{"id":2182650,"url":"http://patchwork.ozlabs.org/api/patches/2182650/?format=json","web_url":"http://patchwork.ozlabs.org/project/buildroot/patch/20260112080419.2516889-7-bernd@kuhls.net/","project":{"id":27,"url":"http://patchwork.ozlabs.org/api/projects/27/?format=json","name":"Buildroot development","link_name":"buildroot","list_id":"buildroot.buildroot.org","list_email":"buildroot@buildroot.org","web_url":"","scm_url":"","webscm_url":"","list_archive_url":"","list_archive_url_format":"","commit_url_format":""},"msgid":"<20260112080419.2516889-7-bernd@kuhls.net>","list_archive_url":null,"date":"2026-01-12T08:02:42","name":"[007/104] package/x11r7/xapp_xkbcomp: security bump version to 1.5.0","commit_ref":null,"pull_url":null,"state":"superseded","archived":false,"hash":"4b8751fa373731d2635fc78619dac9fa75f40a87","submitter":{"id":86624,"url":"http://patchwork.ozlabs.org/api/people/86624/?format=json","name":"Bernd Kuhls","email":"bernd@kuhls.net"},"delegate":null,"mbox":"http://patchwork.ozlabs.org/project/buildroot/patch/20260112080419.2516889-7-bernd@kuhls.net/mbox/","series":[{"id":487988,"url":"http://patchwork.ozlabs.org/api/series/487988/?format=json","web_url":"http://patchwork.ozlabs.org/project/buildroot/list/?series=487988","date":"2026-01-12T08:02:38","name":"[001/104] package/x11r7/xcb-proto: bump version to 1.17.0","version":1,"mbox":"http://patchwork.ozlabs.org/series/487988/mbox/"}],"comments":"http://patchwork.ozlabs.org/api/patches/2182650/comments/","check":"pending","checks":"http://patchwork.ozlabs.org/api/patches/2182650/checks/","tags":{},"related":[],"headers":{"Return-Path":"","X-Original-To":["incoming-buildroot@patchwork.ozlabs.org","buildroot@buildroot.org"],"Delivered-To":["patchwork-incoming-buildroot@legolas.ozlabs.org","buildroot@buildroot.org"],"Authentication-Results":["legolas.ozlabs.org;\n\tdkim=pass (2048-bit key;\n unprotected) header.d=buildroot.org header.i=@buildroot.org\n header.a=rsa-sha256 header.s=default header.b=OvNNxvFZ;\n\tdkim-atps=neutral","legolas.ozlabs.org;\n spf=pass (sender SPF authorized) smtp.mailfrom=buildroot.org\n (client-ip=140.211.166.138; helo=smtp1.osuosl.org;\n envelope-from=buildroot-bounces@buildroot.org; receiver=patchwork.ozlabs.org)"],"Received":["from smtp1.osuosl.org (smtp1.osuosl.org [140.211.166.138])\n\t(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)\n\t key-exchange x25519 server-signature ECDSA (secp384r1) server-digest SHA384)\n\t(No client certificate requested)\n\tby legolas.ozlabs.org (Postfix) with ESMTPS id 4dqQDS19tmz1xpl\n\tfor ;\n Mon, 12 Jan 2026 19:15:36 +1100 (AEDT)","from localhost (localhost [127.0.0.1])\n\tby smtp1.osuosl.org (Postfix) with ESMTP id A096984461;\n\tMon, 12 Jan 2026 08:15:34 +0000 (UTC)","from smtp1.osuosl.org ([127.0.0.1])\n by localhost (smtp1.osuosl.org [127.0.0.1]) (amavis, port 10024) with ESMTP\n id DdLEDZ3R2cb8; Mon, 12 Jan 2026 08:15:33 +0000 (UTC)","from lists1.osuosl.org (lists1.osuosl.org [140.211.166.142])\n\tby smtp1.osuosl.org (Postfix) with ESMTP id AB742844A1;\n\tMon, 12 Jan 2026 08:15:33 +0000 (UTC)","from smtp2.osuosl.org (smtp2.osuosl.org [IPv6:2605:bc80:3010::133])\n