From dfaac9c7944bb2f2803fa16092a562d6a9f4e68ceef81e64f2adbb6e2b9fb777 Mon Sep 17 00:00:00 2001 From: Stefan Dirsch Date: Fri, 22 Nov 2019 11:21:36 +0000 Subject: [PATCH] - Update to version 19.2.6 * fixes build on PPC * couple of additional stable patches - Update to version 19.2.5 * There's a little bit over everything in here, with anv and radeonsi standing out as the two biggest components getting changes, but core mesa, core gallium, llvmpipe, nir, egl, i965, tgsi, st/mesa, spirv, and the Intel compiler also fixes in this release. - supersedes u_call-shmget-with-permission-0600-instead-of-0777.patch OBS-URL: https://build.opensuse.org/package/show/X11:XOrg/Mesa?expand=0&rev=902 --- Mesa-drivers.changes | 18 ++++++ Mesa-drivers.spec | 6 +- Mesa.changes | 18 ++++++ Mesa.spec | 6 +- mesa-19.2.4.tar.xz | 3 - mesa-19.2.4.tar.xz.sig | Bin 119 -> 0 bytes mesa-19.2.6.tar.xz | 3 + mesa-19.2.6.tar.xz.sig | Bin 0 -> 119 bytes ...with-permission-0600-instead-of-0777.patch | 61 ------------------ 9 files changed, 43 insertions(+), 72 deletions(-) delete mode 100644 mesa-19.2.4.tar.xz delete mode 100644 mesa-19.2.4.tar.xz.sig create mode 100644 mesa-19.2.6.tar.xz create mode 100644 mesa-19.2.6.tar.xz.sig delete mode 100644 u_call-shmget-with-permission-0600-instead-of-0777.patch diff --git a/Mesa-drivers.changes b/Mesa-drivers.changes index 53eb8fb..b8f4c20 100644 --- a/Mesa-drivers.changes +++ b/Mesa-drivers.changes @@ -1,3 +1,21 @@ +------------------------------------------------------------------- +Fri Nov 22 11:06:45 UTC 2019 - Stefan Dirsch + +- Update to version 19.2.6 + * fixes build on PPC + * couple of additional stable patches + +------------------------------------------------------------------- +Thu Nov 21 11:40:59 UTC 2019 - Stefan Dirsch + +- Update to version 19.2.5 + * There's a little bit over everything in here, with anv and + radeonsi standing out as the two biggest components getting + changes, but core mesa, core gallium, llvmpipe, nir, egl, + i965, tgsi, st/mesa, spirv, and the Intel compiler also + fixes in this release. +- supersedes u_call-shmget-with-permission-0600-instead-of-0777.patch + ------------------------------------------------------------------- Thu Nov 14 14:36:08 UTC 2019 - Stefan Dirsch diff --git a/Mesa-drivers.spec b/Mesa-drivers.spec index 8f8640f..8c163a6 100644 --- a/Mesa-drivers.spec +++ b/Mesa-drivers.spec @@ -42,7 +42,7 @@ %define glamor 1 %define _name_archive mesa -%define _version 19.2.4 +%define _version 19.2.6 %define with_opencl 0 %define with_vulkan 0 %define with_llvm 0 @@ -110,7 +110,7 @@ %endif Name: Mesa-drivers -Version: 19.2.4 +Version: 19.2.6 Release: 0 Summary: System for rendering 3-D graphics License: MIT @@ -126,7 +126,6 @@ Source6: %{name}-rpmlintrc Source7: Mesa.keyring Patch1: n_opencl_dep_libclang.patch Patch2: n_add-Mesa-headers-again.patch -Patch3: u_call-shmget-with-permission-0600-instead-of-0777.patch # never to be upstreamed Patch54: n_drirc-disable-rgb10-for-chromium-on-amd.patch Patch58: u_dep_xcb.patch @@ -734,7 +733,6 @@ rm -rf docs/README.