From patchwork Tue Feb 11 15:00:30 2025 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Patchwork-Submitter: Stefan Herbrechtsmeier X-Patchwork-Id: 57116 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 41CE4C021B8 for ; Tue, 11 Feb 2025 15:01:15 +0000 (UTC) Received: from EUR05-AM6-obe.outbound.protection.outlook.com (EUR05-AM6-obe.outbound.protection.outlook.com [40.107.22.137]) by mx.groups.io with SMTP id smtpd.web11.1143.1739286064813401053 for ; Tue, 11 Feb 2025 07:01:09 -0800 Authentication-Results: mx.groups.io; dkim=fail reason="dkim: body hash did not verify" header.i=@weidmueller.com header.s=selector2 header.b=zAI5GEY6; spf=pass (domain: weidmueller.com, ip: 40.107.22.137, mailfrom: stefan.herbrechtsmeier-oss@weidmueller.com) ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=NucbVqxIUOs4IQExcILbIVdNCD8TLUxglzxzY4Jf6bOxiZkB3xEHbXuIUoa1Oo7LmcNPmMfe/YqzuQotDOIH6V13rpaBQa0AF9EzttnxfpI0w71Q58bbiyXP6FAF4mqD8paAHUYScY2j3gkCH3wBfIBq9Qjg897JJDIXZWDQRojivV1FBqowp7U6NeTzIwj3kZxstsx6tUyNW7Roxw8w5gjQlauwFg59VakqSBYRL1C+/1V2/MUNJxywFf8nCJR/4vrZ7KbBHLtqvucbc5YMWPtnJv+LgQzE6HESlMVDXdeasr2NCEwYZOnVaJfd9ERJs5SWg/a6hBrlM1MiPvMhKg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=ytSG7gwpnEooTI6mEPraE8SYJ9vkYk+9DXA4SrQA2P4=; b=CMoYJs6HUwi2Tu8zFOGtrS93VDf4WlihVCgZhIuTL1gDmqm14OXPEelmG1XFt8YmkMUBMg1+Q70TNUbsrUFe7aL7b6Nem+Q5E14fWxkZWYAACB4jfH8Cijd+dAzcPYj/Ju6Xz4zFUsYzRvzUvU2+UJfX8hI5ROCgEwQROF11plpbY1NSWbwPqx7iW/GTYtoVqgLpHVy61o0+Z/1JQW5UEEY56me9q8bskZJSW4EAf/MnFcviv87e278ncjdMFhy3c/MmeQwHEEzGWf8IE3LcIn7tLfYVhVCPXbrpQHwrO5ZIezqciUFihTv7Llhe3twz2lLOYW+iIB1bf0SF1XBEmA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=weidmueller.com; dmarc=pass action=none header.from=weidmueller.com; dkim=pass header.d=weidmueller.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=weidmueller.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=ytSG7gwpnEooTI6mEPraE8SYJ9vkYk+9DXA4SrQA2P4=; b=zAI5GEY6EanaiOhSPZuGdOlv2UpB6kAobYGePnWsYnKvIel0RWUpnsRaSv6u4s1Z6Cd2Wc9zzGYaOHxclpzcRmuFtpBCieZmCH0WtYadbAUBZJOww1CyDOfchB9LVo1DkQZVtgco9lMNkDfPSWiuUvM2N5ZU2BVbchGPUaf8a7u8dG96dGjUafVviJMeGL5hpPYikPHmPkfFJHclAahZxzixLMVbG1ALie4/Hh2lmZaqIgTno6Sr3BYT9iitPi+pJRsJnpAv0irkyfPHaDHunPgKyoA4s3mhBGRGXkTB0DlyxcY+1LDhy7iRiEckt451XhEoD77xIrwv3ai+/Qd0VQ== Authentication-Results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=weidmueller.com; Received: from GV1PR08MB8426.eurprd08.prod.outlook.com (2603:10a6:150:8a::17) by AM7PR08MB5399.eurprd08.prod.outlook.com (2603:10a6:20b:104::22) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8422.19; Tue, 11 Feb 2025 15:01:05 +0000 Received: from GV1PR08MB8426.eurprd08.prod.outlook.com ([fe80::f9f5:b4bd:9e01:9013]) by GV1PR08MB8426.eurprd08.prod.outlook.com ([fe80::f9f5:b4bd:9e01:9013%7]) with mapi id 15.20.8422.015; Tue, 11 Feb 2025 15:01:05 +0000 From: Stefan Herbrechtsmeier To: openembedded-core@lists.openembedded.org CC: Stefan Herbrechtsmeier Subject: [RFC PATCH 26/30] librsvg: update dependecies to fix RUSTSEC-2024-0421 Date: Tue, 11 Feb 2025 16:00:30 +0100 Message-ID: <20250211150034.18696-26-stefan.herbrechtsmeier-oss@weidmueller.com> X-Mailer: git-send-email 2.39.5 In-Reply-To: <20250211150034.18696-1-stefan.herbrechtsmeier-oss@weidmueller.com> References: <20250211150034.18696-1-stefan.herbrechtsmeier-oss@weidmueller.com> X-ClientProxiedBy: FR0P281CA0103.DEUP281.PROD.OUTLOOK.COM (2603:10a6:d10:a9::16) To GV1PR08MB8426.eurprd08.prod.outlook.com (2603:10a6:150:8a::17) MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: GV1PR08MB8426:EE_|AM7PR08MB5399:EE_ X-MS-Office365-Filtering-Correlation-Id: 4b49011a-385b-4cf3-3aa0-08dd4aace4a3 X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0;ARA:13230040|1800799024|366016|376014|52116014|13003099007|38350700014; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:GV1PR08MB8426.eurprd08.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(1800799024)(366016)(376014)(52116014)(13003099007)(38350700014);DIR:OUT;SFP:1102; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: 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 X-OriginatorOrg: weidmueller.com X-MS-Exchange-CrossTenant-Network-Message-Id: 4b49011a-385b-4cf3-3aa0-08dd4aace4a3 X-MS-Exchange-CrossTenant-AuthSource: GV1PR08MB8426.eurprd08.prod.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 11 Feb 2025 15:00:58.8737 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: e4289438-1c5f-4c95-a51a-ee553b8b18ec X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: x/cDhRaZm2WdzsuvUobEvdJV18/ZSjTB9WXmMgbQN/5tcWJefy+wnA97JO1Q3iSJ/qc3obYEOt3Rx+8/eHKeCQ== X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM7PR08MB5399 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Tue, 11 Feb 2025 15:01:15 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/211151 From: Stefan Herbrechtsmeier Signed-off-by: Stefan Herbrechtsmeier --- ...-to-get-an-updated-idna-rustsec-2024.patch | 398 ++++++++++++++++++ meta/recipes-gnome/librsvg/librsvg_2.59.2.bb | 3 +- 2 files changed, 400 insertions(+), 1 deletion(-) create mode 100644 meta/recipes-gnome/librsvg/librsvg/0001-update-url-crate-to-get-an-updated-idna-rustsec-2024.patch diff --git a/meta/recipes-gnome/librsvg/librsvg/0001-update-url-crate-to-get-an-updated-idna-rustsec-2024.patch b/meta/recipes-gnome/librsvg/librsvg/0001-update-url-crate-to-get-an-updated-idna-rustsec-2024.patch new file mode 100644 index 0000000000..4f9796d0b9 --- /dev/null +++ b/meta/recipes-gnome/librsvg/librsvg/0001-update-url-crate-to-get-an-updated-idna-rustsec-2024.patch @@ -0,0 +1,398 @@ +From aaaa6b68b024b2adbfdf5f8493dfce1f60e5e331 Mon Sep 17 00:00:00 2001 +From: Federico Mena Quintero +Date: Mon, 9 Dec 2024 13:26:02 -0600 +Subject: [PATCH] Update url crate to