CVS log for pkgsrc/fonts/pcf2bdf/distinfo

Up to [cvs.NetBSD.org] / pkgsrc / fonts / pcf2bdf

Request diff between arbitrary revisions

Keyword substitution: kv
Default branch: MAIN

pcf2bdf: update to 1.07.

1.07 2022/02/23

- CVE-2022-23318
  Fixed: heap buffer overflow on invalid intput pcf.
- CVE-2022-23319
  Fixed: segmentation fault on invalid intput pcf.

fonts: Replace RMD160 checksums with BLAKE2s checksums

All checksums have been double-checked against existing RMD160 and
SHA512 hashes

fonts: Remove SHA1 hashes for distfiles

pcf2bdf: update to 1.06.

pkgsrc changes:

- Upstream moved to GitHub
- Add missing LICENSE marker
- Stop patching Makefile.gcc and use a do-build target instead

ChangeLog:

1.06:

- Fixed: too-long-path-to-input.pcf.gz causes stack-based buffer overflow.

1.05:

- The size should come from POINT_SIZE instead of PIXEL_SIZE.
- Internal quotation characters in a string property should be indicated
  (or "quoted") by using two quotation characters in a row.
- Fix avoid crash with large compressed metrics tables. (Colin Watson)
- Fix support gzipped source. (Colin Watson)
- Fix use C++ compiler and simplify using GNU extensions. (Jonas Smedegaard)
- Other fixes.

Add SHA512 digests for distfiles for fonts category

Problems found locating distfiles:
	Package acroread7-chsfont: missing distfile acrobat7-fonts/chsfont.tar.gz
	Package acroread7-font-share: missing distfile acrobat7-fonts/korfont.tar.gz
	Package acroread7-korfont: missing distfile acrobat7-fonts/korfont.tar.gz
	Package acroread9-chtfont: missing distfile acrobat9-fonts/FontPack910_cht_i486-linux.tar.bz2
	Package acroread9-jpnfont: missing distfile acrobat9-fonts/FontPack910_jpn_i486-linux.tar.bz2
	Package cyberbase-ttf: missing distfile cyberbit-ttf/Cyberbase.ZIP
	Package cyberbit-ttf: missing distfile cyberbit-ttf/Cyberbit.ZIP
	Package pixel-sagas-startrek: missing distfile PS_Font_Fontana.zip
	Package pixel-sagas-startrek: missing distfile PS_Font_Montalban.zip
	Package pixel-sagas-startrek: missing distfile PS_Font_Probert.zip
	Package pixel-sagas-startrek: missing distfile PS_Font_Sternbach.zip
	Package pixel-sagas-startrek: missing distfile PS_Font_Trek_Arrowcaps.zip
	Package umefont-ttf: missing distfile umefont_560.tar.xz

Otherwise, existing SHA1 digests verified and found to be the same on
the machine holding the existing distfiles (morden).  All existing
SHA1 digests retained for now as an audit trail.

Add RMD160 digests to the SHA1 ones.

- don't override compiler variables
- don't gcc specific flags

Invoke the C++ compiler explicitly - fixes a build problem with gcc3.

first import of pcf2bdf-1.04, a bitmap font de-compiler to the NetBSD
Packages Collection.

Pcf2bdf is a font de-compiler.  It converts  X  font  from
Portable Compiled Format (PCF) to Bitmap Distribution For-
mat (BDF).  It can also accept  a  compressed/gzipped  PCF
file as input, but gzip must be found in your PATH.

FONTBOUNDINGBOX in a BDF file is not used by bdftopcf , so
pcf2bdf generate irresponsible values.

Initial revision