by lists1.osuosl.org (Postfix) with ESMTP id E417B18D\n for ; Mon, 12 Jan 2026 08:15:31 +0000 (UTC)","from localhost (localhost [127.0.0.1])\n by smtp2.osuosl.org (Postfix) with ESMTP id E1CCD4031B\n for ; Mon, 12 Jan 2026 08:15:31 +0000 (UTC)","from smtp2.osuosl.org ([127.0.0.1])\n by localhost (smtp2.osuosl.org [127.0.0.1]) (amavis, port 10024) with ESMTP\n id UsV3h-wD5J6X for ;\n Mon, 12 Jan 2026 08:15:31 +0000 (UTC)","from dd20012.kasserver.com (dd20012.kasserver.com [85.13.140.57])\n by smtp2.osuosl.org (Postfix) with ESMTPS id D918C4013F\n for ; Mon, 12 Jan 2026 08:15:30 +0000 (UTC)","from fli4l.lan.fli4l (p4fd6c81c.dip0.t-ipconnect.de [79.214.200.28])\n by dd20012.kasserver.com (Postfix) with ESMTPSA id 385B6A4C3CC9\n for ; Mon, 12 Jan 2026 09:05:35 +0100 (CET)","from bruckner.lan.fli4l ([192.168.1.1]:33104)\n by fli4l.lan.fli4l with esmtp (Exim 4.99.1)\n (envelope-from ) id 1vfCuR-000000003M6-3XlS\n for buildroot@buildroot.org; Mon, 12 Jan 2026 08:04:19 +0000"],"X-Virus-Scanned":["amavis at osuosl.org","amavis at osuosl.org"],"X-Comment":"SPF check N/A for local connections - client-ip=140.211.166.142;\n helo=lists1.osuosl.org; envelope-from=buildroot-bounces@buildroot.org;\n receiver= ","DKIM-Filter":["OpenDKIM Filter v2.11.0 smtp1.osuosl.org AB742844A1","OpenDKIM Filter v2.11.0 smtp2.osuosl.org D918C4013F"],"DKIM-Signature":"v=1; a=rsa-sha256; c=relaxed/relaxed; d=buildroot.org;\n\ts=default; t=1768205733;\n\tbh=crBW5qHNClYuPSC6Gvsjgkc/2M5spyHvcvwCDVdKaeA=;\n\th=From:To:Date:In-Reply-To:References:Subject:List-Id:\n\t List-Unsubscribe:List-Archive:List-Post:List-Help:List-Subscribe:\n\t From;\n\tb=OvNNxvFZIUyouQ3KtgHUBjqtAY/akZdQ/oPhRdrR4fJvgWGNcQD5q4D010FZSSjWH\n\t VgIKJZuyhbfAqEyM0Q3KRTxZfdaNVxSkhzXYDALBMxlQSG2OcfIB+xBmBnTB+pebjd\n\t CmJFgfKQ5gwwHpTKZAJ4H93yXwow6MLGIL7lTGKAJhKbmMBhEMVTMEReUZKOyry5Yj\n\t r4w8VFzuPmcs5sYyVN7B8IgcA3l9Dq5+rSAxoXtbJG4LcgXJ9KOyWad/P9CoP0MBKo\n\t GM869xIEoh76ERoOX6nmJnqTShB9+SslVf6XD4K7jEYLC2a1pyqwfisjPt2aH95IZG\n\t 8HaHQm8B/jKWQ==","Received-SPF":"Pass (mailfrom) identity=mailfrom; client-ip=85.13.140.57;\n helo=dd20012.kasserver.com; envelope-from=bernd@kuhls.net;\n receiver=","DMARC-Filter":"OpenDMARC Filter v1.4.2 smtp2.osuosl.org D918C4013F","From":"Bernd Kuhls ","To":"buildroot@buildroot.org","Date":"Mon, 12 Jan 2026 09:02:42 +0100","Message-ID":"<20260112080419.2516889-7-bernd@kuhls.net>","X-Mailer":"git-send-email 2.47.3","In-Reply-To":"<20260112080419.2516889-1-bernd@kuhls.net>","References":"<20260112080419.2516889-1-bernd@kuhls.net>","MIME-Version":"1.0","X-Spamd-Bar":"+","X-Mailman-Original-DKIM-Signature":"v=1; a=rsa-sha256; c=relaxed/relaxed;\n d=kuhls.net;\n s=kas202511301023; t=1768205135;\n bh=dQcP/6te4PZf3YA09I1kuf+hymglemWd8If/3/1Qnlk=;\n h=From:To:Subject:Date:In-Reply-To:From;\n b=OQFiOu1ShTMxi4boDmLrf6JvTBNivMtdowDPxrfFyoyPfrFwj5rdYBsRuDd80xEh0\n uprp7NM+H9J6H/e0vvulPAuDD66jTT0HwPx65xp/k26yeMpCoO8SDzR8MZsplBxnmO\n nLTRSwwirdaLJoTVAupEAj8UiE/fbxhTveIB4dJ6q1Wdb4hotakf906YRDua8ZZJzC\n RE+OVkvQH6Gn/ZCm7lXLx9hS1U8VZU+oHnxLkNIuZGQQDMDNRu7evh//AhGrImAeJE\n UF2M/qUC4fKyDh8VpaNhhHbAqAlmkkSVSjkzKp1+yFfJ8wDvcx0Uk4QmGqtQpEMAL8\n