FCiTE7a7zM9D6qdjqcC4celBZsmJGmM7CceQXN8LIJcD6uKqSwHxH+G+2jrle +CWhtJIPvVK1jROAc9hLjXRWevx9Rcv2B7YDG4vaTaKQCZjADI7vggp+K6OYhshBN +X8gqGaaPFcQKo9JJZHN610lUR5ZLwH+Ib6sqvTzdPNj9k/8AEMkeLA5NFPgaCLPP +sE/YLopEcp7PK5znNHSSinNvNna/1CStUE1YdmjMBocTZo/PK8tzXHte3RPFqKaU +Nuzz0umcdtUWoZiT5j31SP6VhPkaHFvB6vhBPp/HdlZAc8WxnJBXR9JwhwaoD8oS +ydFmON9KuFpbRRcPOOeOkexdMtougOuAiGNjtBuvhFsTH63CvVVltAzD0trKIFFX +RhMHoi0UAPophCDfx8KDpGfk01lk1fwg2o6JDM3lgBHRC3JgHPCqz4/Y238qAaOU +Z+j+CTxuCA5LH4Tj5SYj6ey6zqOAHgkN5WP1fTGyNc0tFkGkPeMXseoyWNkMN2bP +YKvx5Ba3yn05WczY5dPydkgNehPSJ6fN4rQ5rrvilXlwqrLsObZ0/S+6xLvaSL9Q +p8kiaI7g3dVUeP8AKtwYzJccU2iOKVPNhdEw7ia/tWBTi5JfZqrgLjA3hg4N8ItA +7wwSb3DgKnDAJHAgHd6FW/CcwAygmjV0rcsk+MEYtFeRjpeSY+/UJL2ZhL+bSRT4 +GjGZD9pNWq+0u9PXpW2QumssFgc2runac+eWElp2uPJ/VdXw4STkzV/RGnViGRzT +bgt/p2PtjbY5pUdCxWQYzGNAHABWhhaA3/Cpl02R4uDoorA45tFMeKxyDZVeFtkU +EUhaRVAIWWIfHF8cKeODjvlOY2m8lTxtaBfNn2UIysY3NdQrlV8iI/CKlu4EgH4V +PIbQs37cqMgEyIO7QDU8PcCdq1Utc2DaFZjA7cBwgFrhy76p0kZGM4keYAkELHaR +IcWZ7Jhx6O9l13VMfcHcc0ub63pzY8kuaBVncAmVSWrKJXGWyDWlZLXtINGzwR/U +rmoQF7ACCOP2WEwtRkwpiwG2X17LX4uc3LxS6N++uSfUf+Vyvk/HljnvHw3Ys0Zo +ozx+Bewki+z6Ihp8jXx04br5KrOx3SvJd5dwsEJWYGEHh3x6oTSnGvsuXOk2W2EP +8vISUXjlxPFfrSSMU4qggDRoInYj2udtkcaF+iL6XMx2QzDx2ksaeXLHNlfLkENJ +DHH26W3+lI2wsEu08mgfddqRw4HQcNgZG2vQK/A8OcLPBKpYjrjA45HKsRcZDKVT +NUQ5itN2L5ROIEf7VPDb5BXdIjE3n2SlhPCzqyrTGtaaAtQRtJHJU1VVnlQj6Pc0 +AggD9FHOwOYaarcVOAFUUnta4EdGkxEZzNZtshpQqba9x6r/AEtHnQ2DXSCSY+15 +sVfaRjNAPNgDg739FhdZhMTpHhoJYd1fC6PlRUCTfSxmtsp0jq4Io2jF9Kci4cmz +ms/EvMf5SbA9ksPMnxH7onu9ktWYY8p7mCubVWORrzzwfVXNWumVSp8Nrpupw5ED +RZa/+oFEzC2ZrZA9rh6tHoFzuN7o3hzDtda0OlasT5XHa49E9LnZviNPbGdDD8jb +9ZBbMhaJLF7ehwkp4ZWTNp457SWfdx4zUYTTYg+cFxAZ7rc6HKCWbW+VjuFiY3Fj +QGt+LWn+mHOM7Gu3A9rtS8ONjOk4gAjs88eiIxD+ZGb5Q7DsxgelcK9CaAc40QLV +RqijRYZHA64RNj4xwXC/usTNr0MI8MSAyHj3UmJl5uWaxmO3HkF4pAOyOhQFjqFg +/cqwGR9uq691z9+H9QDzOlbGL/pNorpb9QhNZcpeK7qkQbOzW7G3YFpkrgG8EWqe +PkO2Ans/4UM8jiXckqDokkcHE277oVm5GNE8h0rAR6Wvc57jHtjJsrNz/Tb8mXfL +klrT3ylFbf0X8jNxZLa2VhcfQFZDXYwfFA5FEhEc36ZxsRu/FyZBMPVzv/ay+TlZ +cGUIc3a5ruGvBRRW2/DnmqNLnyceZjiECksPvo2tXn4jv+RymbCQbI+PlDPwkUrT +TRfoQrtkl0z6NvgMjlvhxoqZrqqjShy8V+O7miO7UMchaaKPH4Lbj6H8HVXQtLZd +xHoR2khLHhJUyxQbto0R+RNKjc6t9HZml5Yja5k2MSRv/qA+Qq+DMMXVwJmiJopt +ttwC6nqunTZGHO6A7vMWgf28rCYOC/H1B3jsIJdzY7Tp36CUUpcNjpb2SwWxwcPc +FS5wlcwwxdu4sKpBpML2mSDxMeWv/khO39x6rzTo9cxMieSWSPOxwx2wVtc1w6tV +30t7RJiY+Ppsm2Vjpsh3Viz/AOlfn1yTFhaYHR45F7iRuQid+Q6LeG1M8W4+ln/p +LTNPlqR07vGL+OR0jFpumSSdcLEv1HnZAAZqE4aeGnwaBPrSs4eu6lHxJPHN7Ney +r+xC9iw8iKHHEkkkuPju3RxO/K2zylPD+P1J05qJx4LWN4Kk0l4DFs/9I1+iavFm +sqRvhyNrc1x/0p9UzMaCIuMrA08WTwsXnHHj1TBbkseGuJY1wNN69fhavLhglwCw +xsIrgEDtJ9FoDzNY8BgkjaXF52sH/aB6lk5WaHn8S6427nNfN4d/YdlNwZcbL1Wb +DeyUOxmcWeLJ9EUnigLCJIyJB07vhPDVelM4yl4zMZTRiYsWVkwDw5P6w8ur7qjl +YjMpjpoXHY0B48y0udiNnh2OLpG1w0DpCPwB0/FkaLa1w6PohJq+BppdADohDOcy +RzC2aF7G7x3Q/wBrK4ETmttx7+VqdayvF07DxX8sj3u65F/KzmI1rY7JapKXAKPR +z4PFbtcAQgmoaa6I7mct+Fod3HBHsmyU4U6iljNoM4KRkA4sJ/17JIzmafHI8uj4 +spLQpJmV45Lh9N6fguqZ3Ya9wr9VkvrDBfiZGNkFwIkcbA4oei2mJltidlNJ8viF +24dUT/lZn67kGRAJGO3Brm9eyqNc/wCkGC9rYufYK/BIx9tc22O8v6IHgSh0DR7g +covjUSOewlaHRI2CLe5gb5BwFKcSFrvLub9lOxoNOAJrtEYIGzNtvfwpQyQNbjY7 +m0+R7h7KWLHibxEwBv8AkokMANeHPFBKSXHxwdrQSB3alDUkA8vTHZObBkEAMh6B +PZRcD+TQJJAVWXLfIAGsAbfFBXsVtsNVfrYUYVEycuE12qmePyysbtoeoRVokLGl +zNwpR6rE/HymTs7vnhF8Ex5GO1xbYcPTlQCigYyOyXMY0fcIX9QYofjvIAulqpGM +j759ekJ1NvixOa1pIr1RSBJcOJ/UBMUOTV0OAaQLCyWBobKPsVrPrmSKHFlhLR4j +300j0AWHj2sYOyU9JoxuTUuBsGOht/dIhnYFCvdDGT02m2mmZ9pPxj/lVBLy7j5q +KSGlxSTKJHM65/Dz6jbrGjsxMh5/H4/lNn84Wu+p4mZGhyBrKlay/vS+edOz5tE1 +ZmRiu2ysN16P+PsuuaJ9a6Zq+BJ+Pnbjylu0xyOr09PhNJX0EZ7KmM014/Dgj04R +/Ek/lgn/APFl9Ie1zCGEObZA+aWhga7wiWc36KtlkWaHBJBHfKO4zYuDQ/Q0s3il +wABCJDJIYaJUsuTVFvUcirAcSB8qu3DORhvLvzEcKo2TxJS6Q00eiIsyw9gDOAAg +uh2QIZKMchkzHCRvYA4RLStQxHmRr2gkji+E2QiQGxZ9VRyMJsry7lrv728WjQNr +PfqPLhdshx27pHHoc0rGmRyQYbA783dBCGQHFcSOXHsk8qYamYA0OPPoFGiXXWaI +y22ibNeyD6vIBG/7KTCdJm24HaKVHWGFsbtxJKVMDlw4t/EZ5blsPoSeFj/F9mH9 +1sv4lNIyoAOySsXtkb/QSr4+KzBP/TJGyvB4YvTJITdNH6qK5AeGJHxevDKakLbJ +HOlvsBJQ3N/akpRLC31DjiOV720Ob4QmGYscARd/4Ws1bHblB+2w61lHwOjlIeCA +EmN2qGyKpWdK+lsio2NLuCAQt/prmuAJ7XMPp5948Dx/augaNksBaCeSkkumiDNS +yLbRA4VyIAjzN+6r40jXxjkUrBcWNNGrVbGspTQOklkMbw2jwPRD5Zc3EkIkjc4X ++ZqLteGOLff1TmAOBD+x0om0WRBkGs7uHQvB66KkdrIbYfC6++ii0bI43bixoPfQ +SypmSE2wGvYJ/Rtor6Mtl6hPK4mOB1u+Ol7puK6eYvyxucOm+gRnKY0jygNJ7oKo +24iTYFpW/ojaYWw6gheG0OOEJ1C3nnoWpWZW6J3J44CDa/qEeFp80r3Bu1pPfqgk +USlRyr+IWU2fXRG0ghg5r3WdeAa/7UWVlPzdQmyH9vcSpLsg9haKooi7PDRPAXrv +MQvCOeE0GgeeUaDf0PNeyS8A5PCSJLNdLsi3nsWaQfJEUznW0WOEUyiTMG+UWUHd +cT3tcORz91MGNa7Moz5Gpao0P09HWFFXQJaVpcZ5iLXDsH3QH6O/n4UoA4a5aiGI +HsClXPjNEfEG9Kz97QCUeEm9lgtsdLEx7oJNzb2uPIWjwssbG8i++VXJDpl557Lj +0nQzHi3c9qrM/eSRVE9JMIvng0loeMuhIZG4ckfZNc0np1AjlQxsDmhxIDyf2V+L +bwLBvtNTos2BE0r4yQef0Q7NyCW3ytDnsiDOOx7LG63O1hPNX6IV0WU+FrFyRt5c +a7XNv4ma940n4GF/y+v9I5rOrt03TpHA/wA2jQXJciV+RkPkldue51kq2Efsy5J3 +wfjjkGv/AErZPZTYYwGX7qUNBsBO2SKaQy6ScAel65v7pu0/r91CP+C6+Ek51+iS +JKNLO7xMk+a9p4VfUMd8rWPhG6QmqVig15Nc37pRSbJgDVfdaVDWOqMLntPYN/QO +O+COWOUEEm/utq2Hz9goB9OEOk3NcSfUf+Fs44GuAIPNLDPj6dKDTiqBU8JoilBF +I6B1EmuloTjAjrkofm4FgkDzIWBo8Zk32QWr38U5oNUa6Q10csLqouscpnivHB6+ +yFBTC7dRDfz9JO1qmnbuA/yg4mJ5cF4ZiLp1H7I0Cy5ma28g7Q7pZnOyHvkdJKfM +TwBzSuZJkkcQFWGHy58hF90jQrbZiPq+WTwmbtx3n9lmsXGfN+X9LWy1qJmaZ2uF +hhofdBYGNiNBgaR3av0lXDPvHboMBfA7bIDQU8bx2iM8bJ2Fr2tv4PKE5GNJjklt +uYg4y+0Opq/1Y+WSnEJm/nkj9FHYl5JolOlidH63fKFBbb6eku9wkoeW9hJEWzaS +gF7yPdRvbxyppAWuceDz+6jJBsO49lsMNlzRtRfh5DXjmjyK9F1bQc2DUIGvicOu +QewuMVtNirRTQtYm03LbJC+j7HoqnLiU1z00Ys2nH4dtZFuolKTGaQUM+n/qDD1V +jW+I2PIFbo3GiT8LQNZfIO4EWKCwuLjxm+MlLqA0+CHi65VN2BGTe3n7LTOjB7pQ +SQCr4UCwB/xMbvQWmf8AEQsu6PCOFpZdFVpbdfqiAz8+MxppjRaE6oPBhd/dXC1E +0YaCfVZnVqdKd/5W8n9EV6LLiMRkRbX5AIpzhaFZMQI8QDmuUWdN4+RO4irJofCo +V5nMPXQW6K4jnOVyZRA3U4d/ZTXGWVIKv4tR8xvr2KlAa4Hq01AsG5WmCy6E0ofw +0u2nFpI65RbmM8eZq9kjDxubV90keNMdZGuAF8bmmnNpJFDHuPLTaST8f/S1ZV9h +PGyGu8r3cg8Ep8jSD5hfsqkkW1xLDxadFlOjpsgDgPRy0WzLX8JDYNWHBRvDrsGu +FaAZLGZI747F/lXgjI5Db+FAXQ2LJmira47h0RxS6V9KfWpYyKHVnEtNVNXP6rm4 +hJ7AHwrTBs/KlnjU10aGVw6j6FxciLIhEkUjZY3DhzTYKdIAeB/pcN0rWM/SXB2D +kPjB/wDrPLT+nS2/07/EKDKJj1cNgcBxK38rlknglHw3Y/kxlx8NlJGXHgBQGHk7 +rKm0/UMLUG7sLIhm9fIVZc1rfbd2qmqL7T6gJnxFkR4rjpc/+pJxj77Pmdw0LoOu +ZbcYDxQQ02S4DgLj2s6g3UdSmeCQxppqtww2Znzz1VIoinPDgeRwVXkLTkEAkt7U +kzhE1znu2tAs/JQj/kGzSPbjg36u6WxujEk2T5Gx0lsPHrwo+WnhOaPKEqHaAR97 +u15G7Y7aSAE0f56UoaHNr1RAyUsaeSf2SULS9oPskpYKH0Q42fWqTjGHDmuUnO8x +J9+6T2ur7+iYFnmNuxpLYLB7b8KY5bY+WwO57J5TAfn0pOodirUonoz8YwmhFI2/ +ZSjJYPMGyE+1KN0TTdjkpwYG2OSPsoTh7LM+UURUZ7aOyo3yNEJYyHzE8SAp+wtr +Yef8Lzr8zb+yFETHaVqmdpWbHkYsjmSNP6EfPuup6B9f4uosEWe1uPORQcPyn9Vy +doskUCO098YIsjnsUkljUl0tx5pQOnfxA1ZsWnMxonAyTUSfYLmMW3cfnm1I/Imn +Y3xpHyFraG5Us+UxQPLfzEUSpCOiBOX5JAzXMzxX+BGf5bez7qLSm3ud88Kg6zZP +aMaZEPAaTVu5Vcf2lZY/1iXaG1vuU0t55KnczgcddJBouyr6KLIdnNg2pYxxfSeG +0RS9d3XqpRGz3aOzSSV2OyAkoA//2YkCOAQTAQgAIgUCUFPSVgIbLwYLCQgHAwIG +FQgCCQoLBBYCAwECHgECF4AACgkQ2yIaaQAAABHJIRAAqw6XhKLlR3Z16/ffQVKn +ufReh7ppzpzazuZ2x9XNFpt12Wn7yxujSvmczgiDIBxNuLPIDW7prXwRIoFazNvB +QB7+ybYQMvvPCwObwdRksQdtRfq2B39s+OQCcVqyQmFgoMWdixb7QPy2jPj9qq65 +A33xrtFSdttaPB7xz2aIS5y2ff8jxwEJuAy0D1PwcPM/fx2Vvm0YwB2QJZwCoGfp +/ExXLs1cWyAp6t3p2eRWVlslxGhNEVEKfVxtZbexOkoW03cYHjHz/R1tpob9RtoD +FmFURx93L748u53apd/UfKLX+QOQgxy16AeWNEk+i7kEc5I90OWC2Nw5InFH1U/q +ghCsaI2Rlj+AxMke6s7960TOd+rzueyHB5Hc/5Y/wj9LlCcT7DhpIvaxCmBi3X8S +tUeWKv/tmkB3Xm5ZwSpMcDVDcB2MYIH03LU+YIjNK12PY2Mx33xwotWPfHFSdQbp +XgyNzQ4gwSux5EMy/QWd1wdzJlm7/ziqoi6OFAKaegfcx2GLzT4eftvle7DobhKR +uT0qjnBVfIB9OYBOKt97rih1kRu2qAlfZ2RAEfOkyqsvxOvlLpRj+h8HGpVxlm8/ +pSWe67Mnrud+WUhkSFy+VQ5PytuLg9Sj9dYqpvjdIWKznSyXDMp33ESdXuPSjrDG +SGRPcpHsZfPPtN5C4DKCW6u5Ag0EUFPTiAEQALJFhTN1G+UKSvZasHuRghCv3FTB +RuhMmEeeq1SDOCfLat8dOGZz9uUam6JFesu2dquNuvEGex/JicEcKtfWhFTWl8jx +4ZcuSssXr3w/O4a+e5WfXVkyUWiAenH6nDdpO0TGkOHNYOzFpgI80yCQQwauRlAY +RDpfMWS+Bwx9VNPW5CPUIaPjX2ysBJn6bQFcbdLucUv2ZVwpIAGdIA9Wm0XFlSv1 +Q+dDtfXssuRU2YKmy0/UauLgs6FXncBPrWxY9S11SPiMqbWFgEoXkSYmt/ogXnSq +VS3l6Gt4wntO8cMqm7je3/zM61CMSUQkvl8QFukYlf1hVgf6ljENYmw1WZKQs1ii +yslNEOu49QqVib+do8OoW9HTfmi2RM+sWJWSSq8NS8uBmXiK34NNGKv1y4F9PBvw +1hraMkV6ytebbFhuvOYppWDgBdy7jeRCD9GTWVbc5Bi3T9rkB18wVgaT5BrWUi9u +Js41iQBKB5LGQMdDoJ8rm/GOnWN7B4SmGhPX3dIILHecruKnpaFf13M+zQkqYJrW +0yROdjF7/E9FGx7N33dLgTa9M49s3a4o8RRty1kVfVqlHBYOjFEW40NFKOqKTPIS +xUSItEnSOn329xfd2lVUap5krrxBgYUX9QrydefVLZBnEH+L1iSxk3Ho/H3lkgUv +ZKCadqiypJyb2pR7ABEBAAGJAh8EGAEIAAkFAlBT04gCGwwACgkQ2yIaaQAAABHa +4A/9FCKVTIFqIVS86NXS3qnMuBnzG5Yuor7nVIdF8f3bHFXneE5w9yEVuXhozm3q +4zsg2jy1Xp8ENJAbFukvv8e1nNInIdUtfbgvd06zSvKx5lIjS4qVYd84NMX9a7Qh +Rh7SxJ7hC2RPZuckcZ9rTY7XJ9SBf6MxMDKu3+FxsTElnTKR5c9sse2nuaz55GOc +dNjcOJkw0+orjE+VYRz4O+srKrfIqcfbAqCsxQv50qv2Uu/v8SzbizGycCHBHAlS +w/lZiYPQF7+vwCZKJsjsWQ7Q4jcONRQoMTfk6ab6bASBe5qgr7mFK0zbXdc3NKsQ +S3nADDbUB2mmKf7fxVUtgAs2iwW0J0MiHpYeWYDaJIWFgfyhSesRLGwXY2eLrQwx +9a+koBYs6GdMxIKPDEVSOeqW3AOGAeS2fGLoZQlP6aGK2zQ6oo//Mm2JQzXlssXa +aVZXGIKP1H+j6Hj+k7ZZwiY0oBQ6AxB+ws84fWhqwQTNEeXEI9eJoPwqhzIXF1HG +7PsJmoD1d8LyUYXKV3jeUog5LMmP72uaoEHxe4O755fhZs5sZJsZQK/0t8F4puN9 +fKD3iy0vHGxm8/Ky/aA5Ht1yXO2IXiIB6pCwKCwdXFac8/lM7y3Kw1ZmLzXye7uK +vGV00vpWiKictDhgO2blBL8SHtuBmn7HxiLjJz6eshyZsHU= +=QLko +-----END PGP PUBLIC KEY BLOCK----- --- libxfont-2.0.1.orig/debian/watch +++ libxfont-2.0.1/debian/watch @@ -0,0 +1,4 @@ +#git=git://anongit.freedesktop.org/xorg/lib/libXfont +version=3 +opts="pgpsigurlmangle=s/$/.sig/" \ +https://xorg.freedesktop.org/releases/individual/lib/ libXfont2-(.*)\.tar\.gz --- libxfont-2.0.1.orig/src/bitmap/pcfread.c +++ libxfont-2.0.1/src/bitmap/pcfread.c @@ -45,6 +45,7 @@ #include #include +#include void pcfError(const char* message, ...) @@ -311,11 +312,19 @@ if (IS_EOF(file)) goto Bail; position += string_size; for (i = 0; i < nprops; i++) { + if (props[i].name >= string_size) { + pcfError("pcfGetProperties(): String starts out of bounds (%ld/%d)\n", props[i].name, string_size); + goto Bail; + } props[i].name = MakeAtom(strings + props[i].name, - strlen(strings + props[i].name), TRUE); + strnlen(strings + props[i].name, string_size - props[i].name), TRUE); if (isStringProp[i]) { + if (props[i].value >= string_size) { + pcfError("pcfGetProperties(): String starts out of bounds (%ld/%d)\n", props[i].value, string_size); + goto Bail; + } props[i].value = MakeAtom(strings + props[i].value, - strlen(strings + props[i].value), TRUE); + strnlen(strings + props[i].value, string_size - props[i].value), TRUE); } } free(strings); --- libxfont-2.0.1.orig/src/fontfile/fontdir.c +++ libxfont-2.0.1/src/fontfile/fontdir.c @@ -400,8 +400,10 @@ } } case '?': - if (*string++ == XK_minus) + if ((t = *string++) == XK_minus) stringdashes--; + if (!t) + return 0; break; case '\0': return (*string == '\0');