summaryrefslogtreecommitdiff
path: root/download.lst
AgeCommit message (Collapse)Author
2023-08-09openldap: upgrade to release 2.6.6Taichi Haradaguchi
* remove Wint-conversion.patch and configure-c99.patch, which were fixed upstream. Change-Id: Ia93b0190e60ab3420fe79c5446f22a1573b1ea6e Reviewed-on: https://gerrit.libreoffice.org/c/core/+/155441 Tested-by: Taichi Haradaguchi <20001722@ymail.ne.jp> Reviewed-by: Taichi Haradaguchi <20001722@ymail.ne.jp>
2023-08-06openssl: upgrade to release 3.0.10Taichi Haradaguchi
Change-Id: Iee5716bdd111e2f30cb38d48a86104da52872dd5 Reviewed-on: https://gerrit.libreoffice.org/c/core/+/155382 Tested-by: Jenkins Reviewed-by: Taichi Haradaguchi <20001722@ymail.ne.jp>
2023-08-01Update to curl-8.2.1.tar.xzStephan Bergmann
...obtained from <https://curl.se/download/curl-8.2.1.tar.xz> Change-Id: I7260f79e2f72501869ff58c77f0d9dfa3ebdece1 Reviewed-on: https://gerrit.libreoffice.org/c/core/+/155116 Tested-by: Jenkins Reviewed-by: Stephan Bergmann <sbergman@redhat.com>
2023-07-12Upgrade Harfbuzz to 8.0.0Taichi Haradaguchi
Change-Id: I04d81509c50f0335d201b5286460989f526b58f9 Reviewed-on: https://gerrit.libreoffice.org/c/core/+/154233 Tested-by: Jenkins Reviewed-by: Taichi Haradaguchi <20001722@ymail.ne.jp>
2023-07-11LibTomMath: upgrade to release 1.2.0Taichi Haradaguchi
* external/libtommath/clang-cl.patch: removed "typedef unsigned __int128 mp_word" from tommmath.h * external/libtommath/libtommath-msvc.patch: fixed upstream Change-Id: I38fe730ff0e9649c6a0ad8d64b723a27e3434012 Reviewed-on: https://gerrit.libreoffice.org/c/core/+/153871 Tested-by: Jenkins Reviewed-by: Taichi Haradaguchi <20001722@ymail.ne.jp>
2023-07-11zxing-cpp: upgrade to release 2.1.0Taichi Haradaguchi
- remove external/zxing/invalid_argument.patch.1 and external/zxing/no_sanitize_ignored.patch.0, no longer needed in 2.1.0. - If "Utf.h" can be included, use ZXing::FromUtf8() instaed of ZXing::TextUtfEncoding::FromUtf8(). This makes external/zxing/undeprecate-warning.patch.0 unnecessary. Change-Id: I06acebb623aa8b60c5d2e5f7f265998571d75a89 Reviewed-on: https://gerrit.libreoffice.org/c/core/+/154221 Tested-by: Jenkins Reviewed-by: Taichi Haradaguchi <20001722@ymail.ne.jp>
2023-07-10update skia to m116Noel Grandin
(from m111) SK_SUPPORT_GPU is now SK_GANESH GR_OP_ALLOCATE_USE_NEW was removed in skia m111 commit dd8f8ed3848cbe2032edc7ec08ef648a23e28ad9 Author: Mike Klein <mtklein@google.com> Date: Thu Apr 22 12:17:33 2021 -0500 clean up defines that do nothing the fast-png-write patch was removed. The underlying helper function we need was removed in commit 0ec4c84abd0b578a5c792b04b56653cbc325530e Author: Kevin Lubick <kjlubick@google.com> Date: Thu Apr 20 14:46:28 2023 -0400 Remove SkImageEncoder and SkImage::encodeToData So I updated our dump() function in SkiaHelper.cxx to use the new Skia API. The constexpr-template patch seems to be superceded by skia changes. SkOpts: :hash_fn has been replaced with SkChecksum::Hash32 commit 657ed9cf2379a950b925cb2aba7c85d6e1dd36ed Author: Brian Osman <brianosman@google.com> Date: Tue May 23 12:40:12 2023 +0000 Reland "Replace SkOpts::hash/hash_fn with SkChecksum::Hash32" The SkDebugf function needs to be exported from the library since it leaks out to calling code via some of the headers. Change-Id: I80ace8f25e660fa7889d22ef90676f47264d866c Reviewed-on: https://gerrit.libreoffice.org/c/core/+/154223 Tested-by: Jenkins Reviewed-by: Noel Grandin <noel.grandin@collabora.co.uk>
