linux/meta-openembedded.git/meta-oe/recipes-graphics, branch scarthgap

openjpeg: patch CVE-2026-6192

2026-04-29T04:44:29+00:00

Details: https://nvd.nist.gov/vuln/detail/CVE-2026-6192 Backport the patch referenced by the NVD advisory. Signed-off-by: Gyorgy Sarvari Signed-off-by: Khem Raj (cherry picked from commit 09050325e6e0736beccc40d125e56430054b7cb8) Signed-off-by: Ankur Tyagi Signed-off-by: Anuj Mittal

libvncserver: fix CVE-2026-32854

2026-04-13T07:10:21+00:00

Details: https://nvd.nist.gov/vuln/detail/CVE-2026-32854 Signed-off-by: Ankur Tyagi Signed-off-by: Anuj Mittal

libvncserver: fix CVE-2026-32853

2026-04-13T07:10:21+00:00

Details: https://nvd.nist.gov/vuln/detail/CVE-2026-32853 Signed-off-by: Ankur Tyagi Signed-off-by: Anuj Mittal

openjpeg: patch CVE-2023-39327

2026-03-24T03:22:13+00:00

Details: https://nvd.nist.gov/vuln/detail/CVE-2023-39327 Take the patch that is used by OpenSUSE to mitigate this vulnerability. Upstream seems to be unresponsive to this issue. Signed-off-by: Gyorgy Sarvari Signed-off-by: Anuj Mittal (cherry picked from commit fdddf2bdd3dea0ac53effbae904b4dcf0e8adf45) Signed-off-by: Bhabu Bindu Signed-off-by: Anuj Mittal

source-han-sans-*-fonts: rename downloaded files in SRC_URI

2026-03-03T07:38:08+00:00

In commit [0], we've switched away from SVN fetcher in SRC_URI. The archives downloaded are named SourceHanSans*.zip They are named this way regardless of the version 1.004 or 2.004. So when the new archives checksums are tested, the fetcher will look for the old archives with the same name in the DL_DIR. >From [1], there are checksum failures due to given checksums not matching the ones in DL_DIR. Thus, downloaded archives are renamed following their package name and version. [0]: https://git.openembedded.org/meta-openembedded/commit/?id=36a1e36e1272ca50e5dba0c4cf25ee3ff8b8f1c9 [1]: https://autobuilder.yoctoproject.org/typhoon/#/builders/156/builds/367/steps/16/logs/errors Signed-off-by: Alexandre Truong Reviewed-by: Yoann Congal Reviewed-by: Alexandre Truong Signed-off-by: Khem Raj (cherry picked from commit 08e414d496206d0959c2663fad7214596fad3cef) Signed-off-by: Anuj Mittal

tigervnc: mark CVE-2024-0408 and CVE-2024-0409 patched

2026-02-12T08:08:13+00:00

Details: https://nvd.nist.gov/vuln/detail/CVE-2024-0408 https://nvd.nist.gov/vuln/detail/CVE-2024-0409 Both of these vulnerabilities were fixed[1][2] in xserver 21.1.11, just mark them patched. [1]: https://gitlab.freedesktop.org/xorg/xserver/-/commit/8d825f72da71d6c38cbb02cf2ee2dd9e0e0f50f2 [2]: https://gitlab.freedesktop.org/xorg/xserver/-/commit/a4f0e9466f3bc7073a8f0c28a581211c2d7adf0e Signed-off-by: Gyorgy Sarvari Signed-off-by: Anuj Mittal

fontforge: patch CVE-2025-15270

2026-02-09T04:05:53+00:00

Details: https://nvd.nist.gov/vuln/detail/CVE-2025-15270 Pick the patch that mentions this vulnerbaility explicitly in its description. Signed-off-by: Gyorgy Sarvari Signed-off-by: Anuj Mittal (cherry picked from commit 15f2f350cc3c170cb016f824fbccfe2426307abc) Signed-off-by: Gyorgy Sarvari Signed-off-by: Anuj Mittal

fontforge: patch CVE-2025-15269

2026-02-09T04:05:53+00:00

Details: https://nvd.nist.gov/vuln/detail/CVE-2025-15269 Pick the patch that refers to this vulnerability ID explicitly. Signed-off-by: Gyorgy Sarvari Signed-off-by: Anuj Mittal (cherry picked from commit 449999f6767668df4378105b4c79c4a5db5125c3) Signed-off-by: Gyorgy Sarvari Signed-off-by: Anuj Mittal

fontforge: patch CVE-2025-15275

2026-02-09T04:05:52+00:00

Details: https://nvd.nist.gov/vuln/detail/CVE-2025-15275 Pick the patch that mentions this vulnerability ID explicitly. Signed-off-by: Gyorgy Sarvari Signed-off-by: Anuj Mittal (cherry picked from commit edc3b69cefe42c80e0cf8c5b64acc03a15da5ef7) Signed-off-by: Gyorgy Sarvari Signed-off-by: Anuj Mittal

fontforge: patch CVE-2025-15279

2026-02-09T04:05:52+00:00

Details: https://nvd.nist.gov/vuln/detail/CVE-2025-15279 Pick the patch that mentions this vulnerability ID explicitly. Also, this patch has caused some regression - pick the patch also that fixed that regression. Signed-off-by: Gyorgy Sarvari Signed-off-by: Anuj Mittal (cherry picked from commit 21418bce907ee06695d29f8ad759f2d9dfeed5b9) Signed-off-by: Gyorgy Sarvari Signed-off-by: Anuj Mittal