Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

xscreensaver: Enable perl modules needed for RSS image fetch (#57629) #57667

Closed
wants to merge 2,267 commits into from

Conversation

booxter
Copy link
Contributor

@booxter booxter commented Mar 14, 2019

(cherry picked from commit 4730466)

NeQuissimus and others added 30 commits January 31, 2019 07:21
(cherry picked from commit f623dac)
(cherry picked from commit e4c1ce9)
(cherry picked from commit bfc3789)
(cherry picked from commit 0f3ecc6)
 - compatible with 2.7 and 3+
 - all test pass.

(cherry picked from commit 5704642)
 - compatible with 2.7, 3+
 - all tests pass and running

(cherry picked from commit 7b92017)
The github repository was downloaded instead of the pypi repository
for testing (needed `conftest.py`). Major work was done on the
underlying dependencies to make distributed work on python 2.7,
3+. Note that the test **do** take a significant amount of time (10-15
minutes).

 - moved to `python-modules`
 - compatible with 2.7, 3+
 - all tests pass (previously tests were not run)

(cherry picked from commit 4f70170)
There is a bug when using git repo in that the package does not get a
version (shows up as `0+unknown`). Using pypi fixes this issue allows
allows for auto upgrades.

(cherry picked from commit e5cd420)
(cherry picked from commit f7165b2)
(cherry picked from commit 8b85a86)
Signed-off-by: Domen Kožar <domen@dev.si>
* pr-55022:
  redmine: 3.4.6 -> 3.4.8
Backport fixes to Dask and Distributed to release-18.09
Also dropped the i386 archive.

(cherry picked from commit 3b61faf)
The archive for 0.9.53 was removed resulting in a broken build.
Signed-off-by: Roosembert Palacios <roosembert.palacios@epfl.ch>
This adds the "missing" qtvirtualkeyboard module of qt56. I just add
this so I can apply (& test) the patches for a CVE in the next commit.
This might seem strange but in case anyone decided to add / use this in
the future we are on the safe(r) side.

(cherry picked from commit 295a210)
 * CVE-2018-15518, Qt Base: “double free or corruption” in QXmlStreamReader
 * CVE-2018-19873, Qt Base: QBmpHandler segfault on malformed BMP file
 * CVE-2018-19870, Qt Base: Check for QImage allocation failure in qgifhandler
 * CVE-2018-19871, Qt Imageformats: QImage: QTgaFile CPU exhaustion
 * CVE-2018-19865, Qt Virtual Keyboard: Qt Virtual Keyboard logs all key presses
 * CVE-2018-19869, Qt Svg: Fix crash when parsing malformed url reference

More details can be obtained from the Qt annoucement [1].

[1] https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/

(cherry picked from commit 066be85)
This fixes

 * CVE-2018-15518, Qt Base: “double free or corruption” in QXmlStreamReader
 * CVE-2018-19873, Qt Base: QBmpHandler segfault on malformed BMP file
 * CVE-2018-19870, Qt Base: Check for QImage allocation failure in qgifhandler
 * CVE-2018-19871, Qt Imageformats: QImage: QTgaFile CPU exhaustion
 * CVE-2018-19865, Qt Virtual Keyboard: Qt Virtual Keyboard logs all key presses
 * CVE-2018-19869, Qt Svg: Fix crash when parsing malformed url reference

More details can be obtained from the Qt annoucement [1].

[1] https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/

(cherry picked from commit 2f5d37b)
The fix is already included in Qt 5.9.7

This reverts commit 0bf153f.

(cherry picked from commit fd75bbc)
(cherry picked from commit 76b1610)
(cherry picked from commit f1b91b5)
Signed-off-by: Maximilian Bosch <maximilian@mbosch.me>
(cherry picked from commit 4ce1c59)
Signed-off-by: Maximilian Bosch <maximilian@mbosch.me>
(cherry picked from commit 2746973)
Signed-off-by: Maximilian Bosch <maximilian@mbosch.me>
@booxter
Copy link
Contributor Author

booxter commented Mar 14, 2019

Ouch wrong branch?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet