Hello, this email is a notification from the Auto Upgrade Helper that the automatic attempt to upgrade the recipe(s) *cairo* to *1.18.6* has Succeeded.
Next steps:
- apply the patch: git am 0001-cairo-upgrade-1.18.4-1.18.6.patch
- check the changes to upstream patches and summarize them in the commit
message,
- compile an image that contains the package
- perform some basic sanity tests
- amend the patch and sign it off: git commit -s --reset-author --amend
- send it to the appropriate mailing list
Alternatively, if you believe the recipe should not be upgraded at this time,
you can fill RECIPE_NO_UPDATE_REASON in respective recipe file so that
automatic upgrades would no longer be attempted.
Please review the attached files for further information and build/update
failures.
Any problem please file a bug at
https://bugzilla.yoctoproject.org/enter_bug.cgi?product=Automated%20Update%20Handler
Regards,
The Upgrade Helper
-- >8 --
>From c8b000d3a12d989c24e12bade74a1c644e241e75 Mon Sep 17 00:00:00 2001
From: Upgrade Helper <[email protected]>
Date: Mon, 21 Sep 2026 05:30:06 +0000
Subject: [PATCH] cairo: upgrade 1.18.4 -> 1.18.6
Source: NEWS
Release 1.18.6 (2026-09-20 Emmanuele Bassi <[email protected]>)
==============================================================
A new stable release.
The XCB surface triggered an UAF warning when building with GCC. [#898]
The clipping code was accessing various fields in a guard value, and
causing a crash inside Inkscape. See:
https://gitlab.com/inkscape/inkscape/-/issues/5631
Multiple fixes for the Windows backends, including improvements in the
thread safety of the DirectWrite code. [#897]
The DirectWrite backend now supports COLRv1 fonts. [#903]
Multiple fixes for building with MSVC and ClangCL.
A leak in the PDF surfaces has been fixed. [!644]
Various gaps between abutting rectangles when drawing with ANTIALIAS_NONE
were removed by using absolute coordinates and avoiding rounding
errors. [#976]
Remove an overflow when computing the buffer size in the XRender code. [#950]
---
.../cairo-get_bitmap_surface-bsc1036789-CVE-2017-7475.diff | 6 +++---
.../cairo/{cairo_1.18.4.bb => cairo_1.18.6.bb} | 2 +-
2 files changed, 4 insertions(+), 4 deletions(-)
rename meta/recipes-graphics/cairo/{cairo_1.18.4.bb => cairo_1.18.6.bb} (97%)
diff --git
a/meta/recipes-graphics/cairo/cairo/cairo-get_bitmap_surface-bsc1036789-CVE-2017-7475.diff
b/meta/recipes-graphics/cairo/cairo/cairo-get_bitmap_surface-bsc1036789-CVE-2017-7475.diff
index 79ef16dfb9..c6c5ba09c6 100644
---
a/meta/recipes-graphics/cairo/cairo/cairo-get_bitmap_surface-bsc1036789-CVE-2017-7475.diff
+++
b/meta/recipes-graphics/cairo/cairo/cairo-get_bitmap_surface-bsc1036789-CVE-2017-7475.diff
@@ -1,4 +1,4 @@
-From 054ad9b65e074899c82e75cfc6623cfe29ab1fea Mon Sep 17 00:00:00 2001
+From e21fd76dc2572061d078a41fd5faa76592483e88 Mon Sep 17 00:00:00 2001
From: Fan Xin <[email protected]>
Date: Tue, 6 Jun 2017 15:57:52 +0900
Subject: [PATCH] Cairo: Fix Denial-of-Service Attack due to Logical Problem in
@@ -15,10 +15,10 @@ Signed-off-by: Fan Xin <[email protected]>
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/src/cairo-ft-font.c b/src/cairo-ft-font.c
-index b5d08ee..5e20ae1 100644
+index b9bdf81..fa9c05d 100644
--- a/src/cairo-ft-font.c
+++ b/src/cairo-ft-font.c
-@@ -1220,7 +1220,7 @@ _get_bitmap_surface (FT_Bitmap *bitmap,
+@@ -1231,7 +1231,7 @@ _get_bitmap_surface (FT_Bitmap *bitmap,
width = bitmap->width;
height = bitmap->rows;
diff --git a/meta/recipes-graphics/cairo/cairo_1.18.4.bb
b/meta/recipes-graphics/cairo/cairo_1.18.6.bb
similarity index 97%
rename from meta/recipes-graphics/cairo/cairo_1.18.4.bb
rename to meta/recipes-graphics/cairo/cairo_1.18.6.bb
index ae448101d9..138ad7492b 100644
--- a/meta/recipes-graphics/cairo/cairo_1.18.4.bb
+++ b/meta/recipes-graphics/cairo/cairo_1.18.6.bb
@@ -31,7 +31,7 @@ SRC_URI =
