linux/poky.git/meta/recipes-graphics/xorg-lib, branch mickledore

pixman: ignore CVE-2023-37769

2023-11-11T18:23:01+00:00

This issue relates to a floating point exception in stress-test, which is an unlikely security exploit at the best of times, but the test is not installed so isn't relevant. (From OE-Core rev: 3625bed6d7432091bfb144314b8ef979b5246e4c) Signed-off-by: Ross Burton Signed-off-by: Richard Purdie (cherry picked from commit a36d62a06be6cce1a438f8f2178eb60aad6b7267) Signed-off-by: Steve Sakoman

libxpm: upgrade to 3.5.17

2023-10-25T14:51:01+00:00

This release fixes the following CVEs: - CVE-2023-43788 - CVE-2023-43789 (From OE-Core rev: b4596281de1f96fdf6533ab4caa957f1eaeff756) Signed-off-by: Ross Burton Signed-off-by: Richard Purdie (cherry picked from commit 46dd8ce41756dbc2aa0f9001416f208cced1c8d5) Signed-off-by: Steve Sakoman

libx11: upgrade to 1.8.7

2023-10-25T14:51:01+00:00

This incorporates fixes for the following CVEs: - CVE-2023-43785 - CVE-2023-43786 - CVE-2023-43787 (From OE-Core rev: 79f9c062df37ca15649d41bb6501e6fab2d73114) Signed-off-by: Ross Burton Signed-off-by: Richard Purdie (cherry picked from commit a1534bb34b680bfc5cb2f35b5fd5a0c2afed6368) Signed-off-by: Steve Sakoman

libxkbcommon: add CVE_PRODUCT

2023-10-13T14:31:05+00:00

(From OE-Core rev: 7d395b97e864bb081866eb029168aee7335ed98e) Signed-off-by: Emil Kronborg Andersen (cherry picked from commit a23a4a3f156f5758dc4d9dcf1ab27c74302eb2a8) Signed-off-by: Steve Sakoman

pixman: avoid neon on unsupported machines

2023-10-11T13:54:46+00:00

Disable neon if the machine does not support it. (From OE-Core rev: dfc65be35a38bc84134aa7d9e3483b1e00b95729) Signed-off-by: Benjamin Bara Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie (cherry picked from commit 9ea1a98bcfe30a46898765e41e0fc9ebb0086738) Signed-off-by: Steve Sakoman

pixman: Remove duplication of license MIT

2023-09-04T14:13:25+00:00

Remove duplication of license MIT from pixman bbfile. (From OE-Core rev: 0a14def83fe2bb4f4cc7cf988c7d31d3108e0ed0) Signed-off-by: Poonam Jadhav Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie (cherry picked from commit e6c87b267252376ca85b534e3c9ee9b77ff665ca) Signed-off-by: Steve Sakoman

libx11: upgrade 1.8.5 -> 1.8.6

2023-07-20T22:10:40+00:00

Changelog: ========== InitExt.c: Add bounds checks for extension request, event, & error codes Fixes CVE-2023-3138 (From OE-Core rev: 5d6169ec81cc260fccb3b65082100e0ef6102046) Signed-off-by: Wang Mingyu Signed-off-by: Richard Purdie (cherry picked from commit 49b74259b196454d22fcca8b8ecc1c0d41487285) Signed-off-by: Steve Sakoman

libx11: upgrade 1.8.4 -> 1.8.5

2023-07-07T14:30:25+00:00

Bug fix release * autoconf & libtool updates (!187, !188) * Restore missing text in XSetScreenSaver man page (#187, !203) * Update am_ET.UTF-8 compose keys to use dead-vowel symbols, in coordination with xkeyboard-config 2.39 (!205) * Assorted updates to en_US.UTF-8 compose keys (!189, !195, !196, !198, !199, !200, !201, !207, !208, !209) (From OE-Core rev: fe81e39b0bac276bda508e4b2667c81c052392e2) Signed-off-by: Alexander Kanavin Signed-off-by: Richard Purdie (cherry picked from commit 4e931f490854100c2504ce771d5c920e3a62efdd) Signed-off-by: Steve Sakoman

libxpm: upgrade 3.5.15 -> 3.5.16

2023-06-24T19:13:07+00:00

Changelog: =========== test: skip compressed file tests when --disable-open-zfile is used itlab CI: build with each of --enable-open-zfile & --disable-open-zfile configure: correct error message to suggest --disable-open-zfile Fix a memleak in ParsePixels error code path Fix CVE-2022-44617: Runaway loop with width of 0 and enormous height open-zfile: Make compress & uncompress commands optional Require LT_INIT from libtool 2 instead of deprecated AC_PROG_LIBTOOL test: Use PACKAGE_BUGREPORT instead of hard-coded URL's test: Add simple test cases for functions in src/rgb.c xpmReadRgbNames: constify filename argument XpmCreateDataFromXpmImage: Fix misleading indentation parse.c: Wrap FREE_CIDX definition in do { ... } while(0) parse.c: remove unused function xstrlcpy() (From OE-Core rev: 145d19c86d61761d7446f6776c4cbc8274c06861) Signed-off-by: Wang Mingyu Signed-off-by: Alexandre Belloni (cherry picked from commit 4d9f0958eecdf683434d77a4f65611803cffd247) Signed-off-by: Steve Sakoman

libxft: upgrade 2.3.7 -> 2.3.8

2023-06-24T19:13:07+00:00

Changelog: ========= add check for missing glyph in XftFontCheckGlyph() issue 17: libxft-2.3.7: Bold fonts in urxvt missing leftmost pixels issue 18: Problems with rotated text (monospace font only) configure: Use LT_INIT from libtool 2 instead of deprecated AC_PROG_LIBTOOL Clears autoconf warnings (From OE-Core rev: eb918993806029bde27ea8d799c37b6d007fdb40) Signed-off-by: Wang Mingyu Signed-off-by: Alexandre Belloni (cherry picked from commit 5f6eae1dfb910347ab47ca868e6978768fb14f46) Signed-off-by: Steve Sakoman