linux/poky.git/meta/recipes-graphics, branch mickledore-4.2.3

libjpeg-turbo: patch CVE-2023-2804

2023-08-01T16:17:27+00:00

Relevant links: * linked fronm NVD: * https://github.com/libjpeg-turbo/libjpeg-turbo/issues/668#issuecomment-1492586118 * follow-up analysis: * https://github.com/libjpeg-turbo/libjpeg-turbo/issues/668#issuecomment-1496473989 * picked commits fix all issues mentioned in this analysis (From OE-Core rev: 473058bf65ac98f644b1ffd4d5190ee782b824a5) Signed-off-by: Peter Marko Signed-off-by: Steve Sakoman

weston: Cleanup and fix x11 and xwayland dependencies

2023-07-20T22:10:40+00:00

For the x11 backend package config, drop the redundant dependencies libxcb and cairo. The former is listed twice in the package config, while the latter is also listed globally. For the xwayland package config, add the missing dependencies libxcb and libxcursor. These dependencies are hidden when the x11 backend is enabled by default. When the default setting is overridden to disable the x11 backend, the following error occurs: ``` | Run-time dependency xcursor found: NO (tried pkgconfig and cmake) | | ../git/xwayland/meson.build:34:2: ERROR: Problem encountered: xwayland requires xcursor which was not found. Or, you can use '-Dxwayland=false'. ``` (From OE-Core rev: d8d60e0a0e838c332f044ecee89b8ad2acae9567) Signed-off-by: Tom Hochstein Signed-off-by: Luca Ceresoli Signed-off-by: Richard Purdie (cherry picked from commit 49f4dd391b408a850d13010c90492c621b7912c3) Signed-off-by: Steve Sakoman

libx11: upgrade 1.8.5 -> 1.8.6

2023-07-20T22:10:40+00:00

Changelog: ========== InitExt.c: Add bounds checks for extension request, event, & error codes Fixes CVE-2023-3138 (From OE-Core rev: 5d6169ec81cc260fccb3b65082100e0ef6102046) Signed-off-by: Wang Mingyu Signed-off-by: Richard Purdie (cherry picked from commit 49b74259b196454d22fcca8b8ecc1c0d41487285) Signed-off-by: Steve Sakoman

freetype: upgrade 2.13.0 -> 2.13.1

2023-07-20T22:10:40+00:00

Changelog: =========== * docs/VERSION.TXT: Add entry for version 2.13.1. * docs/CHANGES: Updated. * docs/release, docs/README, builds/macs/README: Updated. * README, src/base/ftver.rc, builds/windows/vc2010/index.html, builds/windows/visualc/index.html, builds/windows/visualce/index.html, builds/wince/vc2005-ce/index.html, builds/wince/vc2008-ce/index.html, docs/freetype-config.1: s/2.13.0/2.13/1/, s/2130/2131/. * include/freetype/freetype.h (FREETYPE_PATCH): Set to 1. * builds/unix/configure.raw (version_info): Set to 26:0:20. * CMakeLists.txt (VERSION_PATCH): Set to 1. * subprojects/libpng.wrap, subprojects/zlib.wrap, subprojects/dlg: Updated. (From OE-Core rev: b89e75cd39ee704e677ab1e770884cd53cd7f1e8) Signed-off-by: Wang Mingyu Signed-off-by: Richard Purdie (cherry picked from commit 4447b2db3166bd8c76271f0293931392572c6977) Signed-off-by: Steve Sakoman

libx11: upgrade 1.8.4 -> 1.8.5

2023-07-07T14:30:25+00:00

Bug fix release * autoconf & libtool updates (!187, !188) * Restore missing text in XSetScreenSaver man page (#187, !203) * Update am_ET.UTF-8 compose keys to use dead-vowel symbols, in coordination with xkeyboard-config 2.39 (!205) * Assorted updates to en_US.UTF-8 compose keys (!189, !195, !196, !198, !199, !200, !201, !207, !208, !209) (From OE-Core rev: fe81e39b0bac276bda508e4b2667c81c052392e2) Signed-off-by: Alexander Kanavin Signed-off-by: Richard Purdie (cherry picked from commit 4e931f490854100c2504ce771d5c920e3a62efdd) Signed-off-by: Steve Sakoman

weston-init: add profile to point users to global socket

2023-07-04T15:32:29+00:00

Add profile script to point users capable of interacting with the global socket to it by default. (From OE-Core rev: 1600f38d72818cda78a4731354dbecc144f664c9) Signed-off-by: Randolph Sapp Signed-off-by: Richard Purdie (cherry picked from commit 2818cbc73093996f8ecb93a4f0df8a31fd4692d3) Signed-off-by: Steve Sakoman

weston-init: guard against systemd configs

2023-07-04T15:32:29+00:00

Just as sysvinit scripts shouldn't be present in a distro using systemd, systemd scripts shouldn't be present in a system not using systemd. (From OE-Core rev: 2617900f754572cca23e4db73b91a4091b921ac5) Signed-off-by: Randolph Sapp Signed-off-by: Richard Purdie (cherry picked from commit 00e3eb3893eeb32839e02b05bc1299440895a53d) Signed-off-by: Steve Sakoman

weston-init: fix the mixed indentation

2023-07-04T15:32:29+00:00

I know my text editor is going to get angry at me if this continues. (From OE-Core rev: 24fd8549273c08693078afe17a539e461a898deb) Signed-off-by: Randolph Sapp Signed-off-by: Richard Purdie (cherry picked from commit da6e01517336694911f5aea53d637e9c0ad72c9b) Signed-off-by: Steve Sakoman

weston-init: add the weston user to the wayland group

2023-07-04T15:32:29+00:00

Add the weston user to the wayland group so all users accessing the global weston socket in /run all share a group. (From OE-Core rev: 955f602c26869f670470c1555bb53c281594ad08) Signed-off-by: Randolph Sapp Signed-off-by: Alexandre Belloni (cherry picked from commit 30198b36b00a1967d1f8f8f556a0ba2415954f4e) Signed-off-by: Steve Sakoman

weston-init: add weston user to the render group

2023-07-04T15:32:29+00:00

The weston user must be in the render group in order to access render device nodes for standard user-space graphics. (From OE-Core rev: 814ee7ad4f54f5a17e0822f06059a2fe95bebfc4) Signed-off-by: Randolph Sapp Signed-off-by: Alexandre Belloni (cherry picked from commit 1cba8aa3c5e0635d7b89222d9ccaf889954fe0c9) Signed-off-by: Steve Sakoman