"http://cairographics.org/releases/cairo-${PV}.tar.xz \
file://cairo-get_bitmap_surface-bsc1036789-CVE-2017-7475.diff \
"
-SRC_URI[sha256sum] =
"445ed8208a6e4823de1226a74ca319d3600e83f6369f99b14265006599c32ccb"
+SRC_URI[sha256sum] =
"1c767308174337a74694da0f3ec069c271452163a1ef4540964c50c301f157d4"
inherit meson pkgconfig upstream-version-is-even gtk-doc multilib_script
--
2.47.1
packages/x86-64-v3-poky-linux/cairo/cairo-dbg: FILELIST: removed "/usr/lib/.debug/libcairo-gobject.so.2.11804.4 /usr/lib/.debug/libcairo.so.2.11804.4 /usr/lib/.debug/libcairo-script-interpreter.so.2.11804.4", added "/usr/lib/.debug/libcairo-script-interpreter.so.2.11806.6 /usr/lib/.debug/libcairo.so.2.11806.6 /usr/lib/.debug/libcairo-gobject.so.2.11806.6" packages/x86-64-v3-poky-linux/cairo/cairo-dbg: PV changed from "1.18.4" to "1.18.6" packages/x86-64-v3-poky-linux/cairo/cairo-dbg: PKGSIZE changed from 7099280 to 7097584 (-0%) packages/x86-64-v3-poky-linux/cairo/cairo-dbg: PKGV changed from 1.18.4 [default] to 1.18.6 [default] packages/x86-64-v3-poky-linux/cairo/cairo-dev: PV changed from "1.18.4" to "1.18.6" packages/x86-64-v3-poky-linux/cairo/cairo-dev: PKGSIZE changed from 175410 to 175391 (-0%) packages/x86-64-v3-poky-linux/cairo/cairo-dev: PKGV changed from 1.18.4 [default] to 1.18.6 [default] packages/x86-64-v3-poky-linux/cairo/cairo-doc: PV changed from "1.18.4" to "1.18.6" packages/x86-64-v3-poky-linux/cairo/cairo-doc: PKGV changed from 1.18.4 [default] to 1.18.6 [default] packages/x86-64-v3-poky-linux/cairo/cairo-gobject: FILELIST: removed "/usr/lib/libcairo-gobject.so.2.11804.4", added "/usr/lib/libcairo-gobject.so.2.11806.6" packages/x86-64-v3-poky-linux/cairo/cairo-gobject: PV changed from "1.18.4" to "1.18.6" packages/x86-64-v3-poky-linux/cairo/cairo-gobject: PKGV changed from 1.18.4 [default] to 1.18.6 [default] packages/x86-64-v3-poky-linux/cairo/cairo-locale: PV changed from "1.18.4" to "1.18.6" packages/x86-64-v3-poky-linux/cairo/cairo-locale: PKGV changed from 1.18.4 [default] to 1.18.6 [default] packages/x86-64-v3-poky-linux/cairo/cairo-perf-utils: PV changed from "1.18.4" to "1.18.6" packages/x86-64-v3-poky-linux/cairo/cairo-perf-utils: PKGSIZE changed from 158472 to 162568 (+3%) packages/x86-64-v3-poky-linux/cairo/cairo-perf-utils: PKGV changed from 1.18.4 [default] to 1.18.6 [default] packages/x86-64-v3-poky-linux/cairo/cairo-script-interpreter: FILELIST: removed "/usr/lib/libcairo-script-interpreter.so.2.11804.4", added "/usr/lib/libcairo-script-interpreter.so.2.11806.6" packages/x86-64-v3-poky-linux/cairo/cairo-script-interpreter: PV changed from "1.18.4" to "1.18.6" packages/x86-64-v3-poky-linux/cairo/cairo-script-interpreter: PKGV changed from 1.18.4 [default] to 1.18.6 [default] packages/x86-64-v3-poky-linux/cairo/cairo-src: FILELIST: directory renamed /usr/src/debug/cairo/1.18.4/util/cairo-script -> /usr/src/debug/cairo/1.18.6/util/cairo-script, directory renamed /usr/src/debug/cairo/1.18.4/util/cairo-fdr -> /usr/src/debug/cairo/1.18.6/util/cairo-fdr, directory renamed /usr/src/debug/cairo/1.18.4/util/cairo-gobject -> /usr/src/debug/cairo/1.18.6/util/cairo-gobject, directory renamed /usr/src/debug/cairo/1.18.4/src -> /usr/src/debug/cairo/1.18.6/src, directory renamed /usr/src/debug/cairo/1.18.4/util/cairo-trace -> /usr/src/debug/cairo/1.18.6/util/cairo-trace packages/x86-64-v3-poky-linux/cairo/cairo-src: PV changed from "1.18.4" to "1.18.6" packages/x86-64-v3-poky-linux/cairo/cairo-src: PKGSIZE changed from 5912961 to 5918099 (+0%) packages/x86-64-v3-poky-linux/cairo/cairo-src: PKGV changed from 1.18.4 [default] to 1.18.6 [default] packages/x86-64-v3-poky-linux/cairo/cairo-staticdev: PV changed from "1.18.4" to "1.18.6" packages/x86-64-v3-poky-linux/cairo/cairo-staticdev: PKGV changed from 1.18.4 [default] to 1.18.6 [default] packages/x86-64-v3-poky-linux/cairo/cairo: FILELIST: removed "/usr/lib/libcairo.so.2.11804.4", added "/usr/lib/libcairo.so.2.11806.6" packages/x86-64-v3-poky-linux/cairo/cairo: PV changed from "1.18.4" to "1.18.6" packages/x86-64-v3-poky-linux/cairo/cairo: PKGV changed from 1.18.4 [default] to 1.18.6 [default] packages/x86-64-v3-poky-linux/cairo: PV changed from "1.18.4" to "1.18.6" packages/x86-64-v3-poky-linux/cairo: PKGV changed from 1.18.4 [default] to 1.18.6 [default] packages/x86-64-v3-poky-linux/cairo: SRC_URI changed from "http://cairographics.org/releases/cairo-1.18.4.tar.xz file://cairo-get_bitmap_surface-bsc1036789-CVE-2017-7475.diff" to "http://cairographics.org/releases/cairo-1.18.6.tar.xz file://cairo-get_bitmap_surface-bsc1036789-CVE-2017-7475.diff" Changes to packages/x86-64-v3-poky-linux/cairo (sysroot): /usr/lib/libcairo-gobject.so.2 changed symlink target from libcairo-gobject.so.2.11804.4 to libcairo-gobject.so.2.11806.6 /usr/lib/libcairo-script-interpreter.so.2 changed symlink target from libcairo-script-interpreter.so.2.11804.4 to libcairo-script-interpreter.so.2.11806.6 /usr/lib/libcairo.so.2 changed symlink target from libcairo.so.2.11804.4 to libcairo.so.2.11806.6 /usr/lib/libcairo-gobject.so.2.11804.4 moved to /usr/lib/libcairo-gobject.so.2.11806.6 /usr/lib/libcairo-script-interpreter.so.2.11804.4 moved to /usr/lib/libcairo-script-interpreter.so.2.11806.6 /usr/lib/libcairo.so.2.11804.4 moved to /usr/lib/libcairo.so.2.11806.6
0001-cairo-upgrade-1.18.4-1.18.6.patch
Description: Binary data
packages/x86-64-v3-poky-linux/cairo/cairo-gobject: FILELIST: removed "/usr/lib/libcairo-gobject.so.2.11804.4", added "/usr/lib/libcairo-gobject.so.2.11806.6" packages/x86-64-v3-poky-linux/cairo/cairo-script-interpreter: FILELIST: removed "/usr/lib/libcairo-script-interpreter.so.2.11804.4", added "/usr/lib/libcairo-script-interpreter.so.2.11806.6" packages/x86-64-v3-poky-linux/cairo/cairo: FILELIST: removed "/usr/lib/libcairo.so.2.11804.4", added "/usr/lib/libcairo.so.2.11806.6" Changes to packages/x86-64-v3-poky-linux/cairo (sysroot): /usr/lib/libcairo-gobject.so.2 changed symlink target from libcairo-gobject.so.2.11804.4 to libcairo-gobject.so.2.11806.6 /usr/lib/libcairo-script-interpreter.so.2 changed symlink target from libcairo-script-interpreter.so.2.11804.4 to libcairo-script-interpreter.so.2.11806.6 /usr/lib/libcairo.so.2 changed symlink target from libcairo.so.2.11804.4 to libcairo.so.2.11806.6 /usr/lib/libcairo-gobject.so.2.11804.4 moved to /usr/lib/libcairo-gobject.so.2.11806.6 /usr/lib/libcairo-script-interpreter.so.2.11804.4 moved to /usr/lib/libcairo-script-interpreter.so.2.11806.6 /usr/lib/libcairo.so.2.11804.4 moved to /usr/lib/libcairo.so.2.11806.6
Changelog for cairo: 1.18.4 -> 1.18.6 Source: NEWS Release 1.18.6 (2026-09-20 Emmanuele Bassi <[email protected]>) ============================================================== A new stable release. The XCB surface triggered an UAF warning when building with GCC. [#898] The clipping code was accessing various fields in a guard value, and causing a crash inside Inkscape. See: https://gitlab.com/inkscape/inkscape/-/issues/5631 Multiple fixes for the Windows backends, including improvements in the thread safety of the DirectWrite code. [#897] The DirectWrite backend now supports COLRv1 fonts. [#903] Multiple fixes for building with MSVC and ClangCL. A leak in the PDF surfaces has been fixed. [!644] Various gaps between abutting rectangles when drawing with ANTIALIAS_NONE were removed by using absolute coordinates and avoiding rounding errors. [#976] Remove an overflow when computing the buffer size in the XRender code. [#950]
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#246279): https://lists.openembedded.org/g/openembedded-core/message/246279 Mute This Topic: https://lists.openembedded.org/mt/121353228/21656 Group Owner: [email protected] Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
