<feed xmlns='http://www.w3.org/2005/Atom'>
<title>openembedded-core.git/meta/recipes-gnome, branch fido</title>
<subtitle>Mirror of openembedded-core</subtitle>
<link rel='alternate' type='text/html' href='https://git.multitech.net/cgit/openembedded-core.git/'/>
<entry>
<title>gtk+_2.24.25: backport a fix for building with newer host perl</title>
<updated>2016-05-06T14:51:15+00:00</updated>
<author>
<name>Joshua Lock</name>
<email>joshua.g.lock@intel.com</email>
</author>
<published>2016-05-05T12:33:21+00:00</published>
<link rel='alternate' type='text/html' href='https://git.multitech.net/cgit/openembedded-core.git/commit/?id=fd27f8620ae4d95dfe07b27eee4256b0a128348a'/>
<id>fd27f8620ae4d95dfe07b27eee4256b0a128348a</id>
<content type='text'>
This backports a patch from gtk+ upstream to prevent an issue when
building on Fedora 23 hosts.

Signed-off-by: Joshua Lock &lt;joshua.g.lock@intel.com&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
This backports a patch from gtk+ upstream to prevent an issue when
building on Fedora 23 hosts.

Signed-off-by: Joshua Lock &lt;joshua.g.lock@intel.com&gt;
</pre>
</div>
</content>
</entry>
<entry>
<title>gdk-pixbuf: Security fix CVE-2015-7674</title>
<updated>2016-02-29T15:05:16+00:00</updated>
<author>
<name>Armin Kuster</name>
<email>akuster@mvista.com</email>
</author>
<published>2016-01-31T15:14:33+00:00</published>
<link rel='alternate' type='text/html' href='https://git.multitech.net/cgit/openembedded-core.git/commit/?id=50602eebe1150819c320b6b611dcd792573eb55a'/>
<id>50602eebe1150819c320b6b611dcd792573eb55a</id>
<content type='text'>
CVE-2015-7674 Heap overflow with a gif file in gdk-pixbuf &lt; 2.32.1

(From OE-Core master rev: f2b16d0f9c3ad67fdf63e9e41f42a6d54f1043e4)

Signed-off-by: Armin Kuster &lt;akuster@mvista.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
Signed-off-by: Armin Kuster &lt;akuster@mvista.com&gt;
Signed-off-by: Joshua Lock &lt;joshua.g.lock@intel.com&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
CVE-2015-7674 Heap overflow with a gif file in gdk-pixbuf &lt; 2.32.1

(From OE-Core master rev: f2b16d0f9c3ad67fdf63e9e41f42a6d54f1043e4)

Signed-off-by: Armin Kuster &lt;akuster@mvista.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
Signed-off-by: Armin Kuster &lt;akuster@mvista.com&gt;
Signed-off-by: Joshua Lock &lt;joshua.g.lock@intel.com&gt;
</pre>
</div>
</content>
</entry>
<entry>
<title>librsvg: Security fix CVE-2015-7558</title>
<updated>2016-02-29T15:05:16+00:00</updated>
<author>
<name>Armin Kuster</name>
<email>akuster@mvista.com</email>
</author>
<published>2016-01-31T04:45:31+00:00</published>
<link rel='alternate' type='text/html' href='https://git.multitech.net/cgit/openembedded-core.git/commit/?id=4e21caee47a0ca3e66e84a15d104d3b532731263'/>
<id>4e21caee47a0ca3e66e84a15d104d3b532731263</id>
<content type='text'>
CVE-2015-7558 librsvg2: Stack exhaustion causing DoS

including two supporting patches.

(From OE-Core master rev: 4945643bab1ee6b844115cc747e5c67d874d5fe6)

Signed-off-by: Armin Kuster &lt;akuster@mvista.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
Signed-off-by: Armin Kuster &lt;akuster@mvista.com&gt;
Signed-off-by: Joshua Lock &lt;joshua.g.lock@intel.com&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
CVE-2015-7558 librsvg2: Stack exhaustion causing DoS

including two supporting patches.

