libxfont (1:2.0.6-1+deb13u1build0.24.04.2) noble-security; urgency=medium

  * Manage the security patches with quilt. The same fixes as
    1:2.0.6-1+deb13u1 are applied, but as tracked patches rather than edits
    made directly to the upstream sources.
    - debian/patches/CVE-2026-56001.patch,
      debian/patches/CVE-2026-56002.patch,
      debian/patches/CVE-2026-56003.patch: add the patch files, carrying the
      CVE-2026-56001, CVE-2026-56002 and CVE-2026-56003 fixes that
      1:2.0.6-1+deb13u1 applied directly to the upstream sources.
    - debian/patches/series: list the three patches (was "# placeholder").
  * debian/patches/CVE-2026-56001.patch: additionally convert the
    "Couldn't allocate bitmaps" fprintf() to %zu instead of %d.

 -- John Breton <john.breton@canonical.com>  Thu, 16 Jul 2026 07:44:32 -0400

libxfont (1:2.0.6-1+deb13u1build0.24.04.1) noble-security; urgency=medium

  * fake sync from Debian

 -- John Breton <john.breton@canonical.com>  Wed, 15 Jul 2026 12:23:43 -0400

libxfont (1:2.0.6-1+deb13u1) trixie-security; urgency=high

  * Non-maintainer upload by the Security Team.
  * bitscale: fix integer overflow in BitmapScaleBitmaps bytestoalloc
    (CVE-2026-56001) (Closes: #1141702)
  * pcfread: validate bitmap sizes and offsets against per-glyph metrics
    (CVE-2026-56002) (Closes: #1141702)
  * bitscale: add bounds check to computeProps for property buffer
    (CVE-2026-56003) (Closes: #1141702)

 -- Salvatore Bonaccorso <carnil@debian.org>  Fri, 10 Jul 2026 14:32:27 +0200

libxfont (1:2.0.6-1) unstable; urgency=medium

  * New upstream release.

 -- Timo Aaltonen <tjaalton@debian.org>  Thu, 01 Sep 2022 14:03:08 +0300

libxfont (1:2.0.5-1) unstable; urgency=medium

  * New upstream release.

 -- Timo Aaltonen <tjaalton@debian.org>  Wed, 17 Nov 2021 11:43:44 +0200

libxfont (1:2.0.4-1) unstable; urgency=medium

  * New upstream release.
  * Bump debhelper to 12.
  * rules: Use dh_missing.
  * control: Bump policy to 4.5.0.

 -- Timo Aaltonen <tjaalton@debian.org>  Wed, 23 Sep 2020 15:21:29 +0300

libxfont (1:2.0.3-2) unstable; urgency=medium

  [ Debian Janitor ]
  * Trim trailing whitespace.
  * Replace XC-Package-Type with Package-Type.
  * Drop transition for old debug package migration.

  [ Timo Aaltonen ]
  * control: Migrate to x11proto-dev. (Closes: #958337)

 -- Timo Aaltonen <tjaalton@debian.org>  Tue, 14 Apr 2020 23:20:23 +0300

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog libxfont2`.
