FS#75857 - [libxft] length check bug in 2.3.5

Attached to Project: Arch Linux
Opened by Dmytro Bagrii (dimich) - Friday, 09 September 2022, 04:13 GMT
Last edited by Andreas Radke (AndyRTR) - Friday, 09 September 2022, 06:16 GMT
Task Type Bug Report
Category Packages: Extra
Status Closed
Assigned To Andreas Radke (AndyRTR)
Architecture x86_64
Severity Medium
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 0
Private No

Details

libxft-2.3.5 release contain bug which impacts some dependent packages.

For example, fbrun tool from Fluxbox has broken initial state and causes segmentation fault when Backspace pressed on empty input (see this post: https://bbs.archlinux.org/viewtopic.php?pid=2056367).
The bug is already fixed in upstream: https://gitlab.freedesktop.org/xorg/lib/libxft/-/commit/95284856783b824a714b7506762f4adce3bb17ce.
I've built libxft locally with patch applied, it fixes the issue.

Can we apply the patch (attached) to libxft package until it is not included into upstream release?
   length-check.patch (1 KiB)
This task depends upon

Closed by  Andreas Radke (AndyRTR)
Friday, 09 September 2022, 06:16 GMT
Reason for closing:  Fixed
Additional comments about closing:  2.3.5-2

Loading...