libXfont2-2.0.2 (xorg library)

[bdubbs@…]

New point version.

[ken@…]

A collection of minor fixes since 2.0.1, including CVEs 2017-13720 and 2017-13722.

Adam Jackson (5):

configure: Use -fvisibility=hidden if available autogen: Set a default subject prefix for patches freetype: Fix a logic error in computing face name readme: Update for libXfont 2.0 interface change libXfont 2.0.2

Emil Velikov (1):

autogen.sh: use quoted string variables

Jeremy Huddleston Sequoia (5):

FreeType: Correct an allocation size bitmap: Bail out on invalid input to FontFileMakeDir instead of calling calloc for 0 bytes fserve: Silence a -Wformat warning fstrans: Remove unused foo() function fserve: Fix a buffer read overrun in _fs_client_access

Keith Packard (1):

Revert "Add compiler warning flags". Leave warning fixes.

Michal Srb (2):

Check for end of string in PatternMatch (CVE-2017-13720) pcfGetProperties: Check string boundaries (CVE-2017-13722)

Peter Hutterer (1):

autogen.sh: use exec instead of waiting for configure to finish

The CVE details are now available at mitre. They appear to be attacks by local users.

[ken@…]

Fixed in r19323.