libxfont (1:2.0.5-1ubuntu0.2) jammy-security; urgency=medium

  * Manage the security patches with quilt. The same fixes as 1ubuntu0.1 are
    applied, but as tracked patches rather than edits made directly to the
    upstream sources.
    - debian/patches/CVE-2026-56001.patch,
      debian/patches/CVE-2026-56002.patch,
      debian/patches/CVE-2026-56003.patch: add the patch files, which
      1ubuntu0.1 referenced in its changelog but did not ship.
    - debian/patches/series: list the three patches (was "# placeholder").
  * debian/patches/CVE-2026-56001.patch: additionally convert the
    "Couldn't allocate bitmaps" fprintf() to %zu instead of %d.

 -- John Breton <john.breton@canonical.com>  Thu, 16 Jul 2026 07:44:32 -0400

libxfont (1:2.0.5-1ubuntu0.1) jammy-security; urgency=high

  * SECURITY UPDATE: Integer overflow
    - debian/patches/CVE-2026-56001.patch: Bitscale: fix integer overflow in
      BitmapScaleBitmaps bytestoalloc
    - CVE-2026-56001
  * SECURITY UPDATE: Buffer overflow
    - debian/patches/CVE-2026-56002.patch: Pcfread: validate bitmap sizes and
      offsets against per-glyph metrics
    - CVE-2026-56002
  * SECURITY UPDATE: Buffer overflow
    - debian/patches/CVE-2026-56003.patch: Bitscale: add bounds check to
      computeProps for property buffer
    - CVE-2026-56003

 -- John Breton <john.breton@canonical.com>  Wed, 15 Jul 2026 14:03:00 -0400

libxfont (1:2.0.5-1build1) jammy; urgency=medium

  * No change rebuild for ppc64el baseline bump.

 -- Julian Andres Klode <juliank@ubuntu.com>  Thu, 24 Mar 2022 17:15:11 +0100

libxfont (1:2.0.5-1) unstable; urgency=medium

  * New upstream release.

 -- Timo Aaltonen <tjaalton@debian.org>  Wed, 17 Nov 2021 11:43:44 +0200

libxfont (1:2.0.4-1) unstable; urgency=medium

  * New upstream release.
  * Bump debhelper to 12.
  * rules: Use dh_missing.
  * control: Bump policy to 4.5.0.

 -- Timo Aaltonen <tjaalton@debian.org>  Wed, 23 Sep 2020 15:21:29 +0300

libxfont (1:2.0.3-2) unstable; urgency=medium

  [ Debian Janitor ]
  * Trim trailing whitespace.
  * Replace XC-Package-Type with Package-Type.
  * Drop transition for old debug package migration.

  [ Timo Aaltonen ]
  * control: Migrate to x11proto-dev. (Closes: #958337)

 -- Timo Aaltonen <tjaalton@debian.org>  Tue, 14 Apr 2020 23:20:23 +0300

libxfont (1:2.0.3-1) unstable; urgency=medium

  * Add Matthieu Herrb's key to d/u/signing-key.asc
  * New upstream release.
    + Open files with O_NOFOLLOW. (CVE-2017-16611)
  * Update package metadata for move to salsa.

 -- Julien Cristau <jcristau@debian.org>  Sun, 18 Mar 2018 16:35:45 +0100

libxfont (1:2.0.1-4) unstable; urgency=high

  * Check for end of string in PatternMatch (CVE-2017-13720)
  * pcfGetProperties: Check string boundaries (CVE-2017-13722)

 -- Julien Cristau <jcristau@debian.org>  Fri, 06 Oct 2017 22:19:41 +0200

libxfont (1:2.0.1-3) unstable; urgency=medium

  [ Andreas Boll ]
  * Remove dh-autoreconf build-dep. Not needed with debhelper 10.
  * Remove obsolete Conflicts from pre-wheezy.
  * Update a bunch of URLs in packaging to https.
  * Remove superfluous --libdir from dh_auto_configure. Not needed with
    debhelper compat level >= 9.

 -- Timo Aaltonen <tjaalton@debian.org>  Thu, 24 Nov 2016 21:27:58 +0200

libxfont (1:2.0.1-2) unstable; urgency=medium

  * Switch to -dbgsym packages.
  * Bump debhelper compat to 10. Drop --with quilt and --parallel flags,
    they are enabled by default now.
  * Upload to unstable.

 -- Emilio Pozuelo Monfort <pochu@debian.org>  Tue, 22 Nov 2016 23:50:03 +0100

# For older changelog entries, run 'apt-get changelog libxfont2'