get an updated idna, RUSTSEC-2024-0421 +MIME-Version: 1.0 +Content-Type: text/plain; charset=UTF-8 +Content-Transfer-Encoding: 8bit + +error[vulnerability]: `idna` accepts Punycode labels that do not produce any non-ASCII when decoded + ┌─ /builds/GNOME/librsvg/Cargo.lock:99:1 + │ +99 │ idna 0.5.0 registry+https://github.com/rust-lang/crates.io-index + │ ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ security vulnerability detected + │ + ├ ID: RUSTSEC-2024-0421 + ├ Advisory: https://rustsec.org/advisories/RUSTSEC-2024-0421 + +Part-of: + +CVE: RUSTSEC-2024-0421 + +Upstream-Status: Backport [https://github.com/GNOME/librsvg/commit/aaaa6b68b024b2adbfdf5f8493dfce1f60e5e331] +--- + Cargo.lock | 285 +++++++++++++++++++++++++++++++++++++++++++++++++---- + 1 file changed, 264 insertions(+), 21 deletions(-) + +diff --git a/Cargo.lock b/Cargo.lock +index 1ee688577..01c3bf550 100644 +--- a/Cargo.lock ++++ b/Cargo.lock +@@ -588,6 +588,17 @@ dependencies = [ + "crypto-common", + ] + ++[[package]] ++name = "displaydoc" ++version = "0.2.5" ++source = "registry+https://github.com/rust-lang/crates.io-index" ++checksum = "97369cbbc041bc366949bc74d34658d6cda5621039731c6310521892a3a20ae0" ++dependencies = [ ++ "proc-macro2", ++ "quote", ++ "syn", ++] ++ + [[package]] + name = "dlib" + version = "0.5.2" +@@ -992,14 +1003,143 @@ dependencies = [ + "cc", + ] + ++[[package]] ++name = "icu_collections" ++version = "1.5.0" ++source = "registry+https://github.com/rust-lang/crates.io-index" ++checksum = "db2fa452206ebee18c4b5c2274dbf1de17008e874b4dc4f0aea9d01ca79e4526" ++dependencies = [ ++ "displaydoc", ++ "yoke", ++ "zerofrom", ++ "zerovec", ++] ++ ++[[package]] ++name = "icu_locid" ++version = "1.5.0" ++source = "registry+https://github.com/rust-lang/crates.io-index" ++checksum = "13acbb8371917fc971be86fc8057c41a64b521c184808a698c02acc242dbf637" ++dependencies = [ ++ "displaydoc", ++ "litemap", ++ "tinystr", ++ "writeable", ++ "zerovec", ++] ++ ++[[package]] ++name = "icu_locid_transform" ++version = "1.5.0" ++source = "registry+https://github.com/rust-lang/crates.io-index" ++checksum = "01d11ac35de8e40fdeda00d9e1e9d92525f3f9d887cdd7aa81d727596788b54e" ++dependencies = [ ++ "displaydoc", ++ "icu_locid", ++ "icu_locid_transform_data", ++ "icu_provider", ++ "tinystr", ++ "zerovec", ++] ++ ++[[package]] ++name = "icu_locid_transform_data" ++version = "1.5.0" ++source = "registry+https://github.com/rust-lang/crates.io-index" ++checksum = "fdc8ff3388f852bede6b579ad4e978ab004f139284d7b28715f773507b946f6e" ++ ++[[package]] ++name = "icu_normalizer" ++version = "1.5.0" ++source = "registry+https://github.com/rust-lang/crates.io-index" ++checksum = "19ce3e0da2ec68599d193c93d088142efd7f9c5d6fc9b803774855747dc6a84f" ++dependencies = [ ++ "displaydoc", ++ "icu_collections", ++ "icu_normalizer_data", ++ "icu_properties", ++ "icu_provider", ++ "smallvec", ++ "utf16_iter", ++ "utf8_iter", ++ "write16", ++ "zerovec", ++] ++ ++[[package]] ++name = "icu_normalizer_data" ++version = "1.5.0" ++source = "registry+https://github.com/rust-lang/crates.io-index" ++checksum = "f8cafbf7aa791e9b22bec55a167906f9e1215fd475cd22adfcf660e03e989516" ++ ++[[package]] ++name = "icu_properties" ++version = "1.5.1" ++source = "registry+https://github.com/rust-lang/crates.io-index" ++checksum = "93d6020766cfc6302c15dbbc9c8778c37e62c14427cb7f6e601d849e092aeef5" ++dependencies = [ ++ "displaydoc", ++ "icu_collections", ++ "icu_locid_transform", ++ "icu_properties_data", ++ "icu_provider", ++ "tinystr", ++ "zerovec", ++] ++ ++[[package]] ++name = "icu_properties_data" ++version = "1.5.0" ++source = "registry+https://github.com/rust-lang/crates.io-index" ++checksum = "67a8effbc3dd3e4ba1afa8ad918d5684b8868b3b26500753effea8d2eed19569" ++ ++[[package]] ++name = "icu_provider" ++version = "1.5.0" ++source = "registry+https://github.com/rust-lang/crates.io-index" ++checksum = "6ed421c8a8ef78d3e2dbc98a973be2f3770cb42b606e3ab18d6237c4dfde68d9" ++dependencies = [ ++ "displaydoc", ++ "icu_locid", ++ "icu_provider_macros", ++ "stable_deref_trait", ++ "tinystr", ++ "writeable", ++ "yoke", ++ "zerofrom", ++ "zerovec", ++] ++ ++[[package]] ++name = "icu_provider_macros" ++version = "1.5.0" ++source = "registry+https://github.com/rust-lang/crates.io-index" ++checksum = "1ec89e9337638ecdc08744df490b221a7399bf8d164eb52a665454e60e075ad6" ++dependencies = [ ++ "proc-macro2", ++ "quote", ++ "syn", ++] ++ + [[package]] + name = "idna" +-version = "0.5.0" ++version = "1.0.3" ++source = "registry+https://github.com/rust-lang/crates.io-index" ++checksum = "686f825264d630750a544639377bae737628043f20d38bbc029e8f29ea968a7e" ++dependencies = [ ++ "idna_adapter", ++ "smallvec", ++ "utf8_iter", ++] ++ ++[[package]] ++name = "idna_adapter" ++version = "1.2.0" + source = "registry+https://github.com/rust-lang/crates.io-index" +-checksum = "634d9b1461af396cad843f47fdba5597a4f9e6ddd4bfb6ff5d85028c25cb12f6" ++checksum = "daca1df1c957320b2cf139ac61e7bd64fed304c5040df000a745aa1de3b4ef71" + dependencies = [ +- "unicode-bidi", +- "unicode-normalization", ++ "icu_normalizer", ++ "icu_properties", + ] + + [[package]] +@@ -1229,6 +1369,12 @@ version = "0.4.14" + source = "registry+https://github.com/rust-lang/crates.io-index" + checksum = "78b3ae25bc7c8c38cec158d1f2757ee79e9b3740fbc7ccf0e59e4b08d793fa89" + ++[[package]] ++name = "litemap" ++version = "0.7.4" ++source = "registry+https://github.com/rust-lang/crates.io-index" ++checksum = "4ee93343901ab17bd981295f2cf0026d4ad018c7c31ba84549a4ddbb47a45104" ++ + [[package]] + name = "locale_config" + version = "0.3.0" +@@ -2258,6 +2404,17 @@ dependencies = [ + "unicode-ident", + ] + ++[[package]] ++name = "synstructure" ++version = "0.13.1" ++source = "registry+https://github.com/rust-lang/crates.io-index" ++checksum = "c8af7666ab7b6390ab78131fb5b0fce11d6b7a6951602017c35fa82800708971" ++dependencies = [ ++ "proc-macro2", ++ "quote", ++ "syn", ++] ++ + [[package]] + name = "system-deps" + version = "6.2.2" +@@ -2371,6 +2528,16 @@ dependencies = [ + "time-core", + ] + ++[[package]] ++name = "tinystr" ++version = "0.7.6" ++source = "registry+https://github.com/rust-lang/crates.io-index" ++checksum = "9117f5d4db391c1cf6927e7bea3db74b9a1c1add8f7eda9ffd5364f40f57b82f" ++dependencies = [ ++ "displaydoc", ++ "zerovec", ++] ++ + [[package]] + name = "tinytemplate" + version = "1.2.1" +@@ -2453,32 +2620,17 @@ version = "0.1.4" + source = "registry+https://github.com/rust-lang/crates.io-index" + checksum = "eaea85b334db583fe3274d12b4cd1880032beab409c0d774be044d4480ab9a94" + +-[[package]] +-name = "unicode-bidi" +-version = "0.3.15" +-source = "registry+https://github.com/rust-lang/crates.io-index" +-checksum = "08f95100a766bf4f8f28f90d77e0a5461bbdb219042e7679bebe79004fed8d75" +- + [[package]] + name = "unicode-ident" + version = "1.0.12" + source = "registry+https://github.com/rust-lang/crates.io-index" + checksum = "3354b9ac3fae1ff6755cb6db53683adb661634f67557942dea4facebec0fee4b" + +-[[package]] +-name = "unicode-normalization" +-version = "0.1.23" +-source = "registry+https://github.com/rust-lang/crates.io-index" +-checksum = "a56d1686db2308d901306f92a263857ef59ea39678a5458e7cb17f01415101f5" +-dependencies = [ +- "tinyvec", +-] +- + [[package]] + name = "url" +-version = "2.5.2" ++version = "2.5.4" + source = "registry+https://github.com/rust-lang/crates.io-index" +-checksum = "22784dbdf76fdde8af1aeda5622b546b422b6fc585325248a2bf9f5e41e94d6c" ++checksum = "32f8b686cadd1473f4bd0117a5d28d36b1ade384ea9b5069a1c40aefed7fda60" + dependencies = [ + "form_urlencoded", + "idna", +@@ -2491,6 +2643,18 @@ version = "0.7.6" + source = "registry+https://github.com/rust-lang/crates.io-index" + checksum = "09cc8ee72d2a9becf2f2febe0205bbed8fc6615b7cb429ad062dc7b7ddd036a9" + ++[[package]] ++name = "utf16_iter" ++version = "1.0.5" ++source = "registry+https://github.com/rust-lang/crates.io-index" ++checksum = "c8232dd3cdaed5356e0f716d285e4b40b932ac434100fe9b7e0e8e935b9e6246" ++ ++[[package]] ++name = "utf8_iter" ++version = "1.0.4" ++source = "registry+https://github.com/rust-lang/crates.io-index" ++checksum = "b6c140620e7ffbb22c2dee59cafe6084a59b5ffc27a8859a5f0d494b5d52b6be" ++ + [[package]] + name = "utf8parse" + version = "0.2.2" +@@ -2754,6 +2918,18 @@ dependencies = [ + "memchr", + ] + ++[[package]] ++name = "write16" ++version = "1.0.0" ++source = "registry+https://github.com/rust-lang/crates.io-index" ++checksum = "d1890f4022759daae28ed4fe62859b1236caebfc61ede2f63ed4e695f3f6d936" ++ ++[[package]] ++name = "writeable" ++version = "0.5.5" ++source = "registry+https://github.com/rust-lang/crates.io-index" ++checksum = "1e9df38ee2d2c3c5948ea468a8406ff0db0b29ae1ffde1bcf20ef305bcc95c51" ++ + [[package]] + name = "xml5ever" + version = "0.18.1" +@@ -2776,6 +2952,30 @@ dependencies = [ + "pkg-config", + ] + ++[[package]] ++name = "yoke" ++version = "0.7.5" ++source = "registry+https://github.com/rust-lang/crates.io-index" ++checksum = "120e6aef9aa629e3d4f52dc8cc43a015c7724194c97dfaf45180d2daf2b77f40" ++dependencies = [ ++ "serde", ++ "stable_deref_trait", ++ "yoke-derive", ++ "zerofrom", ++] ++ ++[[package]] ++name = "yoke-derive" ++version = "0.7.5" ++source = "registry+https://github.com/rust-lang/crates.io-index" ++checksum = "2380878cad4ac9aac1e2435f3eb4020e8374b5f13c296cb75b4620ff8e229154" ++dependencies = [ ++ "proc-macro2", ++ "quote", ++ "syn", ++ "synstructure", ++] ++ + [[package]] + name = "zerocopy" + version = "0.7.35" +@@ -2797,6 +2997,49 @@ dependencies = [ + "syn", + ] + ++[[package]] ++name = "zerofrom" ++version = "0.1.5" ++source = "registry+https://github.com/rust-lang/crates.io-index" ++checksum = "cff3ee08c995dee1859d998dea82f7374f2826091dd9cd47def953cae446cd2e" ++dependencies = [ ++ "zerofrom-derive", ++] ++ ++[[package]] ++name = "zerofrom-derive" ++version = "0.1.5" ++source = "registry+https://github.com/rust-lang/crates.io-index" ++checksum = "595eed982f7d355beb85837f651fa22e90b3c044842dc7f2c2842c086f295808" ++dependencies = [ ++ "proc-macro2", ++ "quote", ++ "syn", ++ "synstructure", ++] ++ ++[[package]] ++name = "zerovec" ++version = "0.10.4" ++source = "registry+https://github.com/rust-lang/crates.io-index" ++checksum = "aa2b893d79df23bfb12d5461018d408ea19dfafe76c2c7ef6d4eba614f8ff079" ++dependencies = [ ++ "yoke", ++ "zerofrom", ++ "zerovec-derive", ++] ++ ++[[package]] ++name = "zerovec-derive" ++version = "0.10.3" ++source = "registry+https://github.com/rust-lang/crates.io-index" ++checksum = "6eafa6dfb17584ea3e2bd6e76e0cc15ad7af12b09abdd1ca55961bed9b1063c6" ++dependencies = [ ++ "proc-macro2", ++ "quote", ++ "syn", ++] ++ + [[package]] + name = "zune-core" + version = "0.4.12" diff --git a/meta/recipes-gnome/librsvg/librsvg_2.59.2.bb b/meta/recipes-gnome/librsvg/librsvg_2.59.2.bb index 2bd8f7bf2b..36aaaf20e8 100644 --- a/meta/recipes-gnome/librsvg/librsvg_2.59.2.bb +++ b/meta/recipes-gnome/librsvg/librsvg_2.59.2.bb @@ -22,7 +22,8 @@ GIDOCGEN_MESON_ENABLE_FLAG = 'enabled' GIDOCGEN_MESON_DISABLE_FLAG = 'disabled' SRC_URI += "file://0001-meson.build-do-not-force-disable-introspection-and-v.patch \ - file://0001-gdk-pixbuf-loader-meson.build-do-not-look-for-gdk-pi.patch" + file://0001-gdk-pixbuf-loader-meson.build-do-not-look-for-gdk-pi.patch \ + file://0001-update-url-crate-to-get-an-updated-idna-rustsec-2024.patch;early=1" SRC_URI[archive.sha256sum] = "ecd293fb0cc338c170171bbc7bcfbea6725d041c95f31385dc935409933e4597" UPSTREAM_CHECK_REGEX = "librsvg-(?P\d+\.\d+\.(?!9\d+)\d+)"