<feed xmlns='http://www.w3.org/2005/Atom'>
<title>linux/poky.git/meta/recipes-graphics, branch morty</title>
<subtitle>Mirror of git.yoctoproject.org/poky</subtitle>
<id>https://git.enea.com/cgit/linux/poky.git/atom?h=morty</id>
<link rel='self' href='https://git.enea.com/cgit/linux/poky.git/atom?h=morty'/>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/'/>
<updated>2017-12-04T17:34:35+00:00</updated>
<entry>
<title>fontconfig: Fix namespace conflicts with glibc</title>
<updated>2017-12-04T17:34:35+00:00</updated>
<author>
<name>Khem Raj</name>
<email>raj.khem@gmail.com</email>
</author>
<published>2017-11-22T17:51:47+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=04f0f7f124a8e9418797a46692ac1c60700cb61b'/>
<id>urn:sha1:04f0f7f124a8e9418797a46692ac1c60700cb61b</id>
<content type='text'>
glibc 2.25 will come with TS 18661-1 macro definitions in limits.h which ends with following errors

| ../../fontconfig-2.12.1/src/fcmatch.c:324:63: error: 'PRI_CHAR_WIDTH_STRONG' undeclared here (not in a function)
|  #define FC_OBJECT(NAME, Type, Cmp) { FC_##NAME##_OBJECT, Cmp, PRI_##NAME##_STRONG, PRI_##NAME##_WEAK },
|                                                                ^
| ../../fontconfig-2.12.1/src/fcobjs.h:54:1: note: in expansion of macro 'FC_OBJECT'
|  FC_OBJECT (CHAR_WIDTH,  FcTypeInteger, NULL)
|  ^~~~~~~~~
| ../../fontconfig-2.12.1/src/fcmatch.c:324:84: error: 'PRI_CHAR_WIDTH_WEAK' undeclared here (not in a function)
|  #define FC_OBJECT(NAME, Type, Cmp) { FC_##NAME##_OBJECT, Cmp, PRI_##NAME##_STRONG, PRI_##NAME##_WEAK },
|                                                                                     ^
| ../../fontconfig-2.12.1/src/fcobjs.h:54:1: note: in expansion of macro 'FC_OBJECT'
|  FC_OBJECT (CHAR_WIDTH,  FcTypeInteger, NULL)
|  ^~~~~~~~~
| make[3]: *** [Makefile:632: fcmatch.lo] Error 1

(From OE-Core rev: 3575826752e7140da493c7f560fb5fcf483fc9b4)

(From OE-Core rev: 0d945f5b8f58fa2b909eea7b2a14db076e1dedb5)

Signed-off-by: Khem Raj &lt;raj.khem@gmail.com&gt;
Signed-off-by: Ross Burton &lt;ross.burton@intel.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
Signed-off-by: Armin Kuster &lt;akuster@mvista.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>mesa: fix SRC_URI</title>
<updated>2017-11-21T14:43:56+00:00</updated>
<author>
<name>Armin Kuster</name>
<email>akuster808@gmail.com</email>
</author>
<published>2017-11-21T00:38:27+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=ccf5f67f5d1eba52ab80ef09c56a39aad6885e17'/>
<id>urn:sha1:ccf5f67f5d1eba52ab80ef09c56a39aad6885e17</id>
<content type='text'>
ERROR: mesa-2_12.0.1-r0 do_checkuri: Fetcher failure for URL: 'ftp://ftp.freedesktop.org/pub/mesa/12.0.1/mesa-12.0.1.tar.xz'. URL ftp://ftp.freedesktop.org/pub/mesa/12.0.1/mesa-12.0.1.tar.xz doesn't work

change to https and use older-versions path

(From OE-Core rev: dfab5f822c7fd73736953a3883bc16829cd5582e)

Signed-off-by: Armin Kuster &lt;akuster808@gmail.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>liberation-fonts: replace fedorahosted.org SRC_URI with pagure.io source</title>
<updated>2017-06-05T17:00:01+00:00</updated>
<author>
<name>Choong YinThong</name>
<email>yin.thong.choong@intel.com</email>
</author>
<published>2017-04-03T02:51:45+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=a55be634373fc213b603e5d276e2cab2e18dd8b9'/>
<id>urn:sha1:a55be634373fc213b603e5d276e2cab2e18dd8b9</id>
<content type='text'>
fedorahosted.org was retired on March 1st, 2017. This is to
update the SRC_URI to point to pagure.io. pagure.io is a
replacement for fedorahosted.

[YOCTO #11226]

(From OE-Core rev: 441ad240db4ce64d854e263e14dc6a1752aed956)

(From OE-Core rev: 516d55d3550d86c7458d20cea1adca7dc30ab66b)

Signed-off-by: Choong YinThong &lt;yin.thong.choong@intel.com&gt;
Signed-off-by: Ross Burton &lt;ross.burton@intel.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>xorg-font-common.inc: Remove x11 requirement for -native</title>
<updated>2017-05-18T12:07:34+00:00</updated>
<author>
<name>Jussi Kukkonen</name>
<email>jussi.kukkonen@intel.com</email>
</author>
<published>2017-04-11T10:55:23+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=c90540df8b72bf9fe342bb39b3029ede39be2aeb'/>
<id>urn:sha1:c90540df8b72bf9fe342bb39b3029ede39be2aeb</id>
<content type='text'>
(From OE-Core rev: 1c6f6b014c2fca7bad93ce3b770721fd770bb006)

Signed-off-by: Jussi Kukkonen &lt;jussi.kukkonen@intel.com&gt;
Signed-off-by: Armin Kuster &lt;akuster808@gmail.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>mkfontscale: Remove x11 requirement for -native</title>
<updated>2017-05-18T12:07:34+00:00</updated>
<author>
<name>Jussi Kukkonen</name>
<email>jussi.kukkonen@intel.com</email>
</author>
<published>2017-04-11T10:55:22+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=293288ef1c7cb46fd9e69817d2585c4753af9a6e'/>
<id>urn:sha1:293288ef1c7cb46fd9e69817d2585c4753af9a6e</id>
<content type='text'>
Make sure we can build native tools without "x11" feature.

