[Midnightbsd-cvs] [MidnightBSD/mports] d90cb8: x11-fonts/libXfont2: update to 2.0.8 (security)

[Lucas Holt]

  Branch: refs/heads/x11-fonts/libXfont2
  Home:   https://github.com/MidnightBSD/mports
  Commit: d90cb8a3027b52676201ee8126267e6b7411bf4c
      https://github.com/MidnightBSD/mports/commit/d90cb8a3027b52676201ee8126267e6b7411bf4c
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-07-08 (Wed, 08 Jul 2026)

  Changed paths:
    M x11-fonts/libXfont2/Makefile
    M x11-fonts/libXfont2/distinfo

  Log Message:
  -----------
  x11-fonts/libXfont2: update to 2.0.8 (security)

Fixes X.Org security advisory of 2026-07-08 (libXfont2 < 2.0.8):

- CVE-2026-56001: BitmapScaleBitmaps() integer overflow heap buffer overflow
- CVE-2026-56002: pcfReadFont() PCF font parsing heap buffer overflow
- CVE-2026-56003: ComputeScaledProperties() property buffer heap overflow

2.0.8 ships as .tar.xz, so add tar:xz to USES. Shared library soname
is unchanged (libXfont2.so.2), so no dependent PORTREVISION bumps are
needed. Validated with build/fake/package on amd64.

AI-Assisted-by: Claude Opus 4.8 (1M context) <noreply at anthropic.com>
Signed-off-by: Lucas Holt <luke at foolishgames.com>



To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/mports/settings/notifications