linux/poky.git/meta/recipes-gnome, branch scarthgap-5.0.13

gdk-pixbuf: fix CVE-2025-7345

2025-07-21T16:07:21+00:00

A flaw exists in gdk‑pixbuf within the gdk_pixbuf__jpeg_image_load_increment function (io-jpeg.c) and in glib’s g_base64_encode_step (glib/gbase64.c). When processing maliciously crafted JPEG images, a heap buffer overflow can occur during Base64 encoding, allowing out-of-bounds reads from heap memory, potentially causing application crashes or arbitrary code execution. (From OE-Core rev: 78a52a7feb995b4ab4f4df6b16feaac60f6ad59b) Signed-off-by: Archana Polampalli Signed-off-by: Steve Sakoman

gtk+: add missing libdrm dependency

2025-06-13T15:58:01+00:00

Fixes [YOCTO #15513] When built without the wayland feature, gtk4 does not build due to a missing explicit dependency on libdrm. (From OE-Core rev: 46c7f1a8d6b39256479abd8a7bb7be1ccf221267) Signed-off-by: Andrew Fernandes Signed-off-by: Richard Purdie (cherry picked from commit b32290d9bbcfccc9b85fa5acbeaee5d32d9a9091) Signed-off-by: Steve Sakoman

gcr: Fix LICENSE

2024-09-19T12:11:35+00:00

The contents of the COPYING file included in the current source code package match those of LGPL-2.0 license, which seems to have been the case since 2011 commit https://gitlab.gnome.org/GNOME/gcr/-/commit/c6691faa0348ab087e99ab9bd9914e1d5e81fa14 (From OE-Core rev: f3ae58b741e4e6e3a5196ff75fcc4da6ee89d0b9) (From OE-Core rev: 422bee7302ea26403e0ac048d3a0e72988be83b3) Signed-off-by: Niko Mauno Signed-off-by: Richard Purdie Signed-off-by: Steve Sakoman

libadwaita: upgrade 1.5.1 -> 1.5.2

2024-09-09T13:08:10+00:00

Changelog: ========== - AdwAlertDialog - Fix unmatched va_start() - Fix setting default widget when removing a response - AdwBreakpointCondition - Fix leaks when parsing - AdwBreakpointBin - Fix a leak - AdwDialog - Fix toggling presentation mode - Fix close button ignoring :can-close - Fix ::close-attempt not emitting in some cases - Fix swipe area for bottom sheets - Leak fixes - AdwHeaderBar - Fix initial focus for the back button - Fix split view links in docs - AdwMessageDialog - Fix unmatched va_start() - AdwSpinRow - Fix ::input handling - AdwTabButton - Fix needs-attention badge on RTL - AdwTabView - Accessibility fixes - AdwViewStack - Accessibility fixes - Translation updates - Nepali (From OE-Core rev: 5cc094b5ba1a6e685b01ff35130c4e69fdc7e0ec) Signed-off-by: Wang Mingyu Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie (cherry picked from commit 25b8f5059061bf52257117ba7d54031a31388fb1) Signed-off-by: Steve Sakoman

librsvg: don't try to run target code at build time

2024-08-26T12:18:44+00:00

The rsvg-loader test binary isn't installed but building it causes a mix of build host and target code to be executed. As we don't install the test, don't build it. (From OE-Core rev: 310e9387a7a89b8a2a01ecc9fe889ede16622d66) Signed-off-by: Ross Burton Signed-off-by: Richard Purdie (cherry picked from commit 78667e67a77df39c2af417e56ebf480962ff2e42) Signed-off-by: Steve Sakoman