{VMS,WIN32,OS2} %endif %endif %patch2 -p1 -%patch3 -p1 %patch54 -p1 %patch58 -p1 diff --git a/Mesa.changes b/Mesa.changes index 53eb8fb..b8f4c20 100644 --- a/Mesa.changes +++ b/Mesa.changes @@ -1,3 +1,21 @@ +------------------------------------------------------------------- +Fri Nov 22 11:06:45 UTC 2019 - Stefan Dirsch + +- Update to version 19.2.6 + * fixes build on PPC + * couple of additional stable patches + +------------------------------------------------------------------- +Thu Nov 21 11:40:59 UTC 2019 - Stefan Dirsch + +- Update to version 19.2.5 + * There's a little bit over everything in here, with anv and + radeonsi standing out as the two biggest components getting + changes, but core mesa, core gallium, llvmpipe, nir, egl, + i965, tgsi, st/mesa, spirv, and the Intel compiler also + fixes in this release. +- supersedes u_call-shmget-with-permission-0600-instead-of-0777.patch + ------------------------------------------------------------------- Thu Nov 14 14:36:08 UTC 2019 - Stefan Dirsch diff --git a/Mesa.spec b/Mesa.spec index 39a3b3b..5757d86 100644 --- a/Mesa.spec +++ b/Mesa.spec @@ -41,7 +41,7 @@ %define glamor 1 %define _name_archive mesa -%define _version 19.2.4 +%define _version 19.2.6 %define with_opencl 0 %define with_vulkan 0 %define with_llvm 0 @@ -109,7 +109,7 @@ %endif Name: Mesa -Version: 19.2.4 +Version: 19.2.6 Release: 0 Summary: System for rendering 3-D graphics License: MIT @@ -125,7 +125,6 @@ Source6: %{name}-rpmlintrc Source7: Mesa.keyring Patch1: n_opencl_dep_libclang.patch Patch2: n_add-Mesa-headers-again.patch -Patch3: u_call-shmget-with-permission-0600-instead-of-0777.patch # never to be upstreamed Patch54: n_drirc-disable-rgb10-for-chromium-on-amd.patch Patch58: u_dep_xcb.patch @@ -733,7 +732,6 @@ rm -rf docs/README.{VMS,WIN32,OS2} %endif %endif %patch2 -p1 -%patch3 -p1 %patch54 -p1 %patch58 -p1 diff --git a/mesa-19.2.4.tar.xz b/mesa-19.2.4.tar.xz deleted file mode 100644 index add1895..0000000 --- a/mesa-19.2.4.tar.xz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:09000a0f7dbbd82e193b81a8f1bf0c118eab7ca975c0329181968596e548e30f -size 11458340 diff --git a/mesa-19.2.4.tar.xz.sig b/mesa-19.2.4.tar.xz.sig deleted file mode 100644 index 8737d885032d518b0401ecd1b2e20f91b243c0fd6833094bd50179611203f4aa..0000000000000000000000000000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 119 zcmeAuWnmEGVvrS6WGOtdJxpOwX+gL5ZB?JCzgF9AD1O7r6niG{BLf$w08FGzoZ){| z6N_!|n~1)QKR%YzmzWzwX83Sj)o(NTp3$}PdfSn64F7aYc)qELPFcR?