(From OE-Core rev: e3aa3ae25cdf2523cd510c97aeabde46b24cbc08)

Signed-off-by: Jussi Kukkonen &lt;jussi.kukkonen@intel.com&gt;
Signed-off-by: Armin Kuster &lt;akuster808@gmail.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>mkfontdir: Remove x11 requirement for -native</title>
<updated>2017-05-18T12:07:34+00:00</updated>
<author>
<name>Jussi Kukkonen</name>
<email>jussi.kukkonen@intel.com</email>
</author>
<published>2017-04-11T10:55:21+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=5b46dfb4fef2d6acb56f257ab04602b4ac62a425'/>
<id>urn:sha1:5b46dfb4fef2d6acb56f257ab04602b4ac62a425</id>
<content type='text'>
Make sure we can build native tools without "x11" in features.

(From OE-Core rev: efeb161baf06ed0602f47ddcc71d53703972e759)

Signed-off-by: Jussi Kukkonen &lt;jussi.kukkonen@intel.com&gt;
Signed-off-by: Armin Kuster &lt;akuster808@gmail.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>libx11: CVE-2016-7943</title>
<updated>2017-02-08T12:00:21+00:00</updated>
<author>
<name>Sona Sarmadi</name>
<email>sona.sarmadi@enea.com</email>
</author>
<published>2017-01-30T11:46:23+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=a2f06ef25486bbdc10b1dd5812648c7e909a3643'/>
<id>urn:sha1:a2f06ef25486bbdc10b1dd5812648c7e909a3643</id>
<content type='text'>
The XListFonts function in X.org libX11 before 1.6.4 might allow
remote X servers to gain privileges via vectors involving length
fields, which trigger out-of-bounds write operations.

References:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7943
https://lists.x.org/archives/xorg-announce/2016-October/002720.html

Upstream patch:
https://cgit.freedesktop.org/xorg/lib/libX11/commit/?id=8c29f1607a31dac0911e45a0dd3d74173822b3c9

(From OE-Core rev: d627e5bd50f66275cb3a77036ea3376a6f1e9a96)

Signed-off-by: Sona Sarmadi &lt;sona.sarmadi@enea.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>libX11: CVE-2016-7942</title>
<updated>2017-02-08T12:00:21+00:00</updated>
<author>
<name>Sona Sarmadi</name>
<email>sona.sarmadi@enea.com</email>
</author>
<published>2017-01-30T11:46:22+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=eed433faba6f8970287d72215f4be7289019516d'/>
<id>urn:sha1:eed433faba6f8970287d72215f4be7289019516d</id>
<content type='text'>
The XGetImage function in X.org libX11 before 1.6.4 might allow remote X
servers to gain privileges via vectors involving image type and geometry,
which triggers out-of-bounds read operations.

References
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7942
Upstream patch
https://cgit.freedesktop.org/xorg/lib/libX11/commit/?id=8ea762f94f4c942d898fdeb590a1630c83235c17

(From OE-Core rev: 6d4421301a54c26e390fa943805574ced6e18c3a)

Signed-off-by: Sona Sarmadi &lt;sona.sarmadi@enea.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>libXrandr: fix for CVE-2016-7947 and CVE-2016-7948</title>
<updated>2017-02-08T12:00:21+00:00</updated>
<author>
<name>Sona Sarmadi</name>
<email>sona.sarmadi@enea.com</email>
</author>
<published>2017-01-27T11:59:35+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=4f991d93f6221e72c3eea6080ec405155b680681'/>
<id>urn:sha1:4f991d93f6221e72c3eea6080ec405155b680681</id>
<content type='text'>
CVE-2016-7947
Insufficient validation of server responses result in Integer overflows

CVE-2016-7948
Insufficient validation of server responses result in various data mishandlings

References:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7947
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7948
https://lists.x.org/archives/xorg-announce/2016-October/002720.html

Upstream patch for both CVEs:
https://cgit.freedesktop.org/xorg/lib/libXrandr/commit/?id=a0df3e1c7728205e5c7650b2e6dce684139254a6

(From OE-Core rev: 1c293e889f6eeae36f8f6ddd9676c65d613ad0fc)

Signed-off-by: Sona Sarmadi &lt;sona.sarmadi@enea.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>libxrender: CVE-2016-7949</title>
<updated>2017-02-08T12:00:21+00:00</updated>
<author>
<name>Sona Sarmadi</name>
<email>sona.sarmadi@enea.com</email>
</author>
<published>2017-01-27T07:26:12+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=b45822fe666784c6588317e2cd1e0c411e564197'/>
<id>urn:sha1:b45822fe666784c6588317e2cd1e0c411e564197</id>
<content type='text'>
Insufficient validation of server responses results
in overflow of previously reserved memory

Upstream patch:
https://cgit.freedesktop.org/xorg/lib/libXrender/commit/?id=9362c7ddd1af3b168953d0737877bc52d79c94f4

External References:
https://lists.x.org/archives/xorg-announce/2016-October/002720.html
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-7949

(From OE-Core rev: 87ffd7ce2e8ece8b44ff3f1c219a74b3590cf14b)

Signed-off-by: Sona Sarmadi &lt;sona.sarmadi@enea.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
</feed>