2023-07-04libatomic_ops: upgrade release to 7.8.0Taichi Haradaguchi
use new configure option (--disable-gpl) added in 7.8.0 to skip building libatomic_ops_gpl. Change-Id: If4b3b1994399099906b306fb2ea22fa47a87300b Reviewed-on: https://gerrit.libreoffice.org/c/core/+/153886 Tested-by: Jenkins Reviewed-by: Taichi Haradaguchi <20001722@ymail.ne.jp>
2023-07-04libpng: upgrade to release 1.6.40Taichi Haradaguchi
Change-Id: I2f366045097a6f063e26703b4132710573a40e65 Reviewed-on: https://gerrit.libreoffice.org/c/core/+/153879 Tested-by: Jenkins Reviewed-by: Taichi Haradaguchi <20001722@ymail.ne.jp>
2023-07-03libxslt: upgrade to release 1.1.38Taichi Haradaguchi
Change-Id: I0534d7e02c9486b3d58f56e1a26fe6846b4a20b7 Reviewed-on: https://gerrit.libreoffice.org/c/core/+/153874 Tested-by: Jenkins Reviewed-by: Taichi Haradaguchi <20001722@ymail.ne.jp>
2023-07-01Upgrade Harfbuzz to 7.3.0Taichi Haradaguchi
Release Notes: https://github.com/harfbuzz/harfbuzz/releases/tag/7.2.0 (v7.2.0) https://github.com/harfbuzz/harfbuzz/releases/tag/7.3.0 (v7.3.0) Change-Id: I4f57b7e829f2356b5e2b442ff00df555121c0e66 Reviewed-on: https://gerrit.libreoffice.org/c/core/+/153729 Tested-by: Taichi Haradaguchi <20001722@ymail.ne.jp> Reviewed-by: Taichi Haradaguchi <20001722@ymail.ne.jp>
2023-07-01upgrade libwebp to 1.3.1Taichi Haradaguchi
Fixes CVE-2023-1999. Change-Id: I3d0f5f718242977156729521d14efb1a8d71aee4 Reviewed-on: https://gerrit.libreoffice.org/c/core/+/153819 Tested-by: Jenkins Reviewed-by: Taichi Haradaguchi <20001722@ymail.ne.jp>
2023-06-30postgresql: upgrade to release 13.11Taichi Haradaguchi
CVE-2023-2454 and CVE-2023-2455 don't affect LibreOffice. Release Notes: https://www.postgresql.org/docs/release/13.11/ Change-Id: I1de521b6aa9af1e6d84ea794b0f4f5d62de377f8 Reviewed-on: https://gerrit.libreoffice.org/c/core/+/153728 Tested-by: Jenkins Reviewed-by: Taichi Haradaguchi <20001722@ymail.ne.jp>
2023-06-27Update language-subtag-registry to 2023-05-11Eike Rathke
Change-Id: Ieb1c3eab66c06c8e7b3d9751d9e4548dbd7efc04 Reviewed-on: https://gerrit.libreoffice.org/c/core/+/153643 Reviewed-by: Eike Rathke <erack@redhat.com> Tested-by: Jenkins
2023-06-27Update ICU to 73.2Taichi Haradaguchi
Remove external/icu/ubsan.patch.1 that was applied upstream. See https://icu.unicode.org/download/73 Change-Id: Ic2bc450b093f1c0ddb09ebe915a9c3e70d7e0964 Reviewed-on: https://gerrit.libreoffice.org/c/core/+/153574 Tested-by: Jenkins Reviewed-by: Eike Rathke <erack@redhat.com>
2023-06-26Update gpgme to 1.20.0Taichi Haradaguchi
* remove external/gpgmepp/0001-cpp-Fix-building-with-C-11.patch.1 and external/gpgmepp/gcc9.patch that were applied upstream. * remove unneccesary external/gpgmepp/macos-include.patch. * remove a bit of external/gpgmepp/w32-build-fixes.patch.1 that was applied upstream. Change-Id: I9982a3a47e62a5e06e3c04ddc3ee3f247eefa8ee Reviewed-on: https://gerrit.libreoffice.org/c/core/+/153544 Tested-by: Jenkins Reviewed-by: Taichi Haradaguchi <20001722@ymail.ne.jp>
