51a11c42c6- Update to version 24.1.7: * This release contains the fixes for the issues reported in today's security advisory: https://lists.x.org/archives/xorg/2025-June/062055.html CVE-2025-49175, CVE-2025-49176, CVE-2025-49177, CVE-2025-49178, CVE-2025-49179, CVE-2025-49180. * Additionally, this release includes several other various fixes. * Drop patches fixed upstream: - U_CVE-2025-49175-render-Avoid-0-or-less-animated-cursors.patch - U_CVE-2025-49176-os-Do-not-overflow-the-integer-size-with-BigRequest.patch - U_CVE-2025-49177-xfixes-Check-request-length-for-SetClientDisconnectM.patch - U_CVE-2025-49178-os-Account-for-bytes-to-ignore-when-sharing-input-bu.patch - U_CVE-2025-49179-record-Check-for-overflow-in-RecordSanityCheckRegist.patch - U_CVE-2025-49180-randr-Check-for-overflow-in-RRChangeProviderProperty.patchStefan Dirsch2025-06-18 02:44:17 +00:00
64a4180db5- U_CVE-2025-49175-render-Avoid-0-or-less-animated-cursors.patch * Out-of-bounds access in X Rendering extension (Animated cursors) (CVE-2025-49175, bsc#1244082) - U_CVE-2025-49176-os-Do-not-overflow-the-integer-size-with-BigRequest.patch * Integer overflow in Big Requests Extension (CVE-2025-49176, bsc#1244084) - U_CVE-2025-49177-xfixes-Check-request-length-for-SetClientDisconnectM.patch * Data leak in XFIXES Extension 6 (XFixesSetClientDisconnectMode) (CVE-2025-49177, bsc#1244085) - U_CVE-2025-49178-os-Account-for-bytes-to-ignore-when-sharing-input-bu.patch * Unprocessed client request via bytes to ignore (CVE-2025-49178, bsc#1244087) - U_CVE-2025-49179-record-Check-for-overflow-in-RecordSanityCheckRegist.patch * Integer overflow in X Record extension (CVE-2025-49179, bsc#1244089) - U_CVE-2025-49180-randr-Check-for-overflow-in-RRChangeProviderProperty.patch * Integer overflow in RandR extension (RRChangeProviderProperty) (CVE-2025-49180, bsc#1244090)Stefan Dirsch2025-06-17 14:17:13 +00:00
87cc4ccb4a- Update to 24.1.5 * os: NextDPMSTimeout: mark intentional fallthroughs in switch * Xi: avoid NULL pointer dereference if GetXTestDevice returns NULL * render: avoid NULL pointer dereference if PictureFindVisual returns NULL * dix: fix button offset when generating DeviceButtonStateNotify events * dix: limit checks to MAX_VALUATORS when generating Xi events * dix-config.h: add HAVE_SOCKLEN_T definition * xwayland: copy repeat settings from the compositor map * xwayland: Don't run key behaviors and actions * xwayland/glamor/gbm: Don't close fence_fd after xwl_glamor_wait_fence * xwayland/present: Check allow_commits in xwl_present_flip * xwayland/glamor: Drop expecting_event bailing from xwl_drm_handle_device * xwayland: Always decrement expecting_event in xwl_output_create * xwayland/glamor: Clean-up GBM's screen private on failure * xwayland: Do not keep the cursor's pixmap around * xkb: Always use MAP_LENGTH keymap size * os/connection: Make sure partial is initialized * xwayland/glamor: Disable GLAMOR after GBM cleanup * glamor: return the result of gbm_format_for_depth * glamor: use gbm_format_for_depth instead of open-coding it * glamor: reject configs using unsupported rgbBits size * xwayland: prevent potential null pointer dereferenceStefan Dirsch2025-02-06 12:00:25 +00:00
978db30820- Update to bugfix release 24.1.3 * dix: check for calloc() failure in Xi event conversion routines * dix: PolyText: fully initialize local_closure * dix: SetFontPath: don't set errorValue on Success * dix: enterleave.c: fix implicit fallthrough warnings * dix: CreateScratchGC: avoid dereference of pointer we just set to NULL * dix: InitPredictableAccelerationScheme: avoid memory leak on failure * dix: dixChangeWindowProperty: don't call memcpy if malloc failed * dix: ProcListProperties: skip unneeded work if numProps is 0 * dix: HashResourceID: use unsigned integers for bit shifting * dix: GetPairedDevice: check if GetMaster returned NULL * dix: FindBestPixel: fix implicit fallthrough warning * CI: clone libdecor from fd.o instead of gnome.org * CI: update libdecor from 0.1.0 to 0.1.1 * Don't crash if the client argv or argv[0] is NULL. * Return NULL in *cmdname if the client argv or argv[0] is NULL * xwayland: connect to the wl display before calling into EGL * xwayland: Report correct mode size when rootful * build: Move epoll dependency check * build: Add epoll to Xwayland for DragonFly and OpenBSD * build: Fix DRI3 on DragonFly and OpenBSD * os: Fix NULL pointer dereference * dix: don't push the XKB state to a non-existing master keyboard * Xi: when removing a master search for a disabled paired deviceStefan Dirsch2024-10-03 21:42:39 +00:00