(From OE-Core master rev: 4945643bab1ee6b844115cc747e5c67d874d5fe6)

Signed-off-by: Armin Kuster &lt;akuster@mvista.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
Signed-off-by: Armin Kuster &lt;akuster@mvista.com&gt;
Signed-off-by: Joshua Lock &lt;joshua.g.lock@intel.com&gt;
</pre>
</div>
</content>
</entry>
<entry>
<title>gdk-pixbuf: Security Advisory - gdk-pixbuf - CVE-2015-4491</title>
<updated>2015-09-01T11:36:15+00:00</updated>
<author>
<name>Li Zhou</name>
<email>li.zhou@windriver.com</email>
</author>
<published>2015-08-18T03:45:41+00:00</published>
<link rel='alternate' type='text/html' href='https://git.multitech.net/cgit/openembedded-core.git/commit/?id=8e6da2d34ed6e3352e235c1723d6b4f425bd5932'/>
<id>8e6da2d34ed6e3352e235c1723d6b4f425bd5932</id>
<content type='text'>
pixops: Be more careful about integer overflow

Integer overflow in the make_filter_table function in pixops/pixops.c
in gdk-pixbuf before 2.31.5, as used in Mozilla Firefox before 40.0 and
Firefox ESR 38.x before 38.2 on Linux, Google Chrome on Linux, and other
products, allows remote attackers to execute arbitrary code or cause a
denial of service (heap-based buffer overflow and application crash) via
crafted bitmap dimensions that are mishandled during scaling.

(From OE-Core master rev: e27f367d08becce9486f2890cb7382f3c8448246)

Signed-off-by: Li Zhou &lt;li.zhou@windriver.com&gt;
Signed-off-by: Ross Burton &lt;ross.burton@intel.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
Signed-off-by: Joshua Lock &lt;joshua.lock@collabora.co.uk&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
pixops: Be more careful about integer overflow

Integer overflow in the make_filter_table function in pixops/pixops.c
in gdk-pixbuf before 2.31.5, as used in Mozilla Firefox before 40.0 and
Firefox ESR 38.x before 38.2 on Linux, Google Chrome on Linux, and other
products, allows remote attackers to execute arbitrary code or cause a
denial of service (heap-based buffer overflow and application crash) via
crafted bitmap dimensions that are mishandled during scaling.

(From OE-Core master rev: e27f367d08becce9486f2890cb7382f3c8448246)

Signed-off-by: Li Zhou &lt;li.zhou@windriver.com&gt;
Signed-off-by: Ross Burton &lt;ross.burton@intel.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
Signed-off-by: Joshua Lock &lt;joshua.lock@collabora.co.uk&gt;
</pre>
</div>
</content>
</entry>
<entry>
<title>gtk-engines: Make gtk-engines-dev installable by dropping dependency to not generated gtk-engines package.</title>
<updated>2015-06-28T08:41:56+00:00</updated>
<author>
<name>Florian Boor</name>
<email>florian.boor@kernelconcepts.de</email>
</author>
<published>2015-05-20T13:48:34+00:00</published>
<link rel='alternate' type='text/html' href='https://git.multitech.net/cgit/openembedded-core.git/commit/?id=659cc47b142e0f14ace989d10277e4f83d7ffb75'/>
<id>659cc47b142e0f14ace989d10277e4f83d7ffb75</id>
<content type='text'>
(From OE-Core rev: da96efe73c2338fa660a80d043479106f732f1f5)

Signed-off-by: Ross Burton &lt;ross.burton@intel.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
(From OE-Core rev: da96efe73c2338fa660a80d043479106f732f1f5)

Signed-off-by: Ross Burton &lt;ross.burton@intel.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</pre>
</div>
</content>
</entry>
<entry>
<title>libffi: Use proper compiler define for linux platform</title>
<updated>2015-05-15T17:12:03+00:00</updated>
<author>
<name>Khem Raj</name>
<email>raj.khem@gmail.com</email>
</author>
<published>2015-04-06T17:36:43+00:00</published>
<link rel='alternate' type='text/html' href='https://git.multitech.net/cgit/openembedded-core.git/commit/?id=df99dd90255e46b226f4eea7b3c0d81f548adaf9'/>
<id>df99dd90255e46b226f4eea7b3c0d81f548adaf9</id>
<content type='text'>
Change-Id: I8253249a2e1c5e9ded0d028545f21cfdc093c3cd
(From OE-Core master rev: f7307ea20c8aa4aed4c38a7c15fb9b3b6b836035)

Signed-off-by: Khem Raj &lt;raj.khem@gmail.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Change-Id: I8253249a2e1c5e9ded0d028545f21cfdc093c3cd
(From OE-Core master rev: f7307ea20c8aa4aed4c38a7c15fb9b3b6b836035)

Signed-off-by: Khem Raj &lt;raj.khem@gmail.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</pre>
</div>
</content>
</entry>
<entry>
<title>libart-lgpl: add art_config.h for armeb/aarch64be/aarch64be_32</title>
<updated>2015-03-31T21:21:44+00:00</updated>
<author>
<name>Krishnanjanappa, Jagadeesh</name>
<email>jagadeesh.krishnanjanappa@caviumnetworks.com</email>
</author>
<published>2015-03-26T15:39:11+00:00</published>
<link rel='alternate' type='text/html' href='https://git.multitech.net/cgit/openembedded-core.git/commit/?id=a4e705930e3236bdb188192c0959d807587500ff'/>
<id>a4e705930e3236bdb188192c0959d807587500ff</id>
<content type='text'>
The preprocessor macro values present in art_config.h
differ for individual architectures, basically libart-lgpl recipe will
pick up correct art_config.h file based on

ART_CONFIG = "${HOST_ARCH}/art_config.h"

and thereby having correct preprocessor macros definition
of each architectures.

