* XkbSetMap Out-Of-Bounds Access: Insufficient checks on the
lengths of the XkbSetMap request can lead to out of bounds
memory accesses in the X server. (ZDI-CAN 11572,
CVE-2020-14360, bsc#1174908)
- U_Fix-XkbSetDeviceInfo-and-SetDeviceIndicators-heap-ov.patch
* XkbSetDeviceInfo Heap-based Buffer Overflow: Insufficient
checks on input of the XkbSetDeviceInfo request can lead to a
buffer overflow on the head in the X server. (ZDI-CAN 11389,
CVE-2020-25712, bsc#1177596)
OBS-URL: https://build.opensuse.org/package/show/X11:XOrg/xorg-x11-server?expand=0&rev=782
* replace default config /etc/X11/Xwrapper, which allows
anybody to use the wrapper, by a patch for the code, i.e.
# rootonly, console, anybody
allowed_users=anybody
# yes, no, auto
needs_root_rights=auto
is now the default without any Xwrapper config
(needs_root_rights=auto was already the default before)
OBS-URL: https://build.opensuse.org/package/show/X11:XOrg/xorg-x11-server?expand=0&rev=780
- u_xorg-wrapper-Xserver-Options-Whitelist-Filter.patch
* replaced by improved version written by Matthias Gerstner of
our security team
+ simplified the option parsing code a bit
+ changed the "ignore forbidden argument" logic into an "abort
on forbidden argument" logic. This is safer and avoids
surprises on the user's end that could occur if the desired
command line arguments aren't effective but the Xorg server is
still started.
+ tried to adjust to the coding style present in the file
(mostly the function name)
+ added some logic to apply the option filtering only to
non-root users when Xorg is actually started as root. This
should allow for full flexibility if root calls the wrapper or
if the Xorg server only runs with user privileges.
- n_xorg-wrapper-rename-Xorg.patch
* moved Xorg to Xorg.bin and Xorg.sh to Xorg (boo#1175867)
- change default for needs_root_rights to auto in Xwrapper.config
(boo#1175867)
- reenabled SUID wrapper for TW (boo#1175867)
- u_xorg-wrapper-Xserver-Options-Whitelist-Filter.patch
* Xserver option whitelist filter (boo#1175867)
OBS-URL: https://build.opensuse.org/request/show/838619
OBS-URL: https://build.opensuse.org/package/show/X11:XOrg/xorg-x11-server?expand=0&rev=779
* Revert "dri2: Don't make reference to noClientException"
* dix: Check for NULL spriteInfo in GetPairedDevice
* os: Ignore dying client in ResetCurrentRequest
* modesetting: remove unnecessary error message, fix zaphod leases
* Fix building with `-fno-common`
* xwayland: clear pixmaps after creation in rootless mode
* glamor: Fix a compiler warning since the recent OOM fixes.
* Restrict 1x1 pixmap filling optimization to GXcopy
* Add xf86OSInputThreadInit to stub os-support as well
* Fix old-style definition warning for xf86OSInputThreadInit()
* xwayland/glamor-gbm: Handle DRM_FORMAT_MOD_INVALID gracefully
* configure: Define GLAMOR_HAS_EGL_QUERY_DRIVER when available
* modesetting: Disable atomic support by default
* modesetting: Explicitly #include "mi.h"
* xfree86/modes: Bail from xf86RotateRedisplay if pScreen->root is NULL
* xwayland: Split up xwl_screen_post_damage into two phases
* xwayland: Call glamor_block_handler from xwl_screen_post_damage
* xwayland: Add xwl_window_create_frame_callback helper
* xwayland: Use single frame callback for Present flips and normal updates
* xwayland: Use frame callbacks for Present vblank events
* xwayland: Delete all frame_callback_list nodes in xwl_unrealize_window
* glamor: Propagate FBO allocation failure for picture to texture upload
* glamor: Error out on out-of-memory when allocating PBO for FBO access
* glamor: Propagate glamor_prepare_access failures in copy helpers
* glamor: Fallback to system memory for RW PBO buffer allocation
- supersedes u_fno-common.patch
OBS-URL: https://build.opensuse.org/package/show/X11:XOrg/xorg-x11-server?expand=0&rev=761
* xserver 1.20.7
* ospoll: Fix Solaris ports implementation to build on Solaris 11.4
