xorg.libXcursor: security 1.1.14 -> 1.1.15

Fix heap overflows when parsing malicious files. (CVE-2017-16612)
This commit is contained in:
Vladimír Čunát 2017-11-28 20:59:59 +01:00
parent 94cba39aa2
commit 98e3af04b6
No known key found for this signature in database
GPG key ID: E747DF1F9575A3AA
2 changed files with 4 additions and 4 deletions

View file

@ -788,11 +788,11 @@ let
}) // {inherit compositeproto libX11 libXfixes xproto ;};
libXcursor = (mkDerivation "libXcursor" {
name = "libXcursor-1.1.14";
name = "libXcursor-1.1.15";
builder = ./builder.sh;
src = fetchurl {
url = mirror://xorg/individual/lib/libXcursor-1.1.14.tar.bz2;
sha256 = "1prkdicl5y5yx32h1azh6gjfbijvjp415javv8dsakd13jrarilv";
url = mirror://xorg/individual/lib/libXcursor-1.1.15.tar.bz2;
sha256 = "0syzlfvh29037p0vnlc8f3jxz8nl55k65blswsakklkwsc6nfki9";
};
nativeBuildInputs = [ pkgconfig ];
buildInputs = [ fixesproto libX11 libXfixes xproto libXrender ];

View file

@ -63,7 +63,7 @@ mirror://xorg/individual/lib/libX11-1.6.5.tar.bz2
mirror://xorg/individual/lib/libXau-1.0.8.tar.bz2
mirror://xorg/individual/lib/libXaw-1.0.13.tar.bz2
mirror://xorg/individual/lib/libXcomposite-0.4.4.tar.bz2
mirror://xorg/individual/lib/libXcursor-1.1.14.tar.bz2
mirror://xorg/individual/lib/libXcursor-1.1.15.tar.bz2
mirror://xorg/individual/lib/libXdamage-1.1.4.tar.bz2
mirror://xorg/individual/lib/libXdmcp-1.1.2.tar.bz2
mirror://xorg/individual/lib/libXext-1.3.3.tar.bz2