This release fixes the following CVEs:
- CVE-2023-43788
- CVE-2023-43789
(From OE-Core rev: 46dd8ce41756dbc2aa0f9001416f208cced1c8d5)
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
This incorporates fixes for the following CVEs:
- CVE-2023-43785
- CVE-2023-43786
- CVE-2023-43787
(From OE-Core rev: a1534bb34b680bfc5cb2f35b5fd5a0c2afed6368)
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
The Xdmx server was removed from the xorg-server sources in xorg-server
21 (released Oct. 2021), so this is only useful for communicating with
Xdmx from the 1.20 and older releases.
Also remove the DEPENDS on libdmx in xdpyinfo for the same reason.
(From OE-Core rev: 09a1a0473a5ab0fb984121443f5be8f0188e8883)
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
License-update: removal of 'all rights reserved' sentences.
MIT & MIT was an outcome of mass-cleanup of licenses, so it can
be just MIT.
tar.bz2 has been replaced with .tar.xz which is the default.
(From OE-Core rev: a69f1403092cf7f857e8eb0a24a2173420072100)
Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Changelog:
===========
test: skip compressed file tests when --disable-open-zfile is used
itlab CI: build with each of --enable-open-zfile & --disable-open-zfile
configure: correct error message to suggest --disable-open-zfile
Fix a memleak in ParsePixels error code path
Fix CVE-2022-44617: Runaway loop with width of 0 and enormous height
open-zfile: Make compress & uncompress commands optional
Require LT_INIT from libtool 2 instead of deprecated AC_PROG_LIBTOOL
test: Use PACKAGE_BUGREPORT instead of hard-coded URL's
test: Add simple test cases for functions in src/rgb.c
xpmReadRgbNames: constify filename argument
XpmCreateDataFromXpmImage: Fix misleading indentation
parse.c: Wrap FREE_CIDX definition in do { ... } while(0)
parse.c: remove unused function xstrlcpy()
(From OE-Core rev: 4d9f0958eecdf683434d77a4f65611803cffd247)
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
autoconf-archive is a collection of m4 autoconf macros needed at
build-time, and autoconf-archive-native is a suitable provider as there
is nothing in the recipe that needs to be cross-compiled.
Also if we use DEPENDS=autoconf-archive then the recipe's -dev package
ends up RDEPENDing on autoconf-archive, which isn't correct.
Universally change any DEPENDS on autoconf-archive to the -native form,
and add any missing dependencies that were implicit before.
(From OE-Core rev: 571132415ea7fe2d91c62948f2b6aa553eafa83d)
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Changes:
Use tar.xz: upstream has not released bz2.
Update license checksum: minor change in text.
Update sha256sum for new version.
(From OE-Core rev: 1a435cb3e6cf3450867f6a591c1e3ceb4918a97d)
Signed-off-by: Sudip Mukherjee <sudipm.mukherjee@gmail.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Changes:
Use .xz, upstream is not creating .bz2 anymore.
Update license checksum: Change in copyright years.
Update sha256sum for new version.
(From OE-Core rev: 1be52fe725d7b0fac763af1ccc02383afe2c9bd0)
Signed-off-by: Sudip Mukherjee <sudipm.mukherjee@gmail.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Changelog:
==========
- Add 'xkb_context' flag 'XKB_CONTEXT_NO_SECURE_GETENV' and 'rxkb_context' flag
'RXKB_CONTEXT_NO_SECURE_GETENV'.
xkbcommon uses 'getenv_secure()' to obtain environment variables. This flag
makes xkbcommon use 'getenv()' instead.
This is useful for some clients that have relatively benign capabilities set,
like CAP_SYS_NICE, that also want to use e.g. the XKB configuration from the
environment and user configs in XDG_CONFIG_HOME.
Contributed by Ronan Pigott.
- Fix crash in 'xkbcli interactive-wayland' under a compositor which supports
new versions of the xdg-shell protocol.
Contributed by Jan Alexander Steffens (heftig).
- Fix some MSVC build issues.
- Fix some issues when including xkbcommon as a meson subproject.
- meson>=0.51 is now required.
- New API:
XKB_CONTEXT_NO_SECURE_GETENV
RXKB_CONTEXT_NO_SECURE_GETENV
(From OE-Core rev: 3aff7e09bacdc53896e5149f494846ef95c78408)
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Using -D_FILE_OFFSET_BITS=64 already makes the normal function behave
like 64bit variants. Moreover it makes them portable across libc
(From OE-Core rev: 41da2fb965b31a6ee5d825cf799b14fcf99e70db)
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
