- Update to version 22.1.8

* This release contains the fix for CVE-2023-0494 in today's
    security advisory: 
    https://lists.x.org/archives/xorg-announce/2023-February/003320.html
  * It also fixes a second possible OOB access during EnqueueEvent.
- supersedes U_Xi-fix-potential-use-after-free-in-DeepCopyPointerCl.patch

OBS-URL: https://build.opensuse.org/package/show/X11:XOrg/xwayland?expand=0&rev=44
This commit is contained in:
Stefan Dirsch 2023-02-07 14:32:28 +00:00 committed by Git OBS Bridge
parent cd5cddf487
commit 179bde64cb
5 changed files with 13 additions and 21 deletions

View File

@ -1,20 +0,0 @@
@@ -, +, @@
DeepCopyPointerClasses
---
Xi/exevents.c | 4 +++-
1 file changed, 3 insertions(+), 1 deletion(-)
--- a/Xi/exevents.c
+++ a/Xi/exevents.c
@@ -619,8 +619,10 @@ DeepCopyPointerClasses(DeviceIntPtr from, DeviceIntPtr to)
memcpy(to->button->xkb_acts, from->button->xkb_acts,
sizeof(XkbAction));
}
- else
+ else {
free(to->button->xkb_acts);
+ to->button->xkb_acts = NULL;
+ }
memcpy(to->button->labels, from->button->labels,
from->button->numButtons * sizeof(Atom));
--

3
xwayland-22.1.8.tar.xz Normal file
View File

@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:d11eeee73290b88ea8da42a7d9350dedfaba856ce4ae44e58c045ad9ecaa2f73
size 1273668

BIN
xwayland-22.1.8.tar.xz.sig Normal file

Binary file not shown.

View File

@ -1,3 +1,13 @@
-------------------------------------------------------------------
Tue Feb 7 14:29:21 UTC 2023 - Stefan Dirsch <sndirsch@suse.com>
- Update to version 22.1.8
* This release contains the fix for CVE-2023-0494 in today's
security advisory:
https://lists.x.org/archives/xorg-announce/2023-February/003320.html
* It also fixes a second possible OOB access during EnqueueEvent.
- supersedes U_Xi-fix-potential-use-after-free-in-DeepCopyPointerCl.patch
-------------------------------------------------------------------
Thu Feb 2 15:39:06 UTC 2023 - Stefan Dirsch <sndirsch@suse.com>

View File

@ -33,7 +33,6 @@ Group: System/X11/Servers/XF86_4
Source0: %{url}/archive/individual/xserver/%{name}-%{version}.tar.xz
Source1: %{url}/archive/individual/xserver/%{name}-%{version}.tar.xz.sig
Source2: xwayland.keyring
Patch1207783: U_Xi-fix-potential-use-after-free-in-DeepCopyPointerCl.patch
BuildRequires: meson
BuildRequires: ninja