2023-06-26upgrade libtiff to 4.5.1Caolán McNamara
Change-Id: Ia07f368a371930f655bdc3495e76295dad740d30 Reviewed-on: https://gerrit.libreoffice.org/c/core/+/153570 Tested-by: Jenkins Reviewed-by: Caolán McNamara <caolan.mcnamara@collabora.com>
2023-06-24Update libassuan to 2.5.6Taichi Haradaguchi
Change-Id: Iea5af01231e67c24d34287929a54f5ec86af47ce Reviewed-on: https://gerrit.libreoffice.org/c/core/+/153545 Tested-by: Jenkins Reviewed-by: Taichi Haradaguchi <20001722@ymail.ne.jp>
2023-06-21openldap: upgrade to release 2.6.4Taichi Haradaguchi
Because NSS support has been removed in release 2.5, switch TLS/SSL module used by OpenLDAP to OpenSSL. Add -pthread flag to openldap_LDFLAGS when building on Linux. This avoids errors that occur in libcrypto.a (libcrypto-lib-threads_pthread.o). Change-Id: I4779ce40233d144d930f20e85db7b4ba08f91ea1 Reviewed-on: https://gerrit.libreoffice.org/c/core/+/143646 Tested-by: Taichi Haradaguchi <20001722@ymail.ne.jp> Reviewed-by: Taichi Haradaguchi <20001722@ymail.ne.jp>
2023-06-21poppler: upgrade to release 23.06.0Taichi Haradaguchi
Add external/poppler/disable-nss-and-gpgmepp.patch.1 to get rid of some code that requires NSS or GPGMEPP. Update external/poppler/inc/pch/precompiled_poppler.hxx. Change-Id: I5e61371776c64962452022516446b5079c3840e2 Reviewed-on: https://gerrit.libreoffice.org/c/core/+/153097 Tested-by: Jenkins Reviewed-by: Taichi Haradaguchi <20001722@ymail.ne.jp>
2023-06-17Add frozen library support - for compile-time dict, set supportTomaž Vajngerl
Change-Id: I8fa02569ba02048cc3ef02b349aafba1c0cbebb4 Reviewed-on: https://gerrit.libreoffice.org/c/core/+/153173 Reviewed-by: Taichi Haradaguchi <20001722@ymail.ne.jp> Tested-by: Jenkins Reviewed-by: Tomaž Vajngerl <quikee@gmail.com>
2023-06-15nss: upgrade to release 3.90Taichi Haradaguchi
Change-Id: Ic446f33abd5355886b8c8c181a088c07ea4605c1 Reviewed-on: https://gerrit.libreoffice.org/c/core/+/153096 Tested-by: Jenkins Reviewed-by: Michael Stahl <michael.stahl@allotropia.de>
2023-06-13openssl: upgrade to release 3.0.9Taichi Haradaguchi
Fixes CVE-2023-1255, CVE-2023-2650 and 3 more CVEs that probably don't affect LibreOffice. Change-Id: Ic615b008298471267121a0f4deb227ddb3a0409e Reviewed-on: https://gerrit.libreoffice.org/c/core/+/152851 Tested-by: Jenkins Reviewed-by: Taichi Haradaguchi <20001722@ymail.ne.jp>
2023-06-12curl: upgrade to release 8.1.2Taichi Haradaguchi
Fixes CVE-2023-28321, CVE-2023-28322, and 2 more CVEs that probably don't affect LibreOffice Change-Id: If8720ba3647216063bffc8678aa64dad9a317128 Reviewed-on: https://gerrit.libreoffice.org/c/core/+/152809 Tested-by: Jenkins Reviewed-by: Taichi Haradaguchi <20001722@ymail.ne.jp> Reviewed-by: Michael Stahl <michael.stahl@allotropia.de>
2023-06-09external/coinmp: Update to CoinMP 1.8.4Stephan Bergmann