GrpK2Jh8JNPgw==","X-Mailman-Original-Authentication-Results":["smtp2.osuosl.org;\n dmarc=pass (p=none dis=none)\n header.from=kuhls.net","smtp2.osuosl.org;\n dkim=pass (2048-bit key) header.d=kuhls.net header.i=@kuhls.net\n header.a=rsa-sha256 header.s=kas202511301023 header.b=OQFiOu1S"],"Subject":"[Buildroot] [PATCH 007/104] package/x11r7/xapp_xkbcomp: security\n bump version to 1.5.0","X-BeenThere":"buildroot@buildroot.org","X-Mailman-Version":"2.1.30","Precedence":"list","List-Id":"Discussion and development of buildroot ","List-Unsubscribe":",\n ","List-Archive":"","List-Post":"","List-Help":"","List-Subscribe":",\n ","Content-Type":"text/plain; charset=\"us-ascii\"","Content-Transfer-Encoding":"7bit","Errors-To":"buildroot-bounces@buildroot.org","Sender":"\"buildroot\" "},"content":"https://lists.x.org/archives/xorg-announce/2025-December/003645.html\nhttps://lists.x.org/archives/xorg-announce/2024-February/003450.html\n\nFixes CVE-2018-15863, CVE-2018-15861, CVE-2018-15859 & CVE-2018-15853:\nhttps://lists.x.org/archives/xorg-announce/2025-December/003644.html\n\nSwitched _SITE to URL mentioned in latest release notes.\n\nSigned-off-by: Bernd Kuhls \n---\n package/x11r7/xapp_xkbcomp/xapp_xkbcomp.hash | 6 +++---\n package/x11r7/xapp_xkbcomp/xapp_xkbcomp.mk | 4 ++--\n 2 files changed, 5 insertions(+), 5 deletions(-)","diff":"diff --git a/package/x11r7/xapp_xkbcomp/xapp_xkbcomp.hash b/package/x11r7/xapp_xkbcomp/xapp_xkbcomp.hash\nindex b626e50236..dfebd08e07 100644\n--- a/package/x11r7/xapp_xkbcomp/xapp_xkbcomp.hash\n+++ b/package/x11r7/xapp_xkbcomp/xapp_xkbcomp.hash\n@@ -1,5 +1,5 @@\n-# From https://lists.x.org/archives/xorg-announce/2022-December/003283.html\n-sha256 fa50d611ef41e034487af7bd8d8c718df53dd18002f591cca16b0384afc58e98 xkbcomp-1.4.6.tar.xz\n-sha512 90e69dd1c78c28f77a5acc7821b43afec1b9ac4895bc6f3462b4902baaadc26f3869da69e3bd023b4bc74adb5f1be0c43ca24b3dab37ac9a479c5622684baa81 xkbcomp-1.4.6.tar.xz\n+# From https://lists.x.org/archives/xorg-announce/2025-December/003645.html\n+sha256 2ac31f26600776db6d9cd79b3fcd272263faebac7eb85fb2f33c7141b8486060 xkbcomp-1.5.0.tar.xz\n+sha512 d8ef4906261251e2600b3650660fbe88ed99a44694f1e59b433e0811f1ab5234c4f2f0b3647fa5372fb0f46b56eac60c0219a762bf1af0ab06226b63e4a6b081 xkbcomp-1.5.0.tar.xz\n # Locally computed\n sha256 6b833fdc05906ce57f016dc791db86830d49ee4da2861ce45806c50b3f4dda9e COPYING\ndiff --git a/package/x11r7/xapp_xkbcomp/xapp_xkbcomp.mk b/package/x11r7/xapp_xkbcomp/xapp_xkbcomp.mk\nindex 61922c7cc9..97e131f353 100644\n--- a/package/x11r7/xapp_xkbcomp/xapp_xkbcomp.mk\n+++ b/package/x11r7/xapp_xkbcomp/xapp_xkbcomp.mk\n@@ -4,9 +4,9 @@\n #\n ################################################################################\n \n-XAPP_XKBCOMP_VERSION = 1.4.6\n+XAPP_XKBCOMP_VERSION = 1.5.0\n XAPP_XKBCOMP_SOURCE = xkbcomp-$(XAPP_XKBCOMP_VERSION).tar.xz\n-XAPP_XKBCOMP_SITE = http://xorg.freedesktop.org/releases/individual/app\n+XAPP_XKBCOMP_SITE = https://xorg.freedesktop.org/archive/individual/app\n XAPP_XKBCOMP_LICENSE = MIT\n XAPP_XKBCOMP_LICENSE_FILES = COPYING\n XAPP_XKBCOMP_DEPENDENCIES = xlib_libX11 xlib_libxkbfile\n","prefixes":["007/104"]}