summaryrefslogtreecommitdiff
path: root/download.lst
AgeCommit message (Collapse)Author
2024-06-24upgrade to curl 8.6.0Taichi Haradaguchi
via... curl: upgrade to release 8.1.2 Fixes CVE-2023-28321, CVE-2023-28322, and 2 more CVEs that probably don't affect LibreOffice. Change-Id: If8720ba3647216063bffc8678aa64dad9a317128 Reviewed-on: https://gerrit.libreoffice.org/c/core/+/152809 Tested-by: Jenkins Reviewed-by: Taichi Haradaguchi <20001722@ymail.ne.jp> Reviewed-by: Michael Stahl <michael.stahl@allotropia.de> (cherry picked from commit dc19ef0d42e89edffcc21795194eb1eeb5957d0f) Reviewed-on: https://gerrit.libreoffice.org/c/core/+/152888 Reviewed-by: Xisco Fauli <xiscofauli@libreoffice.org> (cherry picked from commit cbdb9359bc77ebe7f79340cf0322fb2e4d78b125) Update to curl-8.2.1.tar.xz ...obtained from <https://curl.se/download/curl-8.2.1.tar.xz> Change-Id: I7260f79e2f72501869ff58c77f0d9dfa3ebdece1 Reviewed-on: https://gerrit.libreoffice.org/c/core/+/155116 Tested-by: Jenkins Reviewed-by: Stephan Bergmann <sbergman@redhat.com> (cherry picked from commit 85c07891ad9424661d8e1adb8e93364e3964ce34) Reviewed-on: https://gerrit.libreoffice.org/c/core/+/155133 Reviewed-by: Xisco Fauli <xiscofauli@libreoffice.org> (cherry picked from commit 52d9d30371247f7d613dd9d1fd5f0c4fdf94682a) remove configure arguments to curl that no longer exist Change-Id: Ic6995dfcc11c872092c5e1a53c84dfed5d254eea Reviewed-on: https://gerrit.libreoffice.org/c/core/+/141955 Tested-by: Jenkins Reviewed-by: Caolán McNamara <caolanm@redhat.com> (cherry picked from commit 6f00aef4fe3242a1ff3a7f9fa31e8a6663162ca3) ofz: build-failure use with-tls result for curl otherwise with (default due to --disable-dynamic-loading) --disable-nss we get: configure: error: select TLS backend(s) or disable TLS with --without-ssl. Select from these: --with-amissl --with-bearssl --with-gnutls --with-mbedtls --with-nss --with-openssl (also works for BoringSSL and libressl) --with-rustls --with-schannel --with-secure-transport --with-wolfssl alternative we could --without-ssl entirely without nss Change-Id: Iea25b918c135664dffacfb74089d7c7c0818695e Reviewed-on: https://gerrit.libreoffice.org/c/core/+/141956 Tested-by: Jenkins Reviewed-by: Caolán McNamara <caolanm@redhat.com> (cherry picked from commit 2c0997900d35e54466d479c9c5437d447ba9b165) curl: upgrade to release 8.3.0 Fixes CVE-2023-38039 * NSS support was removed in this release, so NSS related patches are not necessary now. * add configure options for curl. Change-Id: I71e09bac3c69ce4b13deee770a32225f39f79c46 Reviewed-on: https://gerrit.libreoffice.org/c/core/+/156917 Tested-by: Jenkins Reviewed-by: Taichi Haradaguchi <20001722@ymail.ne.jp> (cherry picked from commit c2930ebff82c4f7ffe8377ab82627131f8544226) Reviewed-on: https://gerrit.libreoffice.org/c/core/+/157311 Reviewed-by: Michael Stahl <michael.stahl@allotropia.de> (cherry picked from commit 609d4a6b8d66d02a36c57de99efd36a4b1c2b789) Reviewed-on: https://gerrit.libreoffice.org/c/core/+/157313 Reviewed-by: Caolán McNamara <caolan.mcnamara@collabora.com> (cherry picked from commit 5d9a942721ea683b3684e71c470d338599a80eb1) Reviewed-on: https://gerrit.libreoffice.org/c/core/+/157828 Tested-by: Jenkins CollaboraOffice <jenkinscollaboraoffice@gmail.com> Reviewed-by: Andras Timar <andras.timar@collabora.com> (cherry picked from commit 5a113f2376344062ff1a71debecf7a7b112c8e25) curl: upgrade to release 8.4.0 Fixes CVE-2023-38546 and CVE-2023-38545 Minor amount of bugfixes, nothing that immediately affects us. New feature: IPFS protocols via HTTP gateway now supported, with the right URL. Change-Id: I24af4d17b570685081aa031c50a87bb8dcf1833d Reviewed-on: https://gerrit.libreoffice.org/c/core/+/157829 Tested-by: Jenkins CollaboraOffice <jenkinscollaboraoffice@gmail.com> Reviewed-by: Andras Timar <andras.timar@collabora.com> (cherry picked from commit d97184677471565f3987a5d0fe1ef96503c0b099) curl: upgrade to release 8.5.0 Fixes CVE-2023-46218 (cookies apparently used by libcmis) Change-Id: I6f903ab63589d3318c0cc7d47f5183f7ae55f52b Reviewed-on: https://gerrit.libreoffice.org/c/core/+/160592 Tested-by: Jenkins Reviewed-by: Michael Stahl <michael.stahl@allotropia.de> (cherry picked from commit 0a2df11fb563177951db1e8890d67cee8d44246a) Reviewed-on: https://gerrit.libreoffice.org/c/core/+/160577 Reviewed-by: Xisco Fauli <xiscofauli@libreoffice.org> (cherry picked from commit 04eddbaa4530d75c4984125dab7bb3f58113a3ff) curl: upgrade to release 8.6.0 Fixes CVE-2024-0853 Change-Id: Iabba0748f7c48ee03a8223aef9ca81bf379738e9 Reviewed-on: https://gerrit.libreoffice.org/c/core/+/162793 Tested-by: Jenkins Reviewed-by: Michael Stahl <michael.stahl@allotropia.de> (cherry picked from commit 9667ea7e274c4e29cf7c35d9e124a8fbcb2af3da) (cherry picked from commit a990e726efb2bcb4cb8de9aaade0f35e429ea330) Reviewed-on: https://gerrit.libreoffice.org/c/core/+/169120 Tested-by: Jenkins CollaboraOffice <jenkinscollaboraoffice@gmail.com> Reviewed-by: Andras Timar <andras.timar@collabora.com>
2024-03-27python3: upgrade to release 3.8.19Michael Stahl
Fixes CVE-2023-6597 and also CVE-2024-0450 Change-Id: Iebca2608e16a966356736201c63f1be5185430d4 Reviewed-on: https://gerrit.libreoffice.org/c/core/+/165053 Tested-by: Jenkins Reviewed-by: Michael Stahl <michael.stahl@allotropia.de> (cherry picked from commit 0633e4b4205334dd65ec64d7f3e306ee125e31be) Reviewed-on: https://gerrit.libreoffice.org/c/core/+/165009 Reviewed-by: Xisco Fauli <xiscofauli@libreoffice.org>
2024-03-26Expat: upgrade to release 2.6.2Taichi Haradaguchi
Fixes CVE-2024-28757 Change-Id: Id85044fa9d8eda922425e580e9d6979f6563e98a Reviewed-on: https://gerrit.libreoffice.org/c/core/+/165129 Tested-by: Taichi Haradaguchi <20001722@ymail.ne.jp> Reviewed-by: Taichi Haradaguchi <20001722@ymail.ne.jp> (cherry picked from commit 370ca73a45b291e172918b4c8fcbc37ccaa434cf) Reviewed-on: https://gerrit.libreoffice.org/c/core/+/165177 Tested-by: Jenkins Reviewed-by: Xisco Fauli <xiscofauli@libreoffice.org>
2024-02-16nss: upgrade to release 3.98Michael Stahl
Fixes CVE-2023-5388 Also update README, and remove obsolete documentation of Debian's mangled SONAME; relevant Debian changelog: nss (2:3.13.4-2) unstable; urgency=low * debian/control, debian/libnss3*, debian/rules, mozilla/security/coreconf/*, mozilla/security/nss/lib/*/manifest.mn: Move to unversioned library. ABI compatibility is ensured upstream, and the SO version, if it needed a change at any time, would be a change in the library name. There is no reason to keep making compatibility more difficult with other distros and upstream binary releases. While previous versions were one-way compatible (binaries built against other distros or upstream nspr could work on Debian), this approach works both ways. -- Mike Hommey <glandium@debian.org> Thu, 17 May 2012 09:45:36 +0200 Change-Id: Ifc1eae68827fa88ae001a3903c8555af67b488ac Reviewed-on: https://gerrit.libreoffice.org/c/core/+/163486 Tested-by: Jenkins CollaboraOffice <jenkinscollaboraoffice@gmail.com> Reviewed-by: Andras Timar <andras.timar@collabora.com>
2024-02-16libxml2: upgrade to release 2.10.4Michael Stahl