...originally started mostly to simplify a then-upcoming change to address std::bind2nd gone from libc++ for C++17 (which turned out to already be partially addressed in this new CoinMP revision). But that has since been addressed with b97e8b9d13ef0f57f7cf0badbefcb038a8bbd137 "external/coinmp: Adapt to std::bind2nd gone from C++17" on top of the old CoinMP 1.7.6, because updating to 1.8.4 turned out to run into issues on Windows, see the email thread starting at <https://lists.freedesktop.org/archives/libreoffice/2022-September/089383.html> "Maintaining building external/coinmp on Windows". * <https://dev-www.libreoffice.org/src/CoinMP-1.8.4.tgz> is a copy of <https://www.coin-or.org/download/source/CoinMP/CoinMP-1.8.4.tgz>. * Various of our patches are meanwhile addressed upstream, partially or in whole. * The upstream configure scripts deteriorated and caused one of my Linux build's CC=/absolute/path/to/some/clang to be mistaken for MSVC which caused them to force LD=link, which in turn caused them to only build archives and not the shared libraries that we expect. external/coinmp/clang-with-path.patch addresses that. * There's apparently a new ClpSolver library now that also needs to be installed. Otherwise at least CppunitTest_sccomp_swarmsolvertest failed due to > warn:sal.osl:1950612:1950612:sal/osl/unx/module.cxx:152: dlopen(instdir/program/libsolverlo.so, 257): libClpSolver.so.1: cannot open shared object file: No such file or directory * Plus modifications to external/coinmp/windows.build.patch.1 thankfully done by Taichi Haradaguchi <20001722@ymail.ne.jp> to make this actually compile on Windows (cf. the mailing list thread starting at <https://lists.freedesktop.org/archives/libreoffice/2022-September/089383.html> "Maintaining building external/coinmp on Windows") Change-Id: I498c9513fa0d96d8ae2b9ba4c09dd792340db730 Reviewed-on: https://gerrit.libreoffice.org/c/core/+/140057 Tested-by: Jenkins Reviewed-by: Stephan Bergmann <sbergman@redhat.com>
2023-06-09Update libxmlsec to 1.3.1Miklos Vajna
This time try to do it in a way that doesn't re-introduce tdf#155034, i.e. patch out code that would use NSS symbols which are in the RHEL7 baseline, but are not in Ubuntu 18.04. This is all code like RSA OAEP or AES GCM which is relatively new, so not really required for our signature needs. It also helps that this release has a lowered baseline for NSS. Change-Id: I5a8df6d98462e8173a5508e014bd2d515da2dc9d Reviewed-on: https://gerrit.libreoffice.org/c/core/+/152747 Tested-by: Justin Luth <jluth@mail.com> Tested-by: Jenkins Reviewed-by: Miklos Vajna <vmiklos@collabora.com>
2023-06-07python3: upgrade to release 3.8.17Michael Stahl
Fixes CVE-2023-24329 and a few more obscure security issues. Change-Id: I4b073ce02c0377e2791e4593d20f2b756de0c8cd Reviewed-on: https://gerrit.libreoffice.org/c/core/+/152696 Tested-by: Jenkins Reviewed-by: Michael Stahl <michael.stahl@allotropia.de>
2023-05-25Update pdfium to 5778Miklos Vajna
- external/pdfium/abseil-trivial.patch is no longer needed, upstream does what we did previously - external/pdfium/build.patch.1: re-generate with 'patch -p1' + 'git diff' - external/pdfium/include.patch is no longer needed, upstream does what we did previously Change-Id: I39a6f721e436aa53914bbf43b78ac7d86e5eac59 Reviewed-on: https://gerrit.libreoffice.org/c/core/+/152244 Tested-by: Jenkins Reviewed-by: Miklos Vajna <vmiklos@collabora.com>
2023-05-24upgrade to libxml2-2.11.4Caolán McNamara
