[Midnightbsd-cvs] [MidnightBSD/mports] 7dbbf4: x11-fonts/libXfont2: update to 2.0.8 (security) (#...

[Lucas Holt]

  Branch: refs/heads/master
  Home:   https://github.com/MidnightBSD/mports
  Commit: 7dbbf45a859eadee0007d42f21fcb5d70516ff70
      https://github.com/MidnightBSD/mports/commit/7dbbf45a859eadee0007d42f21fcb5d70516ff70
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-07-08 (Wed, 08 Jul 2026)

  Changed paths:
    M x11-fonts/libXfont2/Makefile
    M x11-fonts/libXfont2/distinfo

  Log Message:
  -----------
  x11-fonts/libXfont2: update to 2.0.8 (security) (#623)

Updates `x11-fonts/libXfont2` from 2.0.5 to 2.0.8 to address the X.Org
security advisory of 2026-07-08 (issues in libXfont2 prior to 2.0.8).

## CVEs fixed
- **CVE-2026-56001** — `BitmapScaleBitmaps()` integer overflow heap
buffer overflow
- **CVE-2026-56002** — `pcfReadFont()` PCF font parsing heap buffer
overflow
- **CVE-2026-56003** — `ComputeScaledProperties()` property buffer heap
overflow

All three fixes verified present in the 2.0.8 source.

## Changes
- `PORTVERSION` 2.0.5 → 2.0.8
- Added `tar:xz` to `USES` (2.0.8 ships as `.tar.xz`)
- Regenerated `distinfo`

## Notes
- Shared library soname is unchanged (`libXfont2.so.2`), so no dependent
`PORTREVISION` bumps are required.
- Validated with `bmake` build / `fake` (clean plist) / `package` on
amd64.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

## Summary by Sourcery

Update libXfont2 port to the 2.0.8 release and adjust packaging to match
the new upstream distribution format.

Bug Fixes:
- Pull in upstream libXfont2 fixes for multiple security vulnerabilities
present before 2.0.8.

Build:
- Update PORTVERSION to 2.0.8 and regenerate distinfo for the new
distfile.
- Add tar:xz to USES to handle the new .tar.xz distfile format.

Signed-off-by: Lucas Holt <luke at foolishgames.com>



To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/mports/settings/notifications