BSD Commit Log Search

   Backport security fixes from freetype 2.14.2.
   Prevent an integer overflow leading to out-of-bounds read.
   CVE-2026-23865
   from matthieu@

   this is errata/7.7/026_freetype.patch.sig

   Backport security fixes from freetype 2.14.2.
   Prevent an integer overflow leading to out-of-bounds read.
   CVE-2026-23865
   from matthieu@

   this is errata/7.8/020_freetype.patch.sig

   update

   Update to xcalc 1.1.3

   Update to xauth 1.1.5

   Update to xconsole 1.1.0

   Update to xfd 1.1.5

   Update to freetype 2.14.2. tested by rsadowski@
   includes fix for CVE-2026-23865 (Prevent an integer overflow
   leading to out-of-bounds read)

   Fix variable substitution in target install-headers-subdirs.
   There may be more than one subdir level.
   Note this target is currently unused in xenocara.

   update

   update to bitmap 1.1.2

   Update to libXrandr 1.5.5

   Update to libXpm 3.5.18

   sync

   Update to libXmu 1.3.1

   Update to libXinerama 1.1.6

   Update to libXext 1.3.7

   Upsate to libXdamage 1.1.7

   Update to libXcomposite 0.4.7

   Missed removal of those 2 files in previous update.

   update

   Update to png 1.6.55. ok tb@
   The freetype code that used this copy of libpng is not calling
   png_set_quantize either directly or indirectly so it's not affected by
   CVE-2026-25646 (High): Heap buffer overflow in png_set_quantize

   update

   Update to xserver 21.1.21. ok tb@

   Update to xterm-406. Tested by kirill@ and tb, ok tb@

   update

   Protect <endian.h> inclusion from assembly code.
   Fixes build failure reported on arm by deraadt@. ok jca@
   (Note: the arm assembly code doesn't need the WORDS_BIGENDIAN)

   pixman: remove stale files in test

   update

   Update to png 1.6.54.