'checked' field removed with: https://gitlab.gnome.org/GNOME/libxml2/-/commit/ce76ebfd1312459951d555ad9d87fb9a89eede55 win32 'run_debug' removed with: https://gitlab.gnome.org/GNOME/libxml2/-/commit/59f2f60e3eff07324f1c7cd861a444d714be750b add libxml2-XMLCALL-redefine.patch.0 to avoid: UnpackedTarball\libxml2\include\libxml/xmlexports.h(41): error C2220: the following warning is treated as an error UnpackedTarball\libxml2\include\libxml/xmlexports.h(41): warning C4005: 'XMLCALL': macro redefinition UnpackedTarball\expat\lib\expat_external.h(69): note: see previous definition of 'XMLCALL' Change-Id: Ia9b1540dc1b4eccf91662c8d995c036f71de6fc6 Reviewed-on: https://gerrit.libreoffice.org/c/core/+/152176 Tested-by: Jenkins Reviewed-by: Caolán McNamara <caolan.mcnamara@collabora.com>
2023-05-02tdf#155057: Wrong colors in some WPG2 (well rendered in WPG1)Julien Nabet
Thank you Fridrich Strba for the quick fix in libwpg! Change-Id: Icb2a48cdd7846ac9f2b32ca65a479381d8c8bfed Reviewed-on: https://gerrit.libreoffice.org/c/core/+/151217 Tested-by: Jenkins Reviewed-by: Julien Nabet <serval2412@yahoo.fr>
2023-05-02Update mdds to 2.1.1Kohei Yoshida
Change-Id: I4f708faa5b0017e7852e3b085825b6637f6fa988 Reviewed-on: https://gerrit.libreoffice.org/c/core/+/151244 Tested-by: Jenkins Reviewed-by: Kohei Yoshida <kohei@libreoffice.org>
2023-04-28tdf#155034 Revert "Update libxmlsec to 1.3.0"Justin Luth
This reverts commit 26bf26272bf525b59b4a4ce18b3ce14c1febfd7b. Reason for revert: compiled version fails open/create some documents on Ubuntu 20.04, which is still an Ubuntu-supported release. Also fails to compile on 20.04 with built-in system NSS The clinching reason is for running bibisects. There was no compelling reason to make the change, just routine maintenance. So if something breaks or is annoying when doing routine maintenance, then revert it. The previous version is still 1.2.37, released in Nov 2022. So this will likely come up again relatively soon if there is a security fix required. But at least at the end of the 7.6 development cycle, we can avoid the pain. Change-Id: Ife387d6e4058b017ba18cba1fbcb2b2d50f52c12 Reviewed-on: https://gerrit.libreoffice.org/c/core/+/151118 Tested-by: Jenkins Reviewed-by: Justin Luth <jluth@mail.com> Reviewed-by: Miklos Vajna <vmiklos@collabora.com>
2023-04-25Update libxmlsec to 1.3.0Miklos Vajna
See <https://github.com/lsh123/xmlsec/releases/tag/xmlsec_1_3_0> for the upstream release notes, notably: > (ABI breaking change) Switched xmlSecSize to use size_t by default. Adapt xmlsec-wrapper.h accordingly. Change-Id: If910e44441be65794d4441558e2838d00b4b927c Reviewed-on: https://gerrit.libreoffice.org/c/core/+/150647 Tested-by: Jenkins Reviewed-by: Miklos Vajna <vmiklos@collabora.com>
2023-04-19libxml2: upgrade to release 2.10.4Michael Stahl
Fixes CVE-2023-29469 and CVE-2023-28484. Also: SAX2: Ignore namespaces in HTML documents which is probably the reason why one test fails, so switch it to parsing XML: HTML parser error : Tag reqif-xhtml:div invalid <reqif-xhtml:div> HTML parser error : Tag reqif-xhtml:table invalid <reqif-xhtml:table cellpadding="2" cellspacing="2"> ... reqif-table.xhtml: C:/cygwin/home/tdf/jenkins/workspace/gerrit_windows/test/source/xmltesttools.cxx:195:testReqIfTable::Import_Export equality assertion failed - Expected: 1 - Actual : 0 - In <file:///C:/cygwin/home/tdf/jenkins/workspace/gerrit_windows/tempdir/lu134607bxu8q.tmp>, XPath '/html/body/div/table/tr/th' number of nodes is incorrect Change-Id: Icc161b39515c996193366bc777a67eca79e4e892 Reviewed-on: https://gerrit.libreoffice.org/c/core/+/150544 Tested-by: Jenkins Reviewed-by: Michael Stahl <michael.stahl@allotropia.de>
