From f8f768f90e62372662dd7d3af652860dac07dbc3 Mon Sep 17 00:00:00 2001 From: Daniel Golle Date: Wed, 7 Sep 2022 19:33:30 +0100 Subject: [PATCH] libinput: update to version 1.19.4 This release includes a fix for CVE-2022-1215, a format string vulnerabilty in the evdev device handling. For details, see https://gitlab.freedesktop.org/libinput/libinput/-/issues/752 Peter Hutterer (2): evdev: strip the device name of format directives libinput 1.19.4 Signed-off-by: Daniel Golle (cherry picked from commit b95dbe4187a7a21f7cf13f578a81fa0337706190) --- libs/libinput/Makefile | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/libs/libinput/Makefile b/libs/libinput/Makefile index 30d19025a8..e88412439a 100644 --- a/libs/libinput/Makefile +++ b/libs/libinput/Makefile @@ -5,12 +5,12 @@ include $(TOPDIR)/rules.mk PKG_NAME:=libinput -PKG_VERSION:=1.19.3 +PKG_VERSION:=1.19.4 PKG_RELEASE:=$(AUTORELEASE) PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.xz PKG_SOURCE_URL:=http://www.freedesktop.org/software/libinput -PKG_HASH:=3cae78ccde19d7d0f387e58bc734d4d17ab5f6426f54a9e8b728c90b17baa068 +PKG_HASH:=ff33a570b5a936c81e6c08389a8581c2665311d026ce3d225c88d09c49f9b440 PKG_MAINTAINER:=Daniel Golle PKG_LICENSE:=MIT