7d3a990aeb- added conflicts to patterns-wsl-tmpfiles as this patterns package creates a symlink from /tmp/.X11-unix to /mnt/wslg/.X11-unix and therefore prevents Xwayland from creating this needed directory (bsc#1230755)Stefan Dirsch2024-09-24 11:35:15 +00:00
97cf98874f- Update to bugfix release 24.1.2 * This release addresses several issues, including the first events being skipped with input emulation using libEI or a fix with rendering using the UYVY format with the X-Video extension using GLAMOR.Stefan Dirsch2024-08-24 20:22:35 +00:00
0347c75e71- added version specific reqirements for dri3proto, presentproto and wayland-protocolsStefan Dirsch2024-07-11 14:58:48 +00:00
bba0a49d3c- Update to bugfix release 24.1.1 for the current stable 24.1 branch of Xwayland * xwayland: fix segment fault in xwl_glamor_gbm_init_main_dev * os: Explicitly include X11/Xmd.h for CARD32 definition to fix building on i686 * present: On *BSD, epoll-shim is needed to emulate eventfd() * xwayland: Stop on first unmapped child * xwayland/window-buffers: Promote xwl_window_buffer * xwayland/window-buffers: Add xwl_window_buffer_release() * xwayland/glamor/gbm: Copy explicit sync code to GLAMOR/GBM * xwayland/window-buffers: Use synchronization from GLAMOR/GBM * xwayland/window-buffers: Do not always set syncpnts * xwayland/window-buffers: Move code to submit pixmaps * xwayland/window-buffers: Set syncpnts for all pixmaps * xwayland: Move xwl_window disposal to its own function * xwayland: Make sure we do not leak xwl_window on destroy * wayland/window-buffers: Move buffer disposal to its own function * xwayland/window-buffers: optionally force disposal * wayland: Force disposal of windows buffers for root on destroy * xwayland: Check for pointer in xwl_seat_leave_ptr() * xwayland: remove includedir from pkgconfigStefan Dirsch2024-07-11 11:50:33 +00:00
031b5c0117- Update to feature release 24.1.0 * This fixes a couple of regressions introduced in the previous release candidate versions along with a fix for XTEST emulation with EI. + xwayland: Send ei_device_frame on device_scroll_discrete + xwayland: Restore the ResizeWindow handler + xwayland: Handle rootful resize in ResizeWindow + xwayland: Move XRandR emulation to the ResizeWindow hook + xwayland: Use correct xwl_window lookup function in xwl_set_shape - eglstreams has been droppedStefan Dirsch2024-05-15 17:31:00 +00:00
fd199c49b1- Update to bug fix relesae 23.2.7 * m4: drop autoconf leftovers * xwayland: Send ei_device_frame on device_scroll_discrete * xwayland: Call drmFreeDevice for dma-buf default feedback * xwayland: Use drmDevicesEqual in xwl_dmabuf_feedback_tranche_done * dri3: Free formats in cache_formats_and_modifiers * xwayland/glamor: Handle depth 15 in gbm_format_for_depth * Revert "xwayland/glamor: Avoid implicit redirection with depth 32 parent windows" * xwayland: Check for outputs before lease devices * xwayland: Do not remove output on withdraw if leasedStefan Dirsch2024-05-15 17:19:20 +00:00
c1103fbb35- Update to 23.2.6 * This is a quick bug fix release to address a regression introduced by the fix for CVE-2024-31083 in xwayland-23.2.5.Stefan Dirsch2024-04-09 13:32:39 +00:00
522e0129f9- Security update 23.2.5 This release contains the 3 security fixes that actually apply to Xwayland reported in the security advisory of April 3rd 2024 * CVE-2024-31080 * CVE-2024-31081 * CVE-2024-31083 Additionally, it also contains a couple of other fixes, a copy/paste error in the DeviceStateNotify event and a fix to enable buttons with pointer gestures for backward compatibility with legacy X11 clients.Stefan Dirsch2024-04-04 08:12:55 +00:00
