linux/poky.git/meta/recipes-graphics, branch zeus

xserver-xorg: Security Advisory - xserver-xorg - CVE-2020-14347

2020-09-10T12:21:41+00:00

Backport patch from to solve CVE-2020-14347. (From OE-Core rev: 850b454c090523f7f7503d4472fda77a4b2fc7a0) Signed-off-by: Li Zhou Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

encodings: clear postinst script

2020-08-04T22:17:37+00:00

Postinst script from xorg-font-common.inc doesn't apply to this recipe. So clear the postinst script of encodings. (From OE-Core rev: ba94c908b99713ce115e9240df525c6442a60c7a) (From OE-Core rev: 19c87007f6f92dc94db19e3c23ad06e09f397abe) Signed-off-by: Kai Kang (cherry picked from commit 99ae6dbb7278dfd264453af852c108fa56a0d4e3) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie Signed-off-by: Adrian Bunk Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

libjpeg-turbo: Fix CVE-2020-13790

2020-07-08T09:47:50+00:00

libjpeg-turbo 2.0.4 has a heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file. Upstream-Status: Backport [https://github.com/libjpeg-turbo/libjpeg-turbo/commit/3de15e0c344d11d4b90f4a47136467053eb2d09a] CVE:CVE-2020-13790 (From OE-Core rev: 90f4e2f299d8cd6c839b73307dc7b0ec3d389294) Signed-off-by: Liu Haitao Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

mesa: fix meson configure fix when 'dri' is excluded from PACKAGECONFIG

2020-06-02T12:32:50+00:00

(From OE-Core rev: ee95a399285abbde84e0148ca957b59d65bcad0a) Signed-off-by: Yann Dirson Signed-off-by: Ross Burton (cherry picked from commit 78efff8741f869647790810a3dd41459b9d9d8a6) Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie

waffle: no need to depend on target python3

2020-04-17T07:29:02+00:00

(From OE-Core rev: 7b4f6a4c7c5bcb4479c7e2e7eca733065cb40464) Signed-off-by: Marek Vasut Cc: Richard Purdie Cc: Ross Burton Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

virglrenderer: fix multiple CVEs

2020-03-16T16:44:53+00:00

fix these CVE: CVE-2019-18390 CVE-2019-18391 CVE-2020-8002 (From OE-Core rev: 74a1ec4a39fe3b05045c1d60a89393cd25eccb1f) Signed-off-by: Lee Chee Yang Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

xserver-nodm-init: Fix the start failure for non-root user

2020-03-07T10:56:45+00:00

In order to start the xserver, a non-root user should have the cap_sys_admin capability to set the drm master. We try to get the cap_sys_admin capability by setting it in both the thread and file inheritable set. The side effect of this is that we would have to add the "pam" to the distro features if we want use the xserver-nodm-init for a non-root user. [Yocto #11526] (From OE-Core rev: fec05cd1eaaad41fd72a29d7792f1c37d2a82f3e) Signed-off-by: Kevin Hao Signed-off-by: Richard Purdie (cherry picked from commit cfd71a68a4931c8bda15357ebb1e9ebcf0e302dc) Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie

libinput: Fix determinism issue

2020-02-11T23:05:13+00:00

The build was injection git information from the wrong git tree, stop this to allow reproducible builds. (From OE-Core rev: c3f6a6113f562ecdb13386c3ff52adb7973980a4) (From OE-Core rev: 22dc9a3314eef5925241a9a961bd79815d3172b6) (From OE-Core rev: f29b56b9c140a03edeba69ffc2dc9888b2fde106) Signed-off-by: Richard Purdie Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie

libxshmfence: Set shm directory deterministically

2020-02-11T23:05:12+00:00

Without setting this it will vary depending on which directories are present on the host. [YOCTO #13778] (From OE-Core rev: 6217c3a7201b34888aa2fbae8b6e490bea545574) (From OE-Core rev: 10357b0bf3f6b34b54c0329e7e392ecf2c7043cd) (From OE-Core rev: 0e0111a9adad2faadfc825f14b0ad34c429ab95b) Signed-off-by: Richard Purdie Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie

core: recipes: fix some native tools dependencies

2020-02-04T18:43:08+00:00

Some native tools dependency issues were seen while building with external GCC tool-set rather than source GCC tool-set. While building with source tool-set these dependencies were implicitly met which is not the case with external tool-set. So explicitly state these native tools dependencies. (From OE-Core rev: 534b4a63299c6d74662c9d035238a0adb19cd1c7) Signed-off-by: Sumit Garg Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie