BSD Commit Log Search

   update

   Merge fixes from upstream for multiple Xserver issues:
   * CVE-2026-33999: XKB Integer Underflow in XkbSetCompatMap()
   * CVE-2026-34000: XKB Out-of-bounds Read in CheckSetGeom()
   * CVE-2026-34001: XSYNC