linux/poky.git/meta/recipes-graphics/xorg-lib, branch kirkstone

pixman: ignore CVE-2023-37769

2024-12-09T15:54:03+00:00

Same was done in newer Yocto releases. See commit 72f2d4cf44b795f766ecdee0b8362c7e162c5efc (From OE-Core rev: 390421edf8b6eb6031de657cdcaf0c7d50b605be) Signed-off-by: Peter Marko Signed-off-by: Steve Sakoman

libpciaccess: Remove duplicated license entry

2024-05-16T12:22:09+00:00

Remove duplicated MIT license entry for libpciaccess Duplication was done as part of below commit: Link: https://git.yoctoproject.org/poky/commit/meta/recipes-graphics/xorg-lib/libpciaccess_0.16.bb?h=kirkstone&id=b0130fcf91daee0d905af755302fabe608da141c (From OE-Core rev: f85d5dfc91d536a00669ca3148d8c3b2727b183d) Signed-off-by: Bhabu Bindu Signed-off-by: Steve Sakoman

libx11: Security Fix for CVE-2023-43785, CVE-2023-43786 and CVE-2023-43787

2023-10-25T14:45:50+00:00

CVE's Fixed: CVE-2023-43785: libX11: out-of-bounds memory access in _XkbReadKeySyms() CVE-2023-43786: libX11: stack exhaustion from infinite recursion in PutSubImage() CVE-2023-43787: libX11: integer overflow in XCreateImage() leading to a heap overflow (From OE-Core rev: 8175d023c203d524d011d8947f90fbd02786c6db) Signed-off-by: Siddharth Doshi Signed-off-by: Steve Sakoman

libxpm: upgrade to 3.5.17

2023-10-21T15:21:36+00:00

This release fixes the following CVEs: - CVE-2023-43788 - CVE-2023-43789 (From OE-Core rev: 1475a47239d77a368bcec69f12e5a63f8bebe14f) Signed-off-by: Ross Burton Signed-off-by: Siddharth Doshi Signed-off-by: Steve Sakoman

pixman: Remove duplication of license MIT

2023-08-26T14:24:02+00:00

Remove duplication of license MIT from pixman bbfile. (From OE-Core rev: 76f928359f76d449de0d884c591a5d9fdba9d19c) Signed-off-by: Poonam Jadhav Signed-off-by: Steve Sakoman

libx11: Fix CVE-2023-3138 for kirkstone branch

2023-07-21T16:27:34+00:00

Add patch to fix CVE-2023-3138 for kirkstone branch Link: https://gitlab.freedesktop.org/xorg/lib/libx11/-/commit/304a654a0d57bf0f00d8998185f0360332cfa36c.patch (From OE-Core rev: 5491531d4681d3df5a34ebc180e29a8bf4e09e67) Signed-off-by: Poonam Jadhav Signed-off-by: Steve Sakoman

libxpm: upgrade 3.5.15 -> 3.5.16

2023-07-01T18:37:24+00:00

Changelog: =========== test: skip compressed file tests when --disable-open-zfile is used itlab CI: build with each of --enable-open-zfile & --disable-open-zfile configure: correct error message to suggest --disable-open-zfile Fix a memleak in ParsePixels error code path Fix CVE-2022-44617: Runaway loop with width of 0 and enormous height open-zfile: Make compress & uncompress commands optional Require LT_INIT from libtool 2 instead of deprecated AC_PROG_LIBTOOL test: Use PACKAGE_BUGREPORT instead of hard-coded URL's test: Add simple test cases for functions in src/rgb.c xpmReadRgbNames: constify filename argument XpmCreateDataFromXpmImage: Fix misleading indentation parse.c: Wrap FREE_CIDX definition in do { ... } while(0) parse.c: remove unused function xstrlcpy() (From OE-Core rev: 22d9e097538f84a12dd262c1ae936fb8107c2768) Signed-off-by: Wang Mingyu Signed-off-by: Alexandre Belloni (cherry picked from commit 4d9f0958eecdf683434d77a4f65611803cffd247) Signed-off-by: Steve Sakoman

libxpm: upgrade 3.5.13 -> 3.5.15

2023-05-03T14:17:12+00:00

Upgrade libxpm 3.5.13 to 3.5.15 License-update: additional copyright holders f0857c0 man pages: Correct Copyright/License notices The above commit is introduced while upgrading the libxpm 3.5.15. which is mentioned in below changelog. Due to this commit LIC_FILES_CHKSUM is changed. Disable reading compressed files as that requires compress/uncompress executables. Following the approach in oe-core/master: 7de4084634 libxpm: upgrade 3.5.14 -> 3.5.15 Changelog: ------------- ------------- ddd8339 libXpm 3.5.15 8178eb0 Use gzip -d instead of gunzip c5ab17b Prevent a double free in the error code path 515294b Fix CVE-2022-4883: compression commands depend on $PATH f80fa6a Fix CVE-2022-44617: Runaway loop with width of 0 and enormous height f7fbbb9 test: add test cases for CVE-2022-44617 (zero-width w/enormous height) a3a7c6d Fix CVE-2022-46285: Infinite loop on unclosed comments f7a167a test: add test case for CVE-2022-46285 (unclosed comments) 0ff2c6a cxpm: getc/ungetc wrappers should not adjust position when c == EOF 501494c test: Add unit tests using glib framework 4841039 configure: add --disable-open-zfile instead of requiring -DNO_ZPIPE aef0c8d man pages: Apply standard man page style/formatting 5d55a0b man pages: Replace "See Also" entries with more useful ones 392cb8f man pages: Fix typos and other minor editing 08bc174 libXpm 3.5.14 f0857c0 man pages: Correct Copyright/License notices deb81a9 man pages: Fix typos 2d5fa4c man pages: Add missing word 'function' where needed 2b7357e man pages: Make function synopses more consistent with other pages fb8590c man pages: Fix shadow man pages bfaebfd man pages: Make file names consistent with their displayed names 7a138a5 gitlab CI: add a basic build test 3433f43 man: strip trailing whitespace 9612454 Fix spelling/wording issues fa16fbd Build xz tarballs instead of bzip2 83e5427 update man pages e48e649 add man pages based on doc/xpm.PS (From OE-Core rev: a549319e5fdae685f93122627226f9b102307bc3) Signed-off-by: Yogita Urade Signed-off-by: Steve Sakoman

xorg-lib-common: Add variable to set tarball type

2023-05-03T14:17:12+00:00

Upstream has switched some new releases from bz2 to xz compression. Add an XORG_EXT variable so recipes can set the file name extension needed for the compression type. Following the approach in oe-core/master: 6a8068e036b4b2a40b38896275b936916b4db76e xorg-lib-common: Add variable to set tarball type use a variable for the tarball suffix/compression format. (From OE-Core rev: 56ea2b625f81e397e911b3610130d3e838d10938) Signed-off-by: Robert Joslyn Signed-off-by: Alexandre Belloni Signed-off-by: Yogita Urade Signed-off-by: Steve Sakoman

libX11: CVE-2022-3554 & CVE-2022-3555 Fix memory leak

2023-01-06T17:33:23+00:00

Upstream-Status: Backport from https://gitlab.freedesktop.org/xorg/lib/libx11/-/commit/1d11822601fd24a396b354fa616b04ed3df8b4ef && https://gitlab.freedesktop.org/xorg/lib/libx11/-/commit/8a368d808fec166b5fb3dfe6312aab22c7ee20af (From OE-Core rev: b0e0cf44fb4f6e1cf562860766a2915ee8718f77) Signed-off-by: Hitendra Prajapati Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie