package/x11r7/xlib_libXcursor: security bump to version 1.1.15

PATCH New Bernd Kuhls 3 participants 7 messages Nov 29, 2017 – Dec 20, 2017

lore

Share & tools

lore

Bernd Kuhls

author

2017-11-29 20:45 UTC #0 lore raw

PATCH 1/3 package/x11r7/xlib_libXcursor: security bump to version 1.1.15

Fixes CVE-2017-16612:
https://lists.x.org/archives/xorg-announce/2017-November/002823.html

Added all hashed provided by upstream.

Signed-off-by Bernd Kuhls <[email protected]>

---
 package/x11r7/xlib_libXcursor/xlib_libXcursor.hash | 7 +++++--
 package/x11r7/xlib_libXcursor/xlib_libXcursor.mk   | 2 +-
 2 files changed, 6 insertions(+), 3 deletions(-)

package/x11r7/xlib_libXcursor/xlib_libXcursor.hash +5 -2

index 0135ac9dd0..7da9eb8c4f 100644
@@ -1,2 +1,5 @@
-# From http://lists.x.org/archives/xorg-announce/2013-May/002229.html
-sha256	9bc6acb21ca14da51bda5bc912c8955bc6e5e433f0ab00c5e8bef842596c33df	libXcursor-1.1.14.tar.bz2
+# From https://lists.x.org/archives/xorg-announce/2017-November/002823.html
+md5  58fe3514e1e7135cf364101e714d1a14  libXcursor-1.1.15.tar.bz2
+sha1 3e19f991f244b7fa31566adce7ead078424296cf  libXcursor-1.1.15.tar.bz2
+sha256 294e670dd37cd23995e69aae626629d4a2dfe5708851bbc13d032401b7a3df6b  libXcursor-1.1.15.tar.bz2
+sha512 53ad0fa2afd7b4cf1108b560e44ea71abdf5c55a18df243d7123942513589c927f5c105395f790d8769959e0129db54264e6aac7efd51a5f1aec270379b1f2f5  libXcursor-1.1.15.tar.bz2

package/x11r7/xlib_libXcursor/xlib_libXcursor.mk +1 -1

index c59c01a51f..b27aa653e9 100644
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-XLIB_LIBXCURSOR_VERSION = 1.1.14
+XLIB_LIBXCURSOR_VERSION = 1.1.15
 XLIB_LIBXCURSOR_SOURCE = libXcursor-$(XLIB_LIBXCURSOR_VERSION).tar.bz2
 XLIB_LIBXCURSOR_SITE = http://xorg.freedesktop.org/releases/individual/lib
 XLIB_LIBXCURSOR_LICENSE = MIT

Signature · 1 line

2.11.0

Bernd Kuhls

author

2017-11-29 20:45 UTC #1 lore raw

PATCH 2/3 package/x11r7/xlib_libXfont2: security bump to version 2.0.3

Fixes CVE-2017-16611:
https://lists.x.org/archives/xorg-announce/2017-November/002824.html

Signed-off-by Bernd Kuhls <[email protected]>

---
 package/x11r7/xlib_libXfont2/xlib_libXfont2.hash | 10 +++++-----
 package/x11r7/xlib_libXfont2/xlib_libXfont2.mk   |  2 +-
 2 files changed, 6 insertions(+), 6 deletions(-)

package/x11r7/xlib_libXfont2/xlib_libXfont2.hash +5 -5

index 3e763b268f..1816b4bf6e 100644
@@ -1,5 +1,5 @@
-# From https://lists.x.org/archives/xorg-announce/2017-October/002813.html
-md5 d39e6446e46f939486d1a8b856e8b67b  libXfont2-2.0.2.tar.bz2
-sha1 d5117914a026b3fd47123cb1c2a22daaae3b63e4  libXfont2-2.0.2.tar.bz2
-sha256 94088d3b87f7d42c7116d9adaad155859e93330c6e47f5989f2de600b9a6c111  libXfont2-2.0.2.tar.bz2
-sha512 d62b0c3d663a2c668796cca8c6c2a90f83feeae1253b7d946668d33502cd8099c963285b88db4f745efb0d4ff783c118eb3d84cb8e6e1724586e1ef2be23e593  libXfont2-2.0.2.tar.bz2
+# From https://lists.x.org/archives/xorg-announce/2017-November/002824.html
+md5  b7ca87dfafeb5205b28a1e91ac3efe85  libXfont2-2.0.3.tar.bz2
+sha1 1110f1ad4061d9e8131ecb941757480e3e32bca0  libXfont2-2.0.3.tar.bz2
+sha256 0e8ab7fd737ccdfe87e1f02b55f221f0bd4503a1c5f28be4ed6a54586bac9c4e  libXfont2-2.0.3.tar.bz2
+sha512 648b664e2aa58cbc7366a1b05873aa06bd4a38060f64085783043388244af8ceced77b29a22c3ac8b6d34cd226e093bbbcc785ea1748ea65720fe7ea05b4b44b  libXfont2-2.0.3.tar.bz2

package/x11r7/xlib_libXfont2/xlib_libXfont2.mk +1 -1

index 696c605a36..3f1bdee435 100644
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-XLIB_LIBXFONT2_VERSION = 2.0.2
+XLIB_LIBXFONT2_VERSION = 2.0.3
 XLIB_LIBXFONT2_SOURCE = libXfont2-$(XLIB_LIBXFONT2_VERSION).tar.bz2
 XLIB_LIBXFONT2_SITE = http://xorg.freedesktop.org/releases/individual/lib
 XLIB_LIBXFONT2_LICENSE = MIT

Signature · 1 line

2.11.0

Peter Korsgaard

2017-12-20 20:57 UTC #2 lore raw

PATCH 2/3 package/x11r7/xlib_libXfont2: security bump to version 2.0.3

Quoted 6 lines

Quoted 1 line
Quoted 1 line
Quoted 1 line
Quoted 1 line
"Bernd" == Bernd Kuhls <[email protected]> writes:
Fixes CVE-2017-16611:
https://lists.x.org/archives/xorg-announce/2017-November/002824.html
Signed-off-by Bernd Kuhls <[email protected]>

Committed to 2017.02.x, thanks.

