[packages/xorg-xserver-server] up to 21.1.16 (multiple security fixes)
atler
atler at pld-linux.org
Wed Feb 26 12:02:26 CET 2025
commit c35b4e88146d7f5ffe2020fd5f78270db26a718c
Author: Jan Palus <atler at pld-linux.org>
Date: Wed Feb 26 10:53:04 2025 +0100
up to 21.1.16 (multiple security fixes)
- CVE-2025-26594
- CVE-2025-26595
- CVE-2025-26596
- CVE-2025-26597
- CVE-2025-26598
- CVE-2025-26599
- CVE-2025-26600
- CVE-2025-26601
xorg-xserver-server-builtin-SHA1.patch | 12 ++++++++++--
xorg-xserver-server.spec | 4 ++--
2 files changed, 12 insertions(+), 4 deletions(-)
---
diff --git a/xorg-xserver-server.spec b/xorg-xserver-server.spec
index 04a28ed..6f79af7 100644
--- a/xorg-xserver-server.spec
+++ b/xorg-xserver-server.spec
@@ -35,12 +35,12 @@
Summary: X.org server
Summary(pl.UTF-8): Serwer X.org
Name: xorg-xserver-server
-Version: 21.1.15
+Version: 21.1.16
Release: 1
License: MIT
Group: X11/Servers
Source0: https://xorg.freedesktop.org/releases/individual/xserver/xorg-server-%{version}.tar.xz
-# Source0-md5: f6195ead06a84d0ceeddb5f120c2a90d
+# Source0-md5: f1a5ec0939c0efd7fde1418989b579db
Source1: 10-quirks.conf
Source2: xserver.pamd
Source10: %{name}-Xvfb.init
diff --git a/xorg-xserver-server-builtin-SHA1.patch b/xorg-xserver-server-builtin-SHA1.patch
index 90d9aee..f104b40 100644
--- a/xorg-xserver-server-builtin-SHA1.patch
+++ b/xorg-xserver-server-builtin-SHA1.patch
@@ -10,13 +10,13 @@ diff -urN xorg-server-1.17.0.org/configure.ac xorg-server-1.17.0/configure.ac
else
DIX_LIB='$(top_builddir)/dix/libdix.la'
OS_LIB='$(top_builddir)/os/libos.la'
-@@ -1566,124 +1566,6 @@
+@@ -1566,132 +1566,6 @@
MIEXT_SYNC_LIB='$(top_builddir)/miext/sync/libsync.la'
CORE_INCS='-I$(top_srcdir)/include -I$(top_builddir)/include'
-# SHA1 hashing
-AC_ARG_WITH([sha1],
-- [AS_HELP_STRING([--with-sha1=libc|libmd|libnettle|libgcrypt|libcrypto|libsha1|CommonCrypto|CryptoAPI],
+- [AS_HELP_STRING([--with-sha1=libc|libmd|libnettle|nettlestatic|libgcrypt|libcrypto|libsha1|CommonCrypto|CryptoAPI],
- [choose SHA1 implementation])])
-AC_CHECK_FUNC([SHA1Init], [HAVE_SHA1_IN_LIBC=yes])
-if test "x$with_sha1" = x && test "x$HAVE_SHA1_IN_LIBC" = xyes; then
@@ -91,6 +91,14 @@ diff -urN xorg-server-1.17.0.org/configure.ac xorg-server-1.17.0/configure.ac
- [Use libnettle SHA1 functions])
- SHA1_LIBS=-lnettle
-fi
+-if test "x$with_sha1" = xnettlestatic && test "x$HAVE_LIBNETTLE" != xyes; then
+- AC_MSG_ERROR([nettlestatic requested but libnettle not found])
+-fi
+-if test "x$with_sha1" = xnettlestatic; then
+- AC_DEFINE([HAVE_SHA1_IN_LIBNETTLE], [1],
+- [Use static libnettle SHA1 functions])
+- SHA1_LIBS=-l:libnettle.a
+-fi
-AC_CHECK_LIB([gcrypt], [gcry_md_open], [HAVE_LIBGCRYPT=yes])
-if test "x$with_sha1" = x && test "x$HAVE_LIBGCRYPT" = xyes; then
- with_sha1=libgcrypt
================================================================
---- gitweb:
http://git.pld-linux.org/gitweb.cgi/packages/xorg-xserver-server.git/commitdiff/c35b4e88146d7f5ffe2020fd5f78270db26a718c
More information about the pld-cvs-commit
mailing list