libadwaita: update 1.5.0 -> 1.5.1

2024-07-26T14:43:46+00:00

============= Version 1.5.1 ============= - AdwAboutDialog/Window - Fix an outdated appstream reference in docs - AdwActionRow - Mention .property in docs - AdwAlertDialog - Fix the accessible role - Fix initial focus - AdwAvatar - Fix portrait avatars on hidpi - AdwBin - Fix a potential focus issue - AdwBreakpoint - Fix add_setter() annotations - AdwCarousel - Fix a build warning - AdwComboRow - Fix initial checkmark - Handle model changes properly - AdwDialog - Fix accessibility warnings - Make shortcuts work when there are no focusable widgets - Correctly restore focus when opening a dialog from a menu - Fix GtkWindow:deletable=false hiding close buttons in dialogs - AdwExpanderRow - Fix get_title_lines() and get_subtitle_lines() return types - Fix remove() docs - AdwOverlaySplitView - Unmap sidebar when it's hidden - AdwPreferencesGroup - Fix a potential focus issue - Fix :header-group annotations and notifications - AdwPreferencesPage - Fix a potential focus issue - AdwTabView - Document :close-page return value - Fix a leak when closing the last page - AdwViewStack - Fix a typo in docs - Docs - Update screenshots - Stylesheet - Fix entry progress bars - Add missing return annotations - Translation updates - Brazilian Portuguese - Hindi - Kabyle - Portuguese - Slovak (From OE-Core rev: 497383a38b76deff6d800a1f3d3e9355ee6335ce) Signed-off-by: Markus Volk Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie (cherry picked from commit 301470de9a1a6a44de9a3d7c815e86dba162da68) Signed-off-by: Steve Sakoman

libportal: fix rare build race

2024-07-17T12:36:13+00:00

There is a build race where the libportal.vapi is not always generated before it is needed to build libportal-gtk*.vapi. Backport the fix from upstream. [ YOCTO #15479 ] (From OE-Core rev: d7019c20a6516b1b98c1ce92eae8a536eddf379a) Signed-off-by: Ross Burton Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie (cherry picked from commit 2d984e52cded09647b210bd79cfec9deb4b7b589) Signed-off-by: Steve Sakoman

gtk4: Disable int-conversion warning as error

2024-06-20T13:29:43+00:00

This helps builds on 32bit machines when using GCC-14 there is a bug filed for fixing this in code [1] [1] https://gitlab.gnome.org/GNOME/gtk/-/issues/6033 (From OE-Core rev: 67e5be967e9d10ed295e9ca4cbfdf759f33e143f) Signed-off-by: Khem Raj Signed-off-by: Richard Purdie (cherry picked from commit 3735b5566c7e0e1a36171523e7b553497f4da1a4) Signed-off-by: Steve Sakoman

gdk-pixbuf: upgrade 2.42.11 -> 2.42.12

2024-06-14T12:19:22+00:00

- Fix a build failure (Christian Heusel) - Fix occasional build failures (Benjamin Gilbert) - ani: Reject files with multiple INA or IART chunks (Benjamin Gilbert) - ani: Reject files with multiple anih chunks (Benjamin Gilbert, CVE-2022-48622) - ani: validate chunk size (Benjamin Gilbert) - Translation updates (From OE-Core rev: 246c1b01ca21a8102ab7a400f88621e8a95281af) Signed-off-by: Ross Burton Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie (cherry picked from commit c5b202b0aef56ecf7982887c54b4ecbc4bbe73ae) Signed-off-by: Steve Sakoman

gdk-pixbuf: upgrade 2.42.10 -> 2.42.11

2024-06-14T12:19:22+00:00

0001-meson.build-allow-a-subset-of-tests-in-cross-compile.patch fatal-loader.patch refreshed for 2.42.11 Changelog: =========== - Disable fringe loaders by default - Introspection fixes - Translation updates (From OE-Core rev: 78d7d14194f25be800fb42c8e81f7709611d26cd) Signed-off-by: Wang Mingyu Signed-off-by: Richard Purdie (cherry picked from commit 243a6fce44882ff16c5dfcb518cafd8ee8f7ae24) Signed-off-by: Steve Sakoman