Signature · 1 line

Bye, Peter Korsgaard

Bernd Kuhls

author

2017-11-29 20:45 UTC #3 lore raw

PATCH 3/3 package/x11r7/xlib_libXfont: security bump to version 1.5.4

In reply to Bernd Kuhls

Fixes CVE-2017-16611:
https://lists.x.org/archives/xorg-announce/2017-November/002825.html

Signed-off-by Bernd Kuhls <[email protected]>

---
 package/x11r7/xlib_libXfont/xlib_libXfont.hash | 10 +++++-----
 package/x11r7/xlib_libXfont/xlib_libXfont.mk   |  2 +-
 2 files changed, 6 insertions(+), 6 deletions(-)

package/x11r7/xlib_libXfont/xlib_libXfont.hash +5 -5

index 78700d3657..ea04348719 100644
@@ -1,5 +1,5 @@
-# From https://lists.x.org/archives/xorg-announce/2017-October/002816.html
-md5 9ba75bf38ba62a6ad52550ab716da9b3  libXfont-1.5.3.tar.bz2
-sha1 628b8ca2207f09324b8926084318a2fa2edb16d1  libXfont-1.5.3.tar.bz2
-sha256 ab85c10fd2683481dfef672a77fe60e6a2039558cbc0e9bf56b5e1df471c93d0  libXfont-1.5.3.tar.bz2
-sha512 e7c8a09c4d174129e5d550194d3c3dc2b4abf797e52fe588c6002920727c52cf33b7db8d07fc69c2987e766d3af2d6ddda72f0c70eb21b135c691c97656a81b4  libXfont-1.5.3.tar.bz2
+# From https://lists.x.org/archives/xorg-announce/2017-November/002825.html
+md5  16eaf156edd79b68038b6a7c44aa9e9b  libXfont-1.5.4.tar.bz2
+sha1 9db050f63b9c4cb19e0dbb40575558ccb95719ca  libXfont-1.5.4.tar.bz2
+sha256 1a7f7490774c87f2052d146d1e0e64518d32e6848184a18654e8d0bb57883242  libXfont-1.5.4.tar.bz2
+sha512 864edbaff45c44bd92bc4b06275c73fdf584a9b88bc523a297d4c75c01ca253f438463e929af70d753ddecfa648bb0b9bcf0ec72267db9f2b1704f7afa906cb3  libXfont-1.5.4.tar.bz2

package/x11r7/xlib_libXfont/xlib_libXfont.mk +1 -1

index 13e3b211f3..30163eec6f 100644
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-XLIB_LIBXFONT_VERSION = 1.5.3
+XLIB_LIBXFONT_VERSION = 1.5.4
 XLIB_LIBXFONT_SOURCE = libXfont-$(XLIB_LIBXFONT_VERSION).tar.bz2
 XLIB_LIBXFONT_SITE = http://xorg.freedesktop.org/releases/individual/lib
 XLIB_LIBXFONT_LICENSE = MIT

Signature · 1 line

2.11.0

Peter Korsgaard

2017-12-20 20:57 UTC #4 lore raw

PATCH 3/3 package/x11r7/xlib_libXfont: security bump to version 1.5.4

Quoted 6 lines

Quoted 1 line
Quoted 1 line
Quoted 1 line
Quoted 1 line
"Bernd" == Bernd Kuhls <[email protected]> writes:
Fixes CVE-2017-16611:
https://lists.x.org/archives/xorg-announce/2017-November/002825.html
Signed-off-by Bernd Kuhls <[email protected]>

Committed to 2017.02.x, thanks.

Signature · 1 line

Bye, Peter Korsgaard

Thomas Petazzoni

2017-11-29 21:04 UTC #5 lore raw

PATCH 1/3 package/x11r7/xlib_libXcursor: security bump to version 1.1.15

In reply to Bernd Kuhls

Hello,

Quoted 10 lines · Bernd Kuhls

Fixes CVE-2017-16612:
https://lists.x.org/archives/xorg-announce/2017-November/002823.html
Added all hashed provided by upstream.
Signed-off-by Bernd Kuhls <[email protected]>
---
 package/x11r7/xlib_libXcursor/xlib_libXcursor.hash | 7 +++++--
 package/x11r7/xlib_libXcursor/xlib_libXcursor.mk   | 2 +-
 2 files changed, 6 insertions(+), 3 deletions(-)

All three patches applied to master. Thanks!

Thomas

Signature · 3 lines

Thomas Petazzoni, CTO, Free Electrons
Embedded Linux, Kernel and Android engineering
http://free-electrons.com

Peter Korsgaard

2017-12-20 20:57 UTC #6 lore raw

PATCH 1/3 package/x11r7/xlib_libXcursor: security bump to version 1.1.15

In reply to Bernd Kuhls

Quoted 8 lines

Quoted 1 line
Quoted 1 line
Quoted 1 line
Quoted 1 line
"Bernd" == Bernd Kuhls <[email protected]> writes:
Fixes CVE-2017-16612:
https://lists.x.org/archives/xorg-announce/2017-November/002823.html
Added all hashed provided by upstream.
Signed-off-by Bernd Kuhls <[email protected]>

Committed to 2017.02.x, thanks.

Signature · 1 line

Bye, Peter Korsgaard