CVS commit: pkgsrc/x11/libXfont2

This is a multi-part message in MIME format.

--_----------=_17859032702620
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
Content-Type: text/plain; charset="US-ASCII"

Module Name:	pkgsrc
Committed By:	wiz
Date:		Wed Aug  5 04:14:30 UTC 2026

Modified Files:
	pkgsrc/x11/libXfont2: Makefile distinfo

Log Message:
libXfont2: update to 2.0.9.

This release contains the fixes for the issues reported in today's security advisory:
https://lists.x.org/archives/xorg-announce/2026-August/003734.html

- CVE-2026-59679: Font Server Client encoding Out-Of-Bounds Read/Write
- CVE-2026-44950: Font Server Client Cumulative Glyph Data Heap Buffer Overflow

Additionally, it changes a build-time default. Previously fontserver support
was compiled in by default unless --disable-fc was provided at configure time.
The new default is *disabled by default* unless --enable-fc is provided at
configure time. Doing so protects us from future fontserver-connection related
issues. Fontservers have been deprecated for many years and the vast majority
of users will not notice this changed default (Debian has built with
--disable-fc for years).


To generate a diff of this commit:
cvs rdiff -u -r1.20 -r1.21 pkgsrc/x11/libXfont2/Makefile
cvs rdiff -u -r1.11 -r1.12 pkgsrc/x11/libXfont2/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.


--_----------=_17859032702620
Content-Disposition: inline
Content-Length: 1533
Content-Transfer-Encoding: binary
Content-Type: text/x-diff; charset=us-ascii

Modified files:

Index: pkgsrc/x11/libXfont2/Makefile
diff -u pkgsrc/x11/libXfont2/Makefile:1.20 pkgsrc/x11/libXfont2/Makefile:1.21
--- pkgsrc/x11/libXfont2/Makefile:1.20	Wed Jul  8 07:30:41 2026
+++ pkgsrc/x11/libXfont2/Makefile	Wed Aug  5 04:14:30 2026
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.20 2026/07/08 07:30:41 wiz Exp $
+# $NetBSD: Makefile,v 1.21 2026/08/05 04:14:30 wiz Exp $
 
-DISTNAME=		libXfont2-2.0.8
+DISTNAME=		libXfont2-2.0.9
 CATEGORIES=		x11 devel fonts
 MASTER_SITES=		${MASTER_SITE_XORG:=lib/}
 EXTRACT_SUFX=		.tar.xz

Index: pkgsrc/x11/libXfont2/distinfo
diff -u pkgsrc/x11/libXfont2/distinfo:1.11 pkgsrc/x11/libXfont2/distinfo:1.12
--- pkgsrc/x11/libXfont2/distinfo:1.11	Wed Jul  8 07:30:41 2026
+++ pkgsrc/x11/libXfont2/distinfo	Wed Aug  5 04:14:30 2026
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.11 2026/07/08 07:30:41 wiz Exp $
+$NetBSD: distinfo,v 1.12 2026/08/05 04:14:30 wiz Exp $
 
-BLAKE2s (libXfont2-2.0.8.tar.xz) = a92289a9c38d013cce4bc58892d1f3a70e25491fd18ce7a0b0a5f0da18efb65c
-SHA512 (libXfont2-2.0.8.tar.xz) = e14cc3fa03d7baa4554ee5754ab33f69ac1da3d509c686a5f705fde8cd07772be564d68cc18d9fd0beb5ed7b2f864fcd7f6bf4983f5c0db08a9c747d0e001531
-Size (libXfont2-2.0.8.tar.xz) = 474560 bytes
+BLAKE2s (libXfont2-2.0.9.tar.xz) = a8ed98a56f2f882781aa051f5c2502ec9285452ceb20315bf876b59364dcd0a0
+SHA512 (libXfont2-2.0.9.tar.xz) = ccd6d6abf6aa814a940d137813dba638f8259c3672abf00808d82df033c1026ae29d40c9068da4f112637338ad0d0fc15818a4afa9369a626c8f17e466b4fa72
+Size (libXfont2-2.0.9.tar.xz) = 478844 bytes


--_----------=_17859032702620--