- This upgrade includes multiple security fixes.
CVE-2022-4883
CVE-2022-44617
CVE-2022-46285
CVE-2022-44617
CVE-2023-43788
CVE-2023-43789
- Removed CVE-2022-46285 as it is already fixed by this upgrade.
- License-update: additional copyright holders
f0857c0 man pages: Correct Copyright/License notices
Due to this commit LIC_FILES_CHKSUM is changed
- Disable reading compressed files as that requires compress/uncompress executables.
Following the approach in oe-core/master:
7de4084634 libxpm: upgrade 3.5.14 -> 3.5.15
- Add XORG_EXT to specify tar.xz as upstream has switched from bz2 to xz compression.
(From OE-Core rev: 47e270a4fd2e086b5ee9f38891f326ce505f2319)
Signed-off-by: Siddharth Doshi <sdoshi@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Upstream has switched some new releases from bz2 to xz compression. Add
an XORG_EXT variable so recipes can set the file name extension needed
for the compression type.
Following the approach in oe-core/master: 6a8068e036b4b2a40b38896275b936916b4db76e
xorg-lib-common: Add variable to set tarball type use a variable for the tarball suffix/compression format.
(From OE-Core rev: ff386fb5632c26ceb12d2381e9128b0546aef795)
Signed-off-by: Robert Joslyn <robert.joslyn@redrectangle.org>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Siddharth Doshi <sdoshi@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
(From OE-Core rev: bd594af20fce07908f8e0fb1765b0e0ccc641e86)
Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
The license in this code is listed as MIT and whilst it is compatible with and
usable as MIT, it actually looks like HPND. Clarify the license field accordingly.
(From OE-Core master rev: 922b645f443c33060a8990d32e6b7b62ea5497c3)
(From OE-Core rev: 8fd5133fc7f6bc84193ec6fcbc1746c59bfc8caf)
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
https://lists.x.org/archives/xorg-announce/2021-May/003088.html
XLookupColor() and other X libraries function lack proper validation
of the length of their string parameters. If those parameters can be
controlled by an external application (for instance a color name that
can be emitted via a terminal control sequence) it can lead to the
emission of extra X protocol requests to the X server.
(From OE-Core rev: 81d338c6079729b35f55f8889526f0c9a62802fe)
Signed-off-by: Jasper Orschulko <jasper@fancydomain.eu>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Without setting this it will vary depending on which directories are present
on the host.
[YOCTO #13778]
(From OE-Core rev: 6217c3a7201b34888aa2fbae8b6e490bea545574)
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
The locale data in the recipe is generated using cpp, which results in
differing amounts of whitespace depending on what compiler is used.
This means that the files may differ in just whitespace, which is
sufficient for RPM's multilib code to consider them different and not
allow lib32-libx11-locale and lib64-libx11-locale to be installed at the
same time.
[ YOCTO #13647 ]
(From OE-Core rev: 6768d0d7988294769a41c7ba40f29874366da00f)
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Disable libpng as that's only used in the tests and demos, that we don't build.
Drop iwmmxt disabling, we can add this back again if it fails. Loongsoon
remains disabled as the build fails for edgerouter.
Drop the Neon/VFP2 mojo, this is a micro-optimisation. If the size improvement
is significant then this can be added back.
(From OE-Core rev: dd9c3d042aa5c2ae0fd80b558ec7e9c793ff36f0)
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Switch over to meson, and add an option for wayland support.
(From OE-Core rev: 5ca54ccab8c7a10072be84d9335fbc71e2f73042)
Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Besides checking DISTRO_FEATURES for required or conflicting features,
being able to check MACHINE_FEATURES and/or COMBINED_FEATURES may also
be useful at times.
Temporarily support the old class name with a warning about future
deprecation.
(From OE-Core rev: 5f4875b950ce199e91f99c8e945a0c709166dc14)
Signed-off-by: Denys Dmytriyenko <denys@ti.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
After iterating with upstream, this is the patch that landed.
(From OE-Core rev: 30a2af80f5f8c8ddf0f619e4f50451b02baa22dd)
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Refresh the patch to fix the do_patch QA warning.
(From OE-Core rev: 72e6919bab390494103472401a563199ab339e85)
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
This doesn't appear to be used anymore, as saving a few hundred k at the expense
of only using ASCII is quite the compromise in the modern world.
(From OE-Core rev: 1a502765db2093e573c9e3ecd6c1bc7621476963)
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Fix the build when the host doesn't have libc.a installed by reverting an
upstream commit, and cherry-pick a build fix from master.
Drop a redundant sed, the expression it removes doesn't exist anymore.
Move most patches to libx11.inc so that they're applied to both libx11 and libx11-diet.
(From OE-Core rev: 8bb48ac237315e83837973ecd1488060ec170588)
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
No modern drivers nor applications use DGA, so remove the client library.
(From OE-Core rev: 2d7e485fcfbc0dc3d76339baf02f50c3c9e22a91)
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
The extension this client library is for was removed from the X server over a
decade ago:
commit 22e64108ec63ba77779891f8df237913ef9ca731
Author: Daniel Stone <daniel@fooishbar.org>
Date: Wed Jul 16 06:25:26 2008 +0300
XFree86: Remove XFree86-Misc extension
Its last remaining purpose in life has been destroyed by input
properties. Au revoir: it's been fun, by which I mean awful.
Remove the obsolete dependencies from xset and xdpyinfo, and delete libxx86misc
entirely.
(From OE-Core rev: 4d7677b2f511b2d07fabb1f06213a569c53f839f)
Signed-off-by: Ross Burton <ross.burton@intel.com>
enter the commit message for your changes. Lines starting
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
This fixes a following runtime error:
| xkbcommon: ERROR: couldn't find a Compose file for locale "C"
(From OE-Core rev: aa3f5bd67f14defc5cdc39ba3c78f825dd85c69f)
Signed-off-by: Ming Liu <ming.liu@toradex.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
So far libx11 compose data is being required by some non-X11 recipes,
like weston -> libxkbcommon -> libx11-locale. But the libx11-locale
could not build without x11 distro feature enabled. This is not
reasonable.
To fix it, we introduce this new recipe, it uses the same source with
libx11 but dropped X11 dependencies, this makes it to be able to build
without x11 distro feature. It would be skipped if x11 distro feature
is enabled, in which case the libx11-locale would provide the libx11
compose data.
(From OE-Core rev: d8a5b22757ccc76007cda55ee45922a313639258)
Signed-off-by: Ming Liu <ming.liu@toradex.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
-Upgrade from libpciaccess_0.14.bb to libpciaccess_0.16.bb.
-libpciaccess/0004-Don-t-include-sys-io.h-on-arm.patch
Removed since this is included in 0.16.
(From OE-Core rev: c2140b42c8516100c55c381d98e0f281b562d2db)
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
-Upgrade from libice_1.0.9.bb to libice_1.0.10.bb.
-libice/CVE-2017-2626.patch
Removed since this is included in 1.0.10.
(From OE-Core rev: d3581b5d5562604ba31fc2b10873b3b0c9bf75fc)
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
x11 is actually always present in native DISTRO_FEATURES, and
so it's fine to require it in all cases.
(From OE-Core rev: 1d9f1da619089fc8edee027261b1fbe2e673091b)
Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