* os-support/solaris: Set IOPL for input thread too
* Add xf86OSInputThreadInit call from common layer into os-support layer
* Add ddxInputThread call from os layer into ddx layer
* os-support/solaris: Drop ExtendedEnabled global variable
* glamor: Only use dual blending with GLSL >= 1.30
* modesetting: Check whether RandR was initialized before calling rrGetScrPriv
* Xi: return AlreadyGrabbed for key grabs > 255
* xwayland: Do flush GPU work in xwl_present_flush
* modesetting: Clear new screen pixmap storage on RandR resize
* xfree86/modes: Call xf86RotateRedisplay from xf86CrtcRotate
* modesetting: Call glamor_finish from drmmode_crtc_set_mode
* modesetting: Use EGL_MESA_query_driver to select DRI driver if possible
* glamor: Add a function to get the driver name via EGL_MESA_query_driver
OBS-URL: https://build.opensuse.org/package/show/X11:XOrg/xorg-x11-server?expand=0&rev=755
- Update to version 1.20.6+0:
* xfree86: Test presence of isastream()
* present/wnmd: Relax assertion on CRTC on abort_vblank()
* os: Don't crash in AttendClient if the client is gone
* dix: Call SourceValidate before GetImage
* mi: Add a default no-op miSourceValidate
* compiler.h: Do not include sys/io.h on ARM with glibc
* xfree86: Call ScreenInit for protocol screens before GPU
screens
* modesetting:
- Implement ms_covering_randr_crtc() for ms_present_get_crtc()
- Fix ms_covering_crtc() segfault with non-xf86Crtc slave
OBS-URL: https://build.opensuse.org/request/show/750436
OBS-URL: https://build.opensuse.org/package/show/X11:XOrg/xorg-x11-server?expand=0&rev=751
which is available since release 435.xx:
0001-xsync-Add-resource-inside-of-SyncCreate-export-SyncC.patch,
0002-GLX-Add-a-per-client-vendor-mapping.patch,
0003-GLX-Use-the-sending-client-for-looking-up-XID-s.patch,
0004-GLX-Add-a-function-to-change-a-clients-vendor-list.patch,
0005-GLX-Set-GlxServerExports-major-minor-Version.patch
OBS-URL: https://build.opensuse.org/package/show/X11:XOrg/xorg-x11-server?expand=0&rev=742
- Update to version 1.20.1:
This bugfix release fixes several issues in RANDR, Xwayland, glamor, the
modesetting driver, and elsewhere.
- Packaging changes:
+ Adapt patch N_Install-Avoid-failure-on-wrapper-installation.patch to work
with the new version
+ Remove patch U_Xext-shm-Refuse-to-work-for-remote-clients.patch
+ Remove patch U_modesetting-use-drmmode_bo_import-for-rotate_fb.patch
+ Remove patch u_modesetting-Fix-cirrus-24bpp-breakage.patch
+ Remove patch U_exa-use-picturematchformat.patch
OBS-URL: https://build.opensuse.org/request/show/628980
OBS-URL: https://build.opensuse.org/package/show/X11:XOrg/xorg-x11-server?expand=0&rev=715
- Update to version 1.20.0:
New features:
+ RANDR 1.6, which enables leasing RANDR resources to a client for its
exclusive use (e.g. head mounted displays)
+ Depth 30 support in glamor and the modesetting driver
+ A meson-based build system, parallel to autotools
+ Pageflipping support for PRIME output sinks
+ OutputClass device matching for xorg.conf
+ Input grab and tablet support in Xwayland
- Remove upstream patches:
+ u_xorg-x11-server-reproducible.patch
Solved slightly different
+ u_os-inputthread-Force-unlock-when-stopping-thread.patch
+ u_xfree86-add-default-modes-for-16-9-and-16-10.patch
+ U_xwayland-Don-t-process-cursor-warping-without-an-xwl.patch
+ U_xwayland-Give-up-cleanly-on-Wayland-socket-errors.patch
+ U_xwayland-avoid-race-condition-on-new-keymap.patch
+ U_xwayland-remove-dirty-window-unconditionally-on-unre.patch
- Adapt patches to work with the new release:
+ N_zap_warning_xserver.diff
+ N_fix_fglrx_screendepth_issue.patch
+ n_xserver-optimus-autoconfig-hack.patch
+ u_Use-better-fallbacks-to-generate-cookies-if-arc4rand.patch
+ u_xorg-wrapper-build-Build-position-independent-code.patch
OBS-URL: https://build.opensuse.org/request/show/610640
OBS-URL: https://build.opensuse.org/package/show/X11:XOrg/xorg-x11-server?expand=0&rev=702
