mirror/buildroot
1
0
Fork 0
mirror of https://gitlab.com/buildroot.org/buildroot.git synced 2026-08-01 13:18:36 -09:00
Code Issues Packages Projects Releases Wiki Activity

package/x11r7/xlib_libXfont2: security bump version to 2.0.8

Browse Source 
https://lists.x.org/archives/xorg-announce/2026-July/003715.html
https://lists.x.org/archives/xorg-announce/2026-July/003714.html

Fixes
- CVE-2026-56001: BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow
- CVE-2026-56002: PCF Font Parsing Heap Buffer Overflow
- CVE-2026-56003: computeProps Property Buffer Heap Buffer Overflow

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
This commit is contained in:
Bernd Kuhls
2026-07-12 13:30:58 +02:00
committed by Julien Olivain
parent 0d01f6fcee
commit c6e304f383
2 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
package/x11r7/xlib_libXfont2/xlib_libXfont2.hash
View File

@@ -1,5 +1,5 @@
# From https://lists.x.org/archives/xorg-announce/2024-August/003523.html
sha256 8b7b82fdeba48769b69433e8e3fbb984a5f6bf368b0d5f47abeec49de3e58efb libXfont2-2.0.7.tar.xz
sha512 f703127df5d5b1093c9b73e019153ed7799523573d52e61d344209f0acfd4df42e11be12bdd1880479c47c2b70de581a4f2ef74e199e9b1ac438f426593d56b0 libXfont2-2.0.7.tar.xz
# From https://lists.x.org/archives/xorg-announce/2026-July/003715.html
sha256 f556c0e1093a4e6911cc90bc4b106d201902ee187fd74af206ff162f7e6a24d5 libXfont2-2.0.8.tar.xz
sha512 e14cc3fa03d7baa4554ee5754ab33f69ac1da3d509c686a5f705fde8cd07772be564d68cc18d9fd0beb5ed7b2f864fcd7f6bf4983f5c0db08a9c747d0e001531 libXfont2-2.0.8.tar.xz
# Locally calculated
sha256 3b1047f0d45584973866a40e3eedc74aea4c6ac636960d650ae05af603e6d1a8 COPYING

2
package/x11r7/xlib_libXfont2/xlib_libXfont2.mk
View File

@@ -4,7 +4,7 @@
#
################################################################################
XLIB_LIBXFONT2_VERSION = 2.0.7
XLIB_LIBXFONT2_VERSION = 2.0.8
XLIB_LIBXFONT2_SOURCE = libXfont2-$(XLIB_LIBXFONT2_VERSION).tar.xz
XLIB_LIBXFONT2_SITE = https://xorg.freedesktop.org/archive/individual/lib
XLIB_LIBXFONT2_LICENSE = MIT