* [Buildroot] [PATCH] package/x11r7/xlib_libXfont2: security bump to version 2.0.9
@ 2026-09-14 19:06 Peter Korsgaard
2026-09-14 19:27 ` Julien Olivain via buildroot
2026-09-25 14:44 ` Raphaël Mélotte via buildroot
0 siblings, 2 replies; 3+ messages in thread
From: Peter Korsgaard @ 2026-09-14 19:06 UTC (permalink / raw)
To: buildroot
Fixes the following vulnerabilities:
- CVE-2026-59679: Font Server Client encoding Out-Of-Bounds Read/Write
- CVE-2026-44950: Font Server Client Cumulative Glyph Data Heap Buffer
Overflow
For more details, see the advisory:
https://lists.x.org/archives/xorg-announce/2026-August/003734.html
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
---
package/x11r7/xlib_libXfont2/xlib_libXfont2.hash | 6 +++---
package/x11r7/xlib_libXfont2/xlib_libXfont2.mk | 2 +-
2 files changed, 4 insertions(+), 4 deletions(-)
diff --git a/package/x11r7/xlib_libXfont2/xlib_libXfont2.hash b/package/x11r7/xlib_libXfont2/xlib_libXfont2.hash
index 86e972a0e8..d5813b3e24 100644
--- a/package/x11r7/xlib_libXfont2/xlib_libXfont2.hash
+++ b/package/x11r7/xlib_libXfont2/xlib_libXfont2.hash
@@ -1,5 +1,5 @@
-# From https://lists.x.org/archives/xorg-announce/2026-July/003715.html
-sha256 f556c0e1093a4e6911cc90bc4b106d201902ee187fd74af206ff162f7e6a24d5 libXfont2-2.0.8.tar.xz
-sha512 e14cc3fa03d7baa4554ee5754ab33f69ac1da3d509c686a5f705fde8cd07772be564d68cc18d9fd0beb5ed7b2f864fcd7f6bf4983f5c0db08a9c747d0e001531 libXfont2-2.0.8.tar.xz
+# From https://lists.x.org/archives/xorg-announce/2026-August/003735.html
+sha256 f042a370666815e7b941e9b7019024755bd1c6c2954afbfa515af378251799e2 libXfont2-2.0.9.tar.xz
+sha512 ccd6d6abf6aa814a940d137813dba638f8259c3672abf00808d82df033c1026ae29d40c9068da4f112637338ad0d0fc15818a4afa9369a626c8f17e466b4fa72 libXfont2-2.0.9.tar.xz
# Locally calculated
sha256 3b1047f0d45584973866a40e3eedc74aea4c6ac636960d650ae05af603e6d1a8 COPYING
diff --git a/package/x11r7/xlib_libXfont2/xlib_libXfont2.mk b/package/x11r7/xlib_libXfont2/xlib_libXfont2.mk
index a881a4c55b..e8db0004f8 100644
--- a/package/x11r7/xlib_libXfont2/xlib_libXfont2.mk
+++ b/package/x11r7/xlib_libXfont2/xlib_libXfont2.mk
@@ -4,7 +4,7 @@
#
################################################################################
-XLIB_LIBXFONT2_VERSION = 2.0.8
+XLIB_LIBXFONT2_VERSION = 2.0.9
XLIB_LIBXFONT2_SOURCE = libXfont2-$(XLIB_LIBXFONT2_VERSION).tar.xz
XLIB_LIBXFONT2_SITE = https://xorg.freedesktop.org/archive/individual/lib
XLIB_LIBXFONT2_LICENSE = MIT
--
2.47.3
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
^ permalink raw reply related [flat|nested] 3+ messages in thread
* Re: [Buildroot] [PATCH] package/x11r7/xlib_libXfont2: security bump to version 2.0.9
2026-09-14 19:06 [Buildroot] [PATCH] package/x11r7/xlib_libXfont2: security bump to version 2.0.9 Peter Korsgaard
@ 2026-09-14 19:27 ` Julien Olivain via buildroot
2026-09-25 14:44 ` Raphaël Mélotte via buildroot
1 sibling, 0 replies; 3+ messages in thread
From: Julien Olivain via buildroot @ 2026-09-14 19:27 UTC (permalink / raw)
To: Peter Korsgaard; +Cc: buildroot
On 14/09/2026 21:06, Peter Korsgaard wrote:
> Fixes the following vulnerabilities:
>
> - CVE-2026-59679: Font Server Client encoding Out-Of-Bounds Read/Write
> - CVE-2026-44950: Font Server Client Cumulative Glyph Data Heap Buffer
> Overflow
>
> For more details, see the advisory:
> https://lists.x.org/archives/xorg-announce/2026-August/003734.html
>
> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Applied to master, thanks.
