buildroot/package/graphite2, branch 2017.08

package/graphite2: bump version to 1.3.10

2017-06-05T09:14:17+00:00

Added sha256 hash. Signed-off-by: Bernd Kuhls Signed-off-by: Thomas Petazzoni

boot, package: use SPDX short identifier for LGPLv2.1/LGPLv2.1+

2017-04-01T13:18:10+00:00

We want to use SPDX identifier for license string as much as possible. SPDX short identifier for LGPLv2.1/LGPLv2.1+ is LGPL-2.1/LGPL-2.1+. This change is done using following command. find . -name "*.mk" | xargs sed -ri '/LICENSE( )?[\+:]?=/s/LGPLv2.1(\+)?/LGPL-2.1\1/g' Signed-off-by: Rahul Bedarkar Signed-off-by: Thomas Petazzoni

graphite2: bump to version 1.3.9

2017-01-26T20:08:37+00:00

Signed-off-by: Gustavo Zacarias Signed-off-by: Peter Korsgaard

graphite2: bump to version 1.3.8

2016-04-08T21:26:19+00:00

And upstream switches tarball name yet again, so adjust SOURCE. Signed-off-by: Gustavo Zacarias Signed-off-by: Peter Korsgaard

graphite2: bump to version 1.3.6

2016-03-03T08:49:33+00:00

Also change SOURCE since the tarball got renamed with the bump. Signed-off-by: Gustavo Zacarias Signed-off-by: Peter Korsgaard

graphite2: switch homepage

2016-02-16T20:50:42+00:00

Point to the official/proper one. Signed-off-by: Gustavo Zacarias Signed-off-by: Thomas Petazzoni

graphite2: security bump to version 1.3.5

2016-02-15T21:30:24+00:00

Fixes: CVE-2016-1521 - An exploitable out-of-bounds read vulnerability exists in the opcode handling functionality of Libgraphite. A specially crafted font can cause an out-of-bounds read resulting in arbitrary code execution. An attacker can provide a malicious font to trigger this vulnerability. CVE-2016-1522 - An exploitable NULL pointer dereference exists in the bidirectional font handling functionality of Libgraphite. A specially crafted font can cause a NULL pointer dereference resulting in a crash. An attacker can provide a malicious font to trigger this vulnerability. CVE-2016-1523 - An exploitable heap-based buffer overflow exists in the context item handling functionality of Libgraphite. A specially crafted font can cause a buffer overflow resulting in potential code execution. An attacker can provide a malicious font to trigger this vulnerability. Signed-off-by: Gustavo Zacarias Signed-off-by: Thomas Petazzoni

graphite2: new package

2015-09-27T21:13:52+00:00

[Thomas: - tweak description of the patch - turn the doc/test removal hook as a post patch hook rather than a pre-configure hook.] Signed-off-by: Gustavo Zacarias Reviewed-by: Vicente Olivert Riera Tested-by: Vicente Olivert Riera Signed-off-by: Thomas Petazzoni