2023-04-17Upgrade external/boost to latest Boost 1.82.0Stephan Bergmann
<https://dev-www.libreoffice.org/src/boost_1_82_0.tar.xz> has been generated (on Fedora 38) with > $ wget https://boostorg.jfrog.io/artifactory/main/release/1.82.0/source/boost_1_82_0.tar.bz2 > $ printf 'a6e1ab9b0860e6a2881dd7b21fe9f737a095e5f33a3a874afc6a345228597ee6 boost_1_82_0.tar.bz2' | sha256sum -c # cf. <https://www.boost.org/users/history/version_1_82_0.html> > boost_1_82_0.tar.bz2: OK > $ external/boost/repack_tarball.sh boost_1_82_0.tar.bz2 > Unpacking boost_1_82_0.tar.bz2 ... > Removing unnecessary files ... > Creating boost_1_82_0.tar.xz ... > Cleaning up ... > e48ab6953fbd68ba47234bea5173e62427e9f6a7894e152305142895cfe955de boost_1_82_0.tar.xz > Done. * Updating StaticLibrary_boost_locale.mk is needed to avoid > workdir/UnpackedTarball/boost/libs/locale/src/boost/locale/util/locale_data.cpp:137: error: undefined reference to 'boost::locale::util::normalize_encoding(std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > const&)' Change-Id: Iff3f5249df0fcf75f5a50e7eb35ef64373af8184 Reviewed-on: https://gerrit.libreoffice.org/c/core/+/150516 Tested-by: Jenkins Reviewed-by: Stephan Bergmann <sbergman@redhat.com>
2023-04-06poppler: upgrade to release 23.03.0Taichi Haradaguchi
* Upgrade poppler-data to 0.4.12 * Update poppler-config.patch.1 Change-Id: Ic2a3e8d4f801d52d1568210d0df064cacb51290f Reviewed-on: https://gerrit.libreoffice.org/c/core/+/148842 Tested-by: Jenkins Reviewed-by: Michael Stahl <michael.stahl@allotropia.de>
2023-04-03move to libwebp 1.3.0 releaseCaolán McNamara
Change-Id: I88205be86e15d9878040958b96dc30043d9eb0b6 Reviewed-on: https://gerrit.libreoffice.org/c/core/+/149959 Tested-by: Jenkins Reviewed-by: Caolán McNamara <caolanm@redhat.com>
2023-03-29libjpeg-turbo: upgrade to release 2.1.5.1Taichi Haradaguchi
Fixes a serious regression that 2.1.5 had.[1] [1] "Release 2.1.5.1 · libjpeg-turbo/libjpeg-turbo" <https://github.com/libjpeg-turbo/libjpeg-turbo/releases/tag/2.1.5.1> Change-Id: I0586d735e17789482e0e8e667aafd2b5613a1232 Reviewed-on: https://gerrit.libreoffice.org/c/core/+/148941 Tested-by: Jenkins Reviewed-by: Caolán McNamara <caolanm@redhat.com>
2023-03-23Upgrade Harfbuzz to 7.1.0Taichi Haradaguchi
* Fixes CVE-2023-25193. * if Harfbuzz >= 7.0.0, uses hb_font_draw_glyph() instead of hb_font_get_glyph_shape(). * Update URL in README. Change-Id: Id234c2b459c40ddac340731b44889b104e03a1e8 Reviewed-on: https://gerrit.libreoffice.org/c/core/+/148743 Tested-by: Jenkins Reviewed-by: خالد حسني <khaled@aliftype.com>
2023-03-21curl: upgrade to release 8.0.1Michael Stahl
Apparently 8.0.0 had a serious regression. Change-Id: Icc761f5e5e01b5d9bebecc13f7cba608f5834f54 Reviewed-on: https://gerrit.libreoffice.org/c/core/+/149204 Tested-by: Jenkins Reviewed-by: Michael Stahl <michael.stahl@allotropia.de>