cabd027c81- This release contains also the following patches mentioned in previous sle15 releases * bsc1218582-0001-dix-allocate-enough-space-for-logical-button-maps.patch * bsc1218583-0001-dix-Allocate-sufficient-xEvents-for-our-DeviceStateN.patch * bsc1218583-0002-dix-fix-DeviceStateNotify-event-calculation.patch * bsc1218583-0003-Xi-when-creating-a-new-ButtonClass-set-the-number-of.patch * bsc1218584-0001-Xi-flush-hierarchy-events-after-adding-removing-mast.patch * bsc1218585-0001-Xi-do-not-keep-linked-list-pointer-during-recursion.patch * bsc1218585-0002-dix-when-disabling-a-master-float-disabled-slaved-de.patchStefan Dirsch2024-01-17 10:23:42 +00:00
5fb8e89688- This release contains also the missing fixes of initial U_bsc1217765-Xi-allocate-enough-XkbActions-for-our-buttons.patch (bsc#1217765)Stefan Dirsch2024-01-16 21:10:37 +00:00
052ab588dd- Update to version 23.2.4 * This release contains fixes for the issues reported in today's security advisory: https://lists.x.org/archives/xorg/2024-January/061525.html * CVE-2023-6816 (bsc#1218582) * CVE-2024-0229 (bsc#1218583) * CVE-2024-21885 (bsc#1218584) * CVE-2024-21886 (bsc#1218585) * CVE-2024-0408 * CVE-2024-0409 - supersedes the patches mentioned below: * U_bsc1217765-Xi-allocate-enough-XkbActions-for-our-buttons.patch * U_bsc1217766-randr-avoid-integer-truncation-in-length-check-of-Pr.patchStefan Dirsch2024-01-16 13:24:49 +00:00
a607c3c14a- This release contains the following patches mentioned in previous sle15 releases * U_Xext-fix-invalid-event-type-mask-in-XTestSwapFakeInp.patch: fixes regression introduced with security update for CVE-2022-46340 (bsc#1205874) * U_bsc1216135-Xi-randr-fix-handling-of-PropModeAppend-Prepend.patch: fix handling of PropModeAppend/Prepend ((CVE-2023-5367, ZDI-CAN-22153, bsc#1216135) * U_bsc1216261-0001-mi-fix-CloseScreen-initialization-order.patch, U_bsc1216261-0002-fb-properly-wrap-unwrap-CloseScreen.patch: Server Damage Object Use-After-Free Local Privilege Escalation Vulnerability (CVE-2023-5574, ZDI-CAN-21213, bsc#1216261) * U_bsc1216261-0003-dix-always-initialize-pScreen-CloseScreen.patch: fixes a regresion, which can trigger a segfault in Xwayland on exit, introduced by U_bsc1216261-0002-fb-properly-wrap-unwrap-CloseScreen.patch (CVE-2023-5574, ZDI-CAN-21213, bsc#1216261)Stefan Dirsch2023-11-24 10:37:02 +00:00
d0b2a94624- Update to version 23.2.2 * This release contains the fix for CVE-2023-5367 in today's security advisory: https://lists.x.org/archives/xorg-announce/2023-October/003430.html Xwayland does not support multiple protocol screens (Zaphod) and is thus not affected by CVE-2023-5380. * Additionally, there is a change in the default behaviour of Xwayland: Since version 23.2.0 Xwayland (via liboeffis) automatically tries to connect to the XDG Desktop Portal's RemoteDesktop interface to obtain the EI socket. That socket is used to send XTest events to the compositor. * However, the connection to the session-wide Portal is unsuitable when Xwayland is running in a nested compositor. Xwayland cannot tell whether it's running on a nested compositor and to keep backwards compatibility with Xwayland prior to 23.2.0, Xwayland must now be started with "-enable-ei-portal" to connect to the portal. * Compositors (who typically spawn Xwayland rootless) must now pass this option to get the same behaviour as 23.2.x. * Finally, Xwayland now uses libbsd-overlay instead of libbsd.Stefan Dirsch2023-10-25 10:54:37 +00:00
fb0adef406- Update to version 23.2.1: * glamor: Ignore destination alpha as necessary for composite operation * xtest: Check whether there is a sendEventsProc to call - supersedes xwayland-glamor-Ignore-destination-alpha-as-necessary-for-com.patchStefan Dirsch2023-09-20 09:00:14 +00:00
3ebebb9666Accepting request 1112032 from home:jtorres:branches:X11:XOrgStefan Dirsch2023-09-18 15:56:38 +00:00