Fixes CVE-2023-29469 and CVE-2023-28484. Also: SAX2: Ignore namespaces in HTML documents which is probably the reason why one test fails, so switch it to parsing XML: HTML parser error : Tag reqif-xhtml:div invalid <reqif-xhtml:div> HTML parser error : Tag reqif-xhtml:table invalid <reqif-xhtml:table cellpadding="2" cellspacing="2"> ... reqif-table.xhtml: C:/cygwin/home/tdf/jenkins/workspace/gerrit_windows/test/source/xmltesttools.cxx:195:testReqIfTable::Import_Export equality assertion failed - Expected: 1 - Actual : 0 - In <file:///C:/cygwin/home/tdf/jenkins/workspace/gerrit_windows/tempdir/lu134607bxu8q.tmp>, XPath '/html/body/div/table/tr/th' number of nodes is incorrect Change-Id: Icc161b39515c996193366bc777a67eca79e4e892 Reviewed-on: https://gerrit.libreoffice.org/c/core/+/150544 Tested-by: Jenkins Reviewed-by: Michael Stahl <michael.stahl@allotropia.de> (cherry picked from commit a65f34a536bb37b890c6ee7e506fea63b9dcaac1) Reviewed-on: https://gerrit.libreoffice.org/c/core/+/150615 Reviewed-by: Caolán McNamara <caolanm@redhat.com> Reviewed-on: https://gerrit.libreoffice.org/c/core/+/163465 Tested-by: Jenkins CollaboraOffice <jenkinscollaboraoffice@gmail.com> Reviewed-by: Andras Timar <andras.timar@collabora.com>
2024-02-16Expat: upgrade to release 2.6.0Taichi Haradaguchi
Fixes CVE-2023-52425 and CVE-2023-52426. Change-Id: Id135bbaea893a83129bdbee44948c09322a64c07 Reviewed-on: https://gerrit.libreoffice.org/c/core/+/163146 Tested-by: Jenkins Reviewed-by: Taichi Haradaguchi <20001722@ymail.ne.jp> (cherry picked from commit b7e4078033b064bfc3847db0916a4df389117817) Reviewed-on: https://gerrit.libreoffice.org/c/core/+/163463 Tested-by: Jenkins CollaboraOffice <jenkinscollaboraoffice@gmail.com> Reviewed-by: Andras Timar <andras.timar@collabora.com>
2024-02-16nss: upgrade to release 3.97Andras Timar
Change-Id: If0eaf6a93f57239d81491c635922745bf3f38fd5 Reviewed-on: https://gerrit.libreoffice.org/c/core/+/163464 Tested-by: Jenkins CollaboraOffice <jenkinscollaboraoffice@gmail.com> Reviewed-by: Caolán McNamara <caolan.mcnamara@collabora.com>
2023-09-14tdf#157231 CVE-2023-4863 upgrade to libwebp-1.3.2.tar.gzCaolán McNamara
Change-Id: Ib60466a59069b59fa884654167f33ccc58e59330 Reviewed-on: https://gerrit.libreoffice.org/c/core/+/156907 Tested-by: Jenkins CollaboraOffice <jenkinscollaboraoffice@gmail.com> Reviewed-by: Miklos Vajna <vmiklos@collabora.com>
2023-07-10Update pdfium to 5778Miklos Vajna
- external/pdfium/abseil-trivial.patch is no longer needed, upstream does what we did previously - external/pdfium/build.patch.1: re-generate with 'patch -p1' + 'git diff' - external/pdfium/include.patch is no longer needed, upstream does what we did previously Change-Id: I39a6f721e436aa53914bbf43b78ac7d86e5eac59 Reviewed-on: https://gerrit.libreoffice.org/c/core/+/152244 Tested-by: Jenkins Reviewed-by: Miklos Vajna <vmiklos@collabora.com> (cherry picked from commit dc69e7c52f12f57197f26b56c968139186d4ed5b) Reviewed-on: https://gerrit.libreoffice.org/c/core/+/153653 Reviewed-by: Michael Stahl <michael.stahl@allotropia.de> Reviewed-on: https://gerrit.libreoffice.org/c/core/+/154143 Tested-by: Jenkins CollaboraOffice <jenkinscollaboraoffice@gmail.com>
2023-07-10Update pdfium to 5636Miklos Vajna
Some changes in the bundled libtiff, but it seems that would be for XFA which we disable, so it doesn't affect us. Change-Id: Ibadeecf20daec342fbfef6d1e89bd17f5f0095e9 Reviewed-on: https://gerrit.libreoffice.org/c/core/+/148652 Tested-by: Jenkins Reviewed-by: Miklos Vajna <vmiklos@collabora.com> (cherry picked from commit 47afcad0d599009c38b4597c27558ec2af58b7f8) Reviewed-on: https://gerrit.libreoffice.org/c/core/+/153651 Reviewed-by: Michael Stahl <michael.stahl@allotropia.de> Reviewed-on: https://gerrit.libreoffice.org/c/core/+/154142 Tested-by: Jenkins CollaboraOffice <jenkinscollaboraoffice@gmail.com>
2023-07-10Update pdfium to 5522Miklos Vajna
The internal libpng 1.6 is now dropped, but that doesn't really affect us. Change-Id: I777c024c76c17689c20bbe6453467ba5fb22baba Reviewed-on: https://gerrit.libreoffice.org/c/core/+/145417 Tested-by: Jenkins Reviewed-by: Miklos Vajna <vmiklos@collabora.com> (cherry picked from commit 04fd7d0f53faa08c608034707ca4a459a162712d) Reviewed-on: https://gerrit.libreoffice.org/c/core/+/153650 Reviewed-by: Michael Stahl <michael.stahl@allotropia.de> Reviewed-on: https://gerrit.libreoffice.org/c/core/+/154141 Tested-by: Jenkins CollaboraOffice <jenkinscollaboraoffice@gmail.com>
2023-07-10Update pdfium to 5408Miklos Vajna
- drop cg-instead-of-carbon.patch.1, no longer needed after https://pdfium-review.googlesource.com/c/pdfium/+/99753 - drop AndroidNDK19.patch.1, no longer needed after https://pdfium-review.googlesource.com/c/pdfium/+/96530 - drop gcc-c++20-comparison.patch, no longer needed after <https://pdfium.googlesource.com/pdfium/+/065698acf82962a3168a0d56bb1d5964bc593d00> "Fix interaction between RetainPtr<T> and transparent comparisons" since chromium/5321 Change-Id: I1f861dd8a3d490400bb39c108bd4e767a2f45d30 Reviewed-on: https://gerrit.libreoffice.org/c/core/+/142474 Tested-by: Jenkins Reviewed-by: Miklos Vajna <vmiklos@collabora.com> (cherry picked from commit 5a69fd3052bb638857f30a4cfd5913634275d23d) Reviewed-on: https://gerrit.libreoffice.org/c/core/+/154140 Tested-by: Jenkins CollaboraOffice <jenkinscollaboraoffice@gmail.com>
2023-03-21curl: upgrade to release 8.0.1Michael Stahl
Apparently 8.0.0 had a serious regression. Change-Id: Icc761f5e5e01b5d9bebecc13f7cba608f5834f54 Reviewed-on: https://gerrit.libreoffice.org/c/core/+/149212 Tested-by: Andras Timar <andras.timar@collabora.com> Reviewed-by: Andras Timar <andras.timar@collabora.com>
2023-03-21curl: upgrade to release 8.0.0Michael Stahl
Fixes CVE-2023-27535. Also hopefully fixes excessive storage consumption during build: o build: drop the use of XC_AMEND_DISTCLEAN [62] Change-Id: I8792e95bc7634ee496488e80fec5a1310b24a31c Reviewed-on: https://gerrit.libreoffice.org/c/core/+/149153 Tested-by: Jenkins Reviewed-by: Michael Stahl <michael.stahl@allotropia.de> Reviewed-on: https://gerrit.libreoffice.org/c/core/+/149211 Tested-by: Andras Timar <andras.timar@collabora.com> Reviewed-by: Andras Timar <andras.timar@collabora.com>
2023-03-10openssl: upgrade to release 1.1.1tMichael Stahl
Fixes CVE-2023-0286 CVE-2023-0215 CVE-2022-4450 CVE-2022-4304 Change-Id: I93ce0362b17bd07b0644564a0676daaa56bc8b50 Reviewed-on: https://gerrit.libreoffice.org/c/core/+/146653 Tested-by: Jenkins Reviewed-by: Thorsten Behrens <thorsten.behrens@allotropia.de>
2023-03-10upgrade to openssl-1.1.1sXisco Fauli
Change-Id: Ic0f1fca7ef73b3a443c24d2bcc7f234be331a05b Reviewed-on: https://gerrit.libreoffice.org/c/core/+/142184 Tested-by: Jenkins Reviewed-by: Caolán McNamara <caolanm@redhat.com>
2023-03-10nss: upgrade to release 3.88.1Michael Stahl
Fixes CVE-2023-0767 CVE-2022-3479 Change-Id: I688dc7d0785ed3344c33e331c7e9ef37baa720ee Reviewed-on: https://gerrit.libreoffice.org/c/core/+/147387 Tested-by: Jenkins Reviewed-by: Michael Stahl <michael.stahl@allotropia.de> (cherry picked from commit 538975a0e511ad79a7dd3c71300b993d1554cd03) Reviewed-on: https://gerrit.libreoffice.org/c/core/+/147360 Reviewed-by: Caolán McNamara <caolanm@redhat.com> (cherry picked from commit 389cdfa04fbf7bffde6af9e6c87325579e3e136a) Reviewed-on: https://gerrit.libreoffice.org/c/core/+/147372 Reviewed-by: Xisco Fauli <xiscofauli@libreoffice.org> Tested-by: Christian Lohmaier <lohmaier+LibreOffice@googlemail.com> Reviewed-by: Christian Lohmaier <lohmaier+LibreOffice@googlemail.com>
2023-03-10external: update libxmlsec to 1.2.34Miklos Vajna
See <https://www.aleksey.com/pipermail/xmlsec/2022/010468.html> for details. Change-Id: Ia1f574caa1624cd323cdae8135cac26b13921de1 Reviewed-on: https://gerrit.libreoffice.org/c/core/+/134489 Tested-by: Jenkins Reviewed-by: Miklos Vajna <vmiklos@collabora.com>
2023-03-10upgrade to libjpeg-turbo-2.1.2Caolán McNamara
Change-Id: I6d24be03c6401a815e6f19d79f418fcc90334393 Reviewed-on: https://gerrit.libreoffice.org/c/core/+/128387 Tested-by: Jenkins Reviewed-by: Caolán McNamara <caolanm@redhat.com>
2023-03-10curl: upgrade to release 7.88.1Taichi Haradaguchi
Fixes CVE-2023-23916, 2 CVEs that probably don't affect LO. Reference: https://curl.se/docs/security.html Change-Id: If9b3fc7c5ce66bfe1027caff39ea2c1cf55df7ad Reviewed-on: https://gerrit.libreoffice.org/c/core/+/147977 Tested-by: Jenkins Reviewed-by: Michael Stahl <michael.stahl@allotropia.de> (cherry picked from commit 6074d16b8c631e679a67364837d4ca9799731152) Reviewed-on: https://gerrit.libreoffice.org/c/core/+/147987 Reviewed-by: Xisco Fauli <xiscofauli@libreoffice.org> Tested-by: Christian Lohmaier <lohmaier+LibreOffice@googlemail.com> Reviewed-by: Christian Lohmaier <lohmaier+LibreOffice@googlemail.com>
2023-03-07[cp] Bundle Open Sans fontAndras Timar
Change-Id: I28b5514bc2f23a2aebd901af564fcb85aa7449a8 Reviewed-on: https://gerrit.libreoffice.org/c/core/+/148370 Tested-by: Andras Timar <andras.timar@collabora.com> Reviewed-by: Andras Timar <andras.timar@collabora.com>
2023-02-01curl: upgrade to release 7.87.0Taichi Haradaguchi
Fixes CVE-2022-43551 and CVE-2022-43552. https://curl.se/docs/CVE-2022-43551.html https://curl.se/docs/CVE-2022-43552.html Change-Id: I979ed11c212aef226ad9f26420462e5f9dbe15e5 Reviewed-on: https://gerrit.libreoffice.org/c/core/+/145116 Tested-by: Jenkins Reviewed-by: Caolán McNamara <caolanm@redhat.com>
2023-02-01gpgme: upgrade to release 1.18.0Taichi Haradaguchi
Remove gpgme.git-4b64774b6d13ffa4f59dddf947a97d61bcfa2f2e.patch.1 as it has applied in 1.18.0. * 0001-cpp-Fix-building-with-C-11.patch.1: fixed error "no matching function for call to object of type "(lambda at importresult.cpp:154:71)"". * w32-include.patch: add missing #include <string> (for std::string). * macos-include.patch: add missing #include <algorithm> (for std::any_of). Change-Id: I45f2ef415d80e6ee848699803e971f154812c9c6 Reviewed-on: https://gerrit.libreoffice.org/c/core/+/143039 Tested-by: Jenkins Tested-by: Caolán McNamara <caolanm@redhat.com> Reviewed-by: Caolán McNamara <caolanm@redhat.com> (cherry picked from commit 1c5c31b006f8515bfea440bbcf286f8b4b840aac) Reviewed-on: https://gerrit.libreoffice.org/c/core/+/144270
2023-02-01poppler: upgrade to release 22.12.0Taichi Haradaguchi
Change-Id: Ic0544fa378705b97b437132fc8860a65692634da Reviewed-on: https://gerrit.libreoffice.org/c/core/+/143977 Tested-by: Jenkins Reviewed-by: Michael Stahl <michael.stahl@allotropia.de> (cherry picked from commit 1ec7f8b5b21bf74f684095b97a2b9900a71a0979) Reviewed-on: https://gerrit.libreoffice.org/c/core/+/144066 Reviewed-by: Christian Lohmaier <lohmaier+LibreOffice@googlemail.com>
2023-02-01nss: upgrade to release 3.86.0Taichi Haradaguchi
Change-Id: Ia236c7124d920785f7a2856db5ee1ccbef7a2d68 Reviewed-on: https://gerrit.libreoffice.org/c/core/+/143038 Tested-by: Jenkins Reviewed-by: Caolán McNamara <caolanm@redhat.com> (cherry picked from commit a2969884af71e88d2541bd2bfdebea222876fef4) Reviewed-on: https://gerrit.libreoffice.org/c/core/+/144068 Reviewed-by: Christian Lohmaier <lohmaier+LibreOffice@googlemail.com>
2023-02-01libpng: upgrade to release 1.6.39Taichi Haradaguchi
Fixes CVE-2019-6129. Change-Id: I46ad0c9426a115ba19620814397a834923e03ca6 Reviewed-on: https://gerrit.libreoffice.org/c/core/+/143976 Tested-by: Jenkins Reviewed-by: Michael Stahl <michael.stahl@allotropia.de> (cherry picked from commit 9fb776f508a676d4c7255b5cfc6dfdc00d620a8c) Reviewed-on: https://gerrit.libreoffice.org/c/core/+/144067 Reviewed-by: Xisco Fauli <xiscofauli@libreoffice.org> Tested-by: Xisco Fauli <xiscofauli@libreoffice.org>
2023-02-01python3: upgrade to release 3.8.16Michael Stahl
Fixes CVE-2022-37454 and a few other ones that look less relevant including CVE-2022-45061 and CVE-2015-20107. Change-Id: I10fd254f7f0801d47119234bb3436874e98d8c91 Reviewed-on: https://gerrit.libreoffice.org/c/core/+/143849 Tested-by: Jenkins Reviewed-by: Michael Stahl <michael.stahl@allotropia.de> (cherry picked from commit 05f55b3898407828bb24347be56247f58803f7bb) Reviewed-on: https://gerrit.libreoffice.org/c/core/+/143859 Reviewed-by: Xisco Fauli <xiscofauli@libreoffice.org>
2023-02-01pixman: upgrade to release 0.42.2Taichi Haradaguchi
Fixes CVE-2022-44638 Remove Wincompatible-function-pointer-types.patch.0, fixed upstream. Change-Id: If6589a701a252f71da145264ee3a6f0e333492ae Reviewed-on: https://gerrit.libreoffice.org/c/core/+/143423 Tested-by: Jenkins Reviewed-by: Michael Stahl <michael.stahl@allotropia.de> (cherry picked from commit 93a69d37c1dbcc7365dc0cf2493d1ca27babef2b) Reviewed-on: https://gerrit.libreoffice.org/c/core/+/143439
2023-02-01upgrade Expat to 2.5.0Taichi Haradaguchi
Fixes CVE-2022-43680 Change-Id: I5bf8d1ab0ac352833c76a7edfc1d8eb78dd03e10 Reviewed-on: https://gerrit.libreoffice.org/c/core/+/142205 Tested-by: Jenkins Reviewed-by: Caolán McNamara <caolanm@redhat.com>
2022-11-17Update freetype to 2.12.0Miklos Vajna
- fixes CVE-2022-27404 - dropped the no longer applying parts of ubsan.patch (cherry picked from commit 7229a380d3d607dc896e1d48b1a13f7b301aef80) Conflicts: external/freetype/ubsan.patch Change-Id: Ia8a496d53b62f68a27dbd9be08c89273b6bd01cd Reviewed-on: https://gerrit.libreoffice.org/c/core/+/142780 Tested-by: Jenkins CollaboraOffice <jenkinscollaboraoffice@gmail.com> Reviewed-by: Miklos Vajna <vmiklos@collabora.com>
2022-11-17upgrade freetype to latest releaseCaolán McNamara
(cherry picked from commit 72dfa7ec4c3cae074c9769cc99fe1b7eb029de43) Change-Id: I2b13aceffd9932978c98c49bc688bd5f71690523 Reviewed-on: https://gerrit.libreoffice.org/c/core/+/142779 Tested-by: Miklos Vajna <vmiklos@collabora.com> Reviewed-by: Miklos Vajna <vmiklos@collabora.com>
2022-10-28curl: upgrade to release 7.86.0Michael Stahl
Fixes CVE-2022-32221 which could affect libcmis, CVE-2022-42915, and 2 more CVEs that probably don't affect LO. * remove --without-ssl: On the one hand, on GNU/Linux this now results in: configure: error: --without-ssl has been set together with an explicit option to use an ssl library On the other hand, using the more obvious --without-openssl yields a link failure on Android on the nss check in configure: configure:28220: checking for SSL_VersionRangeSet in -lnss /home/cl/Android/Sdk/ndk/20.1.5948944/toolchains/llvm/prebuilt/linux-x86_64/bin/../lib/gcc/aarch64-linux-android/4.9.x/../../../../aarch64-linux-android/bin/ld: warning: liblog.so, needed by /home/cl/rpmbuild/BUILD/lo-android2/workdir/UnpackedTarball/nss/dist/out/lib/libnss3.so, not found (try using -rpath or -rpath-link) /home/cl/rpmbuild/BUILD/lo-android2/workdir/UnpackedTarball/nss/dist/out/lib/libnspr4.so: undefined reference to `__android_log_write' /home/cl/rpmbuild/BUILD/lo-android2/workdir/UnpackedTarball/nss/dist/out/lib/libnspr4.so: undefined reference to `__android_log_assert' ... so add the -llog for android in curl-nss.patch.1 Change-Id: I3931a1eec2d681c2ce0e5695039492772e9fcc81 Reviewed-on: https://gerrit.libreoffice.org/c/core/+/141866 Tested-by: Jenkins Reviewed-by: Michael Stahl <michael.stahl@allotropia.de> (cherry picked from commit a76a88203d8508f38b10d9bbb94c3bba2485fcaf) Reviewed-on: https://gerrit.libreoffice.org/c/core/+/141846 Reviewed-by: Xisco Fauli <xiscofauli@libreoffice.org>
2022-10-27Python3: update to 3.8.15Taichi Haradaguchi
* Fixes CVE-2022-40674 * Removed 0001-3.6-bpo-17239-Disable-external-entities-in-SAX-parse.patch.1 as fixed upstream Change-Id: I8e71f9a6b013ca4c45bf8774b284be98eee71bab Reviewed-on: https://gerrit.libreoffice.org/c/core/+/141746 Tested-by: Jenkins Reviewed-by: Christian Lohmaier <lohmaier+LibreOffice@googlemail.com>
2022-10-27zlib: upgrade to release 1.2.13Taichi Haradaguchi
Fixes CVE-2022-37434 Removed two patches as fixed upstream. Change-Id: I10465b7eafc4952cf8dc64e6d7a77f5e5255a386 Reviewed-on: https://gerrit.libreoffice.org/c/core/+/141757 Tested-by: Jenkins Reviewed-by: Caolán McNamara <caolanm@redhat.com> (cherry picked from commit b2d6ad64473527f88dfb7088376ccf1242d97666) Reviewed-on: https://gerrit.libreoffice.org/c/core/+/141751 Reviewed-by: Michael Stahl <michael.stahl@allotropia.de>
2022-10-18libxml2: upgrade to release 2.10.3Michael Stahl
Fixes CVE-2022-40304 and CVE-2022-40303. Change-Id: I5be3fd20ccf57596808a26b742aca325ac16f29b Reviewed-on: https://gerrit.libreoffice.org/c/core/+/141448 Tested-by: Jenkins Reviewed-by: Michael Stahl <michael.stahl@allotropia.de> (cherry picked from commit 39b5701976ff3d489c3212d6e2a116d6244c8ad1) Reviewed-on: https://gerrit.libreoffice.org/c/core/+/141402 Reviewed-by: Xisco Fauli <xiscofauli@libreoffice.org>
2022-10-16upgrade libtiff to 4.4.0Caolán McNamara
dropping ubsan.patch which was fixed upstream in this release Change-Id: Ic2e35b24f7a9c7c3e2a00da8bc5b5b7d500746fd Reviewed-on: https://gerrit.libreoffice.org/c/core/+/135359 Tested-by: Jenkins Reviewed-by: Caolán McNamara <caolanm@redhat.com>
2022-10-16build libtiffJulien Nabet
Change-Id: Id9b6e1355147c3f68b9922db14f1b4904a05c686 Reviewed-on: https://gerrit.libreoffice.org/c/core/+/134650 Tested-by: Jenkins Reviewed-by: Caolán McNamara <caolanm@redhat.com>
2022-10-16postgresql: upgrade to release 13.8Taichi Haradaguchi
* Fixes 2 CVEs that don't affect LO (CVE-2022-1552 and CVE-2022-2625). * Changes some patch files for upstream changes. Change-Id: I4964c43fefc94f12a16c45d8727ae41cf1ce278b Reviewed-on: https://gerrit.libreoffice.org/c/core/+/140392 Reviewed-by: Xisco Fauli <xiscofauli@libreoffice.org> Tested-by: Xisco Fauli <xiscofauli@libreoffice.org> (cherry picked from commit cb301d1b98dbfb3fa732082146be04091a8374b8) Reviewed-on: https://gerrit.libreoffice.org/c/core/+/140499 Tested-by: Jenkins
2022-10-16curl: upgrade to release 7.85.0Taichi Haradaguchi
Fixes CVE-2022-35252 Change-Id: I549240f6ae31ae94f925422517cd03ef2e3b5732 Reviewed-on: https://gerrit.libreoffice.org/c/core/+/140494 Reviewed-by: Michael Stahl <michael.stahl@allotropia.de> Tested-by: Jenkins Signed-off-by: Xisco Fauli <xiscofauli@libreoffice.org> Reviewed-on: https://gerrit.libreoffice.org/c/core/+/140496
2022-10-16nss: update to release 3.83Taichi Haradaguchi
Change-Id: Ic1cb36b3a56cde40296fd46ef356dea286932692 Reviewed-on: https://gerrit.libreoffice.org/c/core/+/140231 Tested-by: Jenkins Reviewed-by: Caolán McNamara <caolanm@redhat.com> Signed-off-by: Xisco Fauli <xiscofauli@libreoffice.org> Reviewed-on: https://gerrit.libreoffice.org/c/core/+/140305 Signed-off-by: Xisco Fauli <xiscofauli@libreoffice.org> Reviewed-on: https://gerrit.libreoffice.org/c/core/+/140474 Reviewed-by: Michael Stahl <michael.stahl@allotropia.de>
2022-10-16upgrade libepoxy to 1.5.10Taichi Haradaguchi
removed epoxy.android.patch: fixed upstream (https://github.com/anholt/libepoxy/pull/263/commits/063c1df27974f58b0f3c0a57417732da068923cf) Change-Id: If0c6c438014121bc480efeaeb1018b6b74e51fcc Reviewed-on: https://gerrit.libreoffice.org/c/core/+/140359 Tested-by: Jenkins Reviewed-by: Caolán McNamara <caolanm@redhat.com> Signed-off-by: Xisco Fauli <xiscofauli@libreoffice.org> Reviewed-on: https://gerrit.libreoffice.org/c/core/+/140477
2022-10-16libpng: update to release 1.6.38Taichi Haradaguchi
Change-Id: Ife594699cc8736ffdfc8f68e462d11416d7930e9 Reviewed-on: https://gerrit.libreoffice.org/c/core/+/140311 Tested-by: Jenkins Reviewed-by: Caolán McNamara <caolanm@redhat.com> (cherry picked from commit 18f4fc547a8c055afdaec4aad69c9fea387696c3) Reviewed-on: https://gerrit.libreoffice.org/c/core/+/140377 Reviewed-by: Xisco Fauli <xiscofauli@libreoffice.org> Signed-off-by: Xisco Fauli <xiscofauli@libreoffice.org> Reviewed-on: https://gerrit.libreoffice.org/c/core/+/140476
2022-10-16update expat to 2.4.9Taichi Haradaguchi