^Ua8t<$2o= UvBoKMuhx+7HGH2}Im?q70At-VtN;K2 diff --git a/mesa-19.2.6.tar.xz b/mesa-19.2.6.tar.xz new file mode 100644 index 0000000..6260ea0 --- /dev/null +++ b/mesa-19.2.6.tar.xz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:9d7b24fa60c82db34788196450042a55ce6cb2d70c7a8d5c31401619b6907797 +size 11460244 diff --git a/mesa-19.2.6.tar.xz.sig b/mesa-19.2.6.tar.xz.sig new file mode 100644 index 0000000000000000000000000000000000000000000000000000000000000000..130a84503a6ce78a0a57c68ad209537c248653626e9d1d55caa7163a00d2a9b3 GIT binary patch literal 119 zcmeAuWnmEGVvrS6WGOtdJxpOwX+gL5ZB?JCzgF9AD1O7r6nkB3H3Ju?08B)IfstW< zuh6-dzy3aS-j%%a+yx~ixmm>#R}=*cJ~BJotk>Ve%JAPe=fchcN#;B+@#e}+zSqvK VW>|Lhw%WAow>P|9-MZ=rBLGuOHAw&f literal 0 HcmV?d00001 diff --git a/u_call-shmget-with-permission-0600-instead-of-0777.patch b/u_call-shmget-with-permission-0600-instead-of-0777.patch deleted file mode 100644 index abd141a..0000000 --- a/u_call-shmget-with-permission-0600-instead-of-0777.patch +++ /dev/null @@ -1,61 +0,0 @@ -A security advisory (TALOS-2019-0857/CVE-2019-5068) found that -creating shared memory regions with permission mode 0777 could allow -any user to access that memory. Several Mesa drivers use shared- -memory XImages to implement back buffers for improved performance. - -This path changes the shmget() calls to use 0600 (user r/w). - -Tested with legacy Xlib driver and llvmpipe. - -Cc: mesa-stable at lists.freedesktop.org ---- - src/gallium/winsys/sw/dri/dri_sw_winsys.c | 3 ++- - src/gallium/winsys/sw/xlib/xlib_sw_winsys.c | 3 ++- - src/mesa/drivers/x11/xm_buffer.c | 3 ++- - 3 files changed, 6 insertions(+), 3 deletions(-) - -diff --git a/src/gallium/winsys/sw/dri/dri_sw_winsys.c b/src/gallium/winsys/sw/dri/dri_sw_winsys.c -index 761f5d1..2e5970b 100644 ---- a/src/gallium/winsys/sw/dri/dri_sw_winsys.c -+++ b/src/gallium/winsys/sw/dri/dri_sw_winsys.c -@@ -92,7 +92,8 @@ alloc_shm(struct dri_sw_displaytarget *dri_sw_dt, unsigned size) - { - char *addr; - -- dri_sw_dt->shmid = shmget(IPC_PRIVATE, size, IPC_CREAT|0777); -+ /* 0600 = user read+write */ -+ dri_sw_dt->shmid = shmget(IPC_PRIVATE, size, IPC_CREAT|0600); - if (dri_sw_dt->shmid < 0) - return NULL; - -diff --git a/src/gallium/winsys/sw/xlib/xlib_sw_winsys.c b/src/gallium/winsys/sw/xlib/xlib_sw_winsys.c -index c14c9de..edebb48 100644 ---- a/src/gallium/winsys/sw/xlib/xlib_sw_winsys.c -+++ b/src/gallium/winsys/sw/xlib/xlib_sw_winsys.c -@@ -126,7 +126,8 @@ alloc_shm(struct xlib_displaytarget *buf, unsigned size) - shminfo->shmid = -1; - shminfo->shmaddr = (char *) -1; - -- shminfo->shmid = shmget(IPC_PRIVATE, size, IPC_CREAT|0777); -+ /* 0600 = user read+write */ -+ shminfo->shmid = shmget(IPC_PRIVATE, size, IPC_CREAT|0600); - if (shminfo->shmid < 0) { - return NULL; - } -diff --git a/src/mesa/drivers/x11/xm_buffer.c b/src/mesa/drivers/x11/xm_buffer.c -index d945d8a..0da08a6 100644 ---- a/src/mesa/drivers/x11/xm_buffer.c -+++ b/src/mesa/drivers/x11/xm_buffer.c -@@ -89,8 +89,9 @@ alloc_back_shm_ximage(XMesaBuffer b, GLuint width, GLuint height) - return GL_FALSE; - } - -+ /* 0600 = user read+write */ - b->shminfo.shmid = shmget(IPC_PRIVATE, b->backxrb->ximage->bytes_per_line -- * b->backxrb->ximage->height, IPC_CREAT|0777); -+ * b->backxrb->ximage->height, IPC_CREAT|0600); - if (b->shminfo.shmid < 0) { - _mesa_warning(NULL, "shmget failed while allocating back buffer.\n"); - XDestroyImage(b->backxrb->ximage); --- -1.8.5.6