2fe614940a- Update to version 23.1.2 * This release includes improved DMA-BUF v4 feedback support for direct scanout, relaxed CVT modes for non-standard modes, fixes for the CHERI/Morello platform and other various fixes.Stefan Dirsch2023-06-10 11:25:39 +00:00
179bde64cb- Update to version 22.1.8 * This release contains the fix for CVE-2023-0494 in today's security advisory: https://lists.x.org/archives/xorg-announce/2023-February/003320.html * It also fixes a second possible OOB access during EnqueueEvent. - supersedes U_Xi-fix-potential-use-after-free-in-DeepCopyPointerCl.patchStefan Dirsch2023-02-07 14:32:28 +00:00
cd5cddf487- improved summary and description - added requires to xkeyboard-config - added recommends to xorg-x11-fonts-core - removed unused 'package' sectionStefan Dirsch2023-02-07 02:57:30 +00:00
d812376723- Update to version 22.1.7 * This release fixes an invalid event type mask in XTestSwapFakeInput which was inadvertently changed from octal 0177 to hexadecimal 0x177 in the fix for CVE-2022-46340.Stefan Dirsch2022-12-31 16:10:29 +00:00
857973a615Accepting request 1043174 from home:iznogood:branches:X11:XOrgStefan Dirsch2022-12-31 13:06:57 +00:00
c2484d7746- Update to version 22.1.4 * xwayland: Aggregate scroll axis events to fix kinetic scrolling * Forbid server grabs by non-WM on *rootless* XWayland * xkb: Avoid length-check failure on empty strings. * ci: remove redundant slash in libxcvt repository url * dix: Skip more code in SetRootClip for ROOT_CLIP_INPUT_ONLY * dix: Fix overzealous caching of ResourceClientBits() * xwayland: Prevent Xserver grabs with rootless * xwayland: Delay wl_surface destruction * build: Bump wayland requirement to 1.18 * xwayland: set tag on our surfaces * xwayland: Clear the "xwl-window" tag on unrealize * xwayland: correct the type for the discrete scroll events * xkb: fix some possible memleaks in XkbGetKbdByName * xkb: length-check XkbGetKbdByName before accessing the fields * xkb: length-check XkbListComponents before accessing the fields * xkb: proof GetCountedString against request length attacks - supersedes security patches: * U_xkb-fix-some-possible-memleaks-in-XkbGetKbdByName.patch * U_xkb-proof-GetCountedString-against-request-length-at.patchStefan Dirsch2022-10-20 12:00:58 +00:00
c29ec06029- Update to version 22.1.3 * os: print <signal handler called> if unw_is_signal_frame() * os: print registers in the libunwind version of xorg_backtrace() * xwayland/present: Do not send two idle notify events for flip pixmaps * xwayland: Fix check logic in sprite_check_lost_focus() * xwayland: Change randr_output status when call xwl_output_remove() * xkb: switch to array index loops to moving pointers * xkb: swap XkbSetDeviceInfo and XkbSetDeviceInfoCheck * xkb: add request length validation for XkbSetGeometryStefan Dirsch2022-07-12 14:36:42 +00:00
0e4abd719c- Update to version 22.1.1 * xwayland: Clear timer_armed in xwl_present_unrealize_window * xwayland: Always hook up frame_callback_list in xwl_present_queue_vblank * Xwayland: Do not map the COW by default when rootless * xwayland/present: Fix use-after-free in xwl_unrealize_window()Stefan Dirsch2022-03-31 09:39:46 +00:00
208189730c- Update to version 21.1.4 * Fixes for multiple input validation failures in X server extensions: + CVE-2021-4008/ZDI-CAN-14192 SProcRenderCompositeGlyphs out-of-bounds access (boo#1193030) + CVE-2021-4009/ZDI-CAN 14950 SProcXFixesCreatePointerBarrier out-of-bounds access (boo#1190487) + CVE-2021-4010/ZDI-CAN-14951 SProcScreenSaverSuspend out-of-bounds access (boo#1190488) + CVE-2021-4011/ZDI-CAN-14952 SwapCreateRegister out-of-bounds access (boo#1190489) * This release also includes other fixes such as: + Store EGLcontext to avoid superfluous eglMakeCurrent() calls + Prefer EGLStream with NVIDIA proprietary driver if both GBM and EGLstream are availableStefan Dirsch2021-12-14 15:52:17 +00:00
d7a635924e- Update to version 21.1.3 * Most notable change is a fix for the GBM backend to work with the Nvidia driver series 495. - supersedes U_glamor-Fix-handling-of-1-bit-pixmaps.patchStefan Dirsch2021-11-08 11:52:57 +00:00
Adrian Schröter
Ana Guerrero
Stefan Dirsch
Dominique Leuenberger
Joan Torres