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
^ permalink raw reply [flat|nested] 3+ messages in thread
* Re: [Buildroot] [PATCH] package/x11r7/xlib_libXfont2: security bump to version 2.0.9
2026-09-14 19:06 [Buildroot] [PATCH] package/x11r7/xlib_libXfont2: security bump to version 2.0.9 Peter Korsgaard
2026-09-14 19:27 ` Julien Olivain via buildroot
@ 2026-09-25 14:44 ` Raphaël Mélotte via buildroot
1 sibling, 0 replies; 3+ messages in thread
From: Raphaël Mélotte via buildroot @ 2026-09-25 14:44 UTC (permalink / raw)
To: buildroot, Peter Korsgaard; +Cc: Raphaël Mélotte
In reply of:
> Fixes the following vulnerabilities:
>
> - CVE-2026-59679: Font Server Client encoding Out-Of-Bounds Read/Write
> - CVE-2026-44950: Font Server Client Cumulative Glyph Data Heap Buffer
> Overflow
>
> For more details, see the advisory:
> https://lists.x.org/archives/xorg-announce/2026-August/003734.html
>
> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Applied to 2025.02.x, 2026.08.x. Thanks
> ---
> package/x11r7/xlib_libXfont2/xlib_libXfont2.hash | 6 +++---
> package/x11r7/xlib_libXfont2/xlib_libXfont2.mk | 2 +-
> 2 files changed, 4 insertions(+), 4 deletions(-)
>
> diff --git a/package/x11r7/xlib_libXfont2/xlib_libXfont2.hash b/package/x11r7/xlib_libXfont2/xlib_libXfont2.hash
> index 86e972a0e8..d5813b3e24 100644
> --- a/package/x11r7/xlib_libXfont2/xlib_libXfont2.hash
> +++ b/package/x11r7/xlib_libXfont2/xlib_libXfont2.hash
> @@ -1,5 +1,5 @@
> -# From https://lists.x.org/archives/xorg-announce/2026-July/003715.html
> -sha256 f556c0e1093a4e6911cc90bc4b106d201902ee187fd74af206ff162f7e6a24d5 libXfont2-2.0.8.tar.xz
> -sha512 e14cc3fa03d7baa4554ee5754ab33f69ac1da3d509c686a5f705fde8cd07772be564d68cc18d9fd0beb5ed7b2f864fcd7f6bf4983f5c0db08a9c747d0e001531 libXfont2-2.0.8.tar.xz
> +# From https://lists.x.org/archives/xorg-announce/2026-August/003735.html
> +sha256 f042a370666815e7b941e9b7019024755bd1c6c2954afbfa515af378251799e2 libXfont2-2.0.9.tar.xz
> +sha512 ccd6d6abf6aa814a940d137813dba638f8259c3672abf00808d82df033c1026ae29d40c9068da4f112637338ad0d0fc15818a4afa9369a626c8f17e466b4fa72 libXfont2-2.0.9.tar.xz
> # Locally calculated
> sha256 3b1047f0d45584973866a40e3eedc74aea4c6ac636960d650ae05af603e6d1a8 COPYING
> diff --git a/package/x11r7/xlib_libXfont2/xlib_libXfont2.mk b/package/x11r7/xlib_libXfont2/xlib_libXfont2.mk
> index a881a4c55b..e8db0004f8 100644
> --- a/package/x11r7/xlib_libXfont2/xlib_libXfont2.mk
> +++ b/package/x11r7/xlib_libXfont2/xlib_libXfont2.mk
> @@ -4,7 +4,7 @@
> #
> ################################################################################
>
> -XLIB_LIBXFONT2_VERSION = 2.0.8
> +XLIB_LIBXFONT2_VERSION = 2.0.9
> XLIB_LIBXFONT2_SOURCE = libXfont2-$(XLIB_LIBXFONT2_VERSION).tar.xz
> XLIB_LIBXFONT2_SITE = https://xorg.freedesktop.org/archive/individual/lib
> XLIB_LIBXFONT2_LICENSE = MIT
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
^ permalink raw reply [flat|nested] 3+ messages in thread
end of thread, other threads:[~2026-09-25 14:44 UTC | newest]
Thread overview: 3+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2026-09-14 19:06 [Buildroot] [PATCH] package/x11r7/xlib_libXfont2: security bump to version 2.0.9 Peter Korsgaard
2026-09-14 19:27 ` Julien Olivain via buildroot
2026-09-25 14:44 ` Raphaël Mélotte via buildroot
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.