fontforge.git
21 months agoUse packaged copy of MathJax from libjs-mathjax
Anthony Fok [Thu, 7 Mar 2024 23:15:58 +0000 (01:15 +0200)]
Use packaged copy of MathJax from libjs-mathjax

Origin: vendor
Forwarded: not-needed
Last-Update: 2020-11-24

FontForge documentation uses sphinx.ext.mathjax which insert script links
to MathJax served on remote CDNs.

This patch, together with debian/fontforge-doc.links, replaces remote
scripts with MathJax from the libjs-mathjax package.
See https://bugs.debian.org/739300 for discussion.

Fixes Lintian privacy-breach-generic warnings.
Last-Update: 2020-11-24
Gbp-Pq: Name 0003-use-local-libjs-mathjax.patch

21 months agoRemove custom library search path (RPATH/RUNPATH)
Anthony Fok [Thu, 7 Mar 2024 23:15:58 +0000 (01:15 +0200)]
Remove custom library search path (RPATH/RUNPATH)

Origin: vendor
Forwarded: not-needed
Last-Update: 2020-11-18

This reverts upstream's preference of setting RPATH/RUNPATH for
installed binaries.  Fixes Lintian custom-library-search-path error.
Last-Update: 2020-11-18
Gbp-Pq: Name 0002-remove-custom-library-search-path.patch

21 months agofontforge (1:20230101~dfsg-1.1) unstable; urgency=high
Adrian Bunk [Thu, 7 Mar 2024 23:15:58 +0000 (01:15 +0200)]
fontforge (1:20230101~dfsg-1.1) unstable; urgency=high

  * Non-maintainer upload.
  * CVE-2024-25081: Spline Font command injection via crafted filenames
  * CVE-2024-25082: Spline Font command injection via crafted archives
    or compressed files
  * Closes: #1064967

[dgit import unpatched fontforge 1:20230101~dfsg-1.1]

21 months agoImport fontforge_20230101~dfsg-1.1.debian.tar.xz
Adrian Bunk [Thu, 7 Mar 2024 23:15:58 +0000 (01:15 +0200)]
Import fontforge_20230101~dfsg-1.1.debian.tar.xz

[dgit import tarball fontforge 1:20230101~dfsg-1.1 fontforge_20230101~dfsg-1.1.debian.tar.xz]

2 years agoImport fontforge_20230101~dfsg.orig.tar.xz
Anthony Fok [Wed, 18 Jan 2023 18:05:41 +0000 (11:05 -0700)]
Import fontforge_20230101~dfsg.orig.tar.xz

[dgit import orig fontforge_20230101~dfsg.orig.tar.xz]