2023-03-20curl: upgrade to release 8.0.0Michael Stahl
Fixes CVE-2023-27535. Also hopefully fixes excessive storage consumption during build: o build: drop the use of XC_AMEND_DISTCLEAN [62] Change-Id: I8792e95bc7634ee496488e80fec5a1310b24a31c Reviewed-on: https://gerrit.libreoffice.org/c/core/+/149153 Tested-by: Jenkins Reviewed-by: Michael Stahl <michael.stahl@allotropia.de>
2023-03-13Update pdfium to 5636Miklos Vajna
Some changes in the bundled libtiff, but it seems that would be for XFA which we disable, so it doesn't affect us. Change-Id: Ibadeecf20daec342fbfef6d1e89bd17f5f0095e9 Reviewed-on: https://gerrit.libreoffice.org/c/core/+/148652 Tested-by: Jenkins Reviewed-by: Miklos Vajna <vmiklos@collabora.com>
2023-03-01fontconfig: upgrade to release 2.14.2Taichi Haradaguchi
Change-Id: I5347580318c752517c9ef7a37d4175a2c6db36bc Reviewed-on: https://gerrit.libreoffice.org/c/core/+/145134 Tested-by: Jenkins Reviewed-by: Caolán McNamara <caolanm@redhat.com>
2023-03-01curl: upgrade to release 7.88.1Taichi Haradaguchi
Fixes CVE-2023-23916, 2 CVEs that probably don't affect LO. Reference: https://curl.se/docs/security.html Change-Id: If9b3fc7c5ce66bfe1027caff39ea2c1cf55df7ad Reviewed-on: https://gerrit.libreoffice.org/c/core/+/147673 Tested-by: Jenkins Reviewed-by: Michael Stahl <michael.stahl@allotropia.de>
2023-03-01postgresql: upgrade to release 13.10Taichi Haradaguchi
Fixes CVE-2022-41862 Reference: https://www.postgresql.org/support/security/CVE-2022-41862/ Change-Id: I6075838972fec1c091f3150b19c5da4dc80ad6d3 Reviewed-on: https://gerrit.libreoffice.org/c/core/+/147674 Tested-by: Jenkins Reviewed-by: Michael Stahl <michael.stahl@allotropia.de>
2023-02-28upgrade to libjpeg-turbo 2.1.5Caolán McNamara
Change-Id: Ia6355beaf19765e6255f9388d60e2179206ddc5b Reviewed-on: https://gerrit.libreoffice.org/c/core/+/147951 Tested-by: Jenkins Reviewed-by: Caolán McNamara <caolanm@redhat.com>
2023-02-24upgrade zxing-cpp to 2.0.0Caolán McNamara
Change-Id: I3dc00f34359ec56a22cf7d8ba8e565ccb755c755 Reviewed-on: https://gerrit.libreoffice.org/c/core/+/147619 Tested-by: Jenkins Reviewed-by: Caolán McNamara <caolanm@redhat.com>
2023-02-24freetype: upgrade to release 2.13.0Taichi Haradaguchi
As the issue has been fixed upstream[1], removed some codes from "external/freetype/ubsan.patch". [1]"[truetype] Fix undefined pointer arithmetic." <https://gitlab.freedesktop.org/freetype/freetype/-/commit/905270925dd0492ba557e58938e5513f062e6fc5> Change-Id: I66c11e414cd9ecdad8678487d0c3f645a352ad92 Reviewed-on: https://gerrit.libreoffice.org/c/core/+/147464 Reviewed-by: Caolán McNamara <caolanm@redhat.com> Tested-by: Caolán McNamara <caolanm@redhat.com>
2023-02-21nss: upgrade to release 3.88.1Michael Stahl
Fixes CVE-2023-0767 CVE-2022-3479 Change-Id: I688dc7d0785ed3344c33e331c7e9ef37baa720ee Reviewed-on: https://gerrit.libreoffice.org/c/core/+/147387 Tested-by: Jenkins Reviewed-by: Michael Stahl <michael.stahl@allotropia.de>
2023-02-11Update liborcus to 0.18.1Kohei Yoshida
Change-Id: I0439640789e59e4dd6e92d7f2975538de2f42f53 Reviewed-on: https://gerrit.libreoffice.org/c/core/+/146826 Tested-by: Jenkins Reviewed-by: Kohei Yoshida <kohei@libreoffice.org>
generated by cgit (git 2.34.1) at 2025-01-19 20:21:07 +0000