Signed-off-by: Krishnanjanappa, Jagadeesh &lt;jagadeesh.krishnanjanappa@caviumnetworks.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
The preprocessor macro values present in art_config.h
differ for individual architectures, basically libart-lgpl recipe will
pick up correct art_config.h file based on

ART_CONFIG = "${HOST_ARCH}/art_config.h"

and thereby having correct preprocessor macros definition
of each architectures.

Signed-off-by: Krishnanjanappa, Jagadeesh &lt;jagadeesh.krishnanjanappa@caviumnetworks.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</pre>
</div>
</content>
</entry>
<entry>
<title>libffi: Upgrade to 3.2.1</title>
<updated>2015-01-07T23:33:07+00:00</updated>
<author>
<name>Saul Wold</name>
<email>sgw@linux.intel.com</email>
</author>
<published>2014-12-23T23:56:24+00:00</published>
<link rel='alternate' type='text/html' href='https://git.multitech.net/cgit/openembedded-core.git/commit/?id=4984622044da3457eabac7d90a6c5884a7067938'/>
<id>4984622044da3457eabac7d90a6c5884a7067938</id>
<content type='text'>
Signed-off-by: Saul Wold &lt;sgw@linux.intel.com&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Signed-off-by: Saul Wold &lt;sgw@linux.intel.com&gt;
</pre>
</div>
</content>
</entry>
<entry>
<title>librsvg: upgrade to 2.40.6</title>
<updated>2015-01-07T23:32:56+00:00</updated>
<author>
<name>Ross Burton</name>
<email>ross.burton@intel.com</email>
</author>
<published>2014-12-31T12:33:13+00:00</published>
<link rel='alternate' type='text/html' href='https://git.multitech.net/cgit/openembedded-core.git/commit/?id=a06bdaf8c25fbe838c416e67aaf4a6bc0335681c'/>
<id>a06bdaf8c25fbe838c416e67aaf4a6bc0335681c</id>
<content type='text'>
Upstream now ships it's own vapigen.m4, so don't install our own copy.

(From OE-Core rev: 7235da88c6ed6555cfa271714331595a8c3dd2e4)

Signed-off-by: Ross Burton &lt;ross.burton@intel.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Upstream now ships it's own vapigen.m4, so don't install our own copy.

(From OE-Core rev: 7235da88c6ed6555cfa271714331595a8c3dd2e4)

Signed-off-by: Ross Burton &lt;ross.burton@intel.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</pre>
</div>
</content>
</entry>
<entry>
<title>hicolor-icon-theme: upgrade to 0.14</title>
<updated>2015-01-07T23:32:56+00:00</updated>
<author>
<name>Ross Burton</name>
<email>ross.burton@intel.com</email>
</author>
<published>2014-12-31T12:19:23+00:00</published>
<link rel='alternate' type='text/html' href='https://git.multitech.net/cgit/openembedded-core.git/commit/?id=b2f7cd12b053c00f42a5eb8e036c0aa8a8e447e4'/>
<id>b2f7cd12b053c00f42a5eb8e036c0aa8a8e447e4</id>
<content type='text'>
Drop the customised index.theme as it was only required for Hildon- and
OpenMoko-specific environments.

Upstream now uses autotools, so drop custom rules and autotools-brokensep.

Drop pointless unknown SECTION and unused gnomebase class.

(From OE-Core rev: 60784d5faafe75f79fc5aaa9c7ef03b51f6efaec)

Signed-off-by: Ross Burton &lt;ross.burton@intel.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Drop the customised index.theme as it was only required for Hildon- and
OpenMoko-specific environments.

Upstream now uses autotools, so drop custom rules and autotools-brokensep.

Drop pointless unknown SECTION and unused gnomebase class.

(From OE-Core rev: 60784d5faafe75f79fc5aaa9c7ef03b51f6efaec)

Signed-off-by: Ross Burton &lt;ross.burton@intel.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</pre>
</div>
</content>
</entry>
</feed>