Fixes CVE-2022-40674 (https://github.com/libexpat/libexpat/blob/R_2_4_9/expat/Changes) Change-Id: I459cf5f5de31e7cf5420d3df6b11893d5c4ca4dd Reviewed-on: https://gerrit.libreoffice.org/c/core/+/140314 Reviewed-by: Michael Stahl <michael.stahl@allotropia.de> Tested-by: Jenkins
2022-10-16upgrade expat to 2.4.8Taichi Haradaguchi
Change-Id: I4dea32ad24e9a6c24f69c75fea75dbd63c14c91b Reviewed-on: https://gerrit.libreoffice.org/c/core/+/139920 Tested-by: Jenkins Reviewed-by: Caolán McNamara <caolanm@redhat.com> (cherry picked from commit c228803662d1d892405bf6431c4d5bd8dc22f7f6) Reviewed-on: https://gerrit.libreoffice.org/c/core/+/139980
2022-10-16poppler: upgrade to release 22.09.0Michael Stahl
Fixes CVE-2022-38784 Add external/poppler/disable-freetype.patch.1 to get rid of some new code that unconditionally requires freetype, to avoid building that on WNT/MACOSX. Change-Id: I854d1865286b6fb4112cdf37898cda0203c52f2e Reviewed-on: https://gerrit.libreoffice.org/c/core/+/139941 Tested-by: Jenkins Reviewed-by: Michael Stahl <michael.stahl@allotropia.de> (cherry picked from commit 8fce9a0a41b1bbebd325fc9d98a79d8decd3950c) Reviewed-on: https://gerrit.libreoffice.org/c/core/+/139967 Reviewed-by: Thorsten Behrens <thorsten.behrens@allotropia.de> Reviewed-by: Noel Grandin <noel.grandin@collabora.co.uk>
2022-10-16upgrade poppler to 22.01.0Caolán McNamara
and popppler-data to 0.4.11 Change-Id: Ibd8c28f36408a670b5853f1b266c6b8c36916a61 Reviewed-on: https://gerrit.libreoffice.org/c/core/+/128398 Tested-by: Jenkins Reviewed-by: Caolán McNamara <caolanm@redhat.com> (cherry picked from commit 9dbfda4cea569459e42203771754b902c1a09759) Reviewed-on: https://gerrit.libreoffice.org/c/core/+/139966 Reviewed-by: Michael Stahl <michael.stahl@allotropia.de> Tested-by: Noel Grandin <noel.grandin@collabora.co.uk> Reviewed-by: Noel Grandin <noel.grandin@collabora.co.uk>
2022-10-16libxml2: upgrade to release 2.10.2Michael Stahl
Fixes CVE-2022-2309 Change-Id: I180218be275d3b6d38f8f74aa51c57e50d2734ee Reviewed-on: https://gerrit.libreoffice.org/c/core/+/139911 Tested-by: Jenkins Reviewed-by: Michael Stahl <michael.stahl@allotropia.de> (cherry picked from commit d621a8839cebf96fe3ac374026f344f8e68bf011) Reviewed-on: https://gerrit.libreoffice.org/c/core/+/139954 Reviewed-by: Thorsten Behrens <thorsten.behrens@allotropia.de>
2022-10-16Python3: upgrade to release 3.8.14Taichi Haradaguchi
Fixes CVE-2020-10735. Change-Id: I028bb1fe6154beffdd80c0190c9de40ab8a80c4c Reviewed-on: https://gerrit.libreoffice.org/c/core/+/139747 Tested-by: Jenkins Reviewed-by: Caolán McNamara <caolanm@redhat.com> (cherry picked from commit 849601bdec341eaee3cafc46fbe3cf223f06fb7d) Reviewed-on: https://gerrit.libreoffice.org/c/core/+/139840
2022-10-16python3: upgrade to release 3.8.13Taichi Haradaguchi
Remove some code in external/python3/darwin.patch.0 as it was fixed upstream(https://bugs.python.org/issue45405). Change-Id: Ie6bfb2456f96a63adbf0dbcb9c902dc56f1151ee Reviewed-on: https://gerrit.libreoffice.org/c/core/+/139493 Tested-by: Jenkins Tested-by: Caolán McNamara <caolanm@redhat.com> Reviewed-by: Caolán McNamara <caolanm@redhat.com> (cherry picked from commit c8fd50f9ec02a131fd4c99e80f7252b49015653a) Reviewed-on: https://gerrit.libreoffice.org/c/core/+/139564 Reviewed-by: Xisco Fauli <xiscofauli@libreoffice.org>
2022-09-19external: update pdfium to 5298Miklos Vajna
pdfium_arm64.patch.1 is now upstreamed as <https://pdfium-review.googlesource.com/c/pdfium/+/96010>. (cherry picked from commit c97c60f70e9e6de594f7e0e0b85f17944c640dcf) Change-Id: Iafb1ba480161429094db5446ab50314068ae4cfc Reviewed-on: https://gerrit.libreoffice.org/c/core/+/140074 Tested-by: Jenkins CollaboraOffice <jenkinscollaboraoffice@gmail.com> Reviewed-by: Miklos Vajna <vmiklos@collabora.com>
generated by cgit (git 2.34.1) at 2024-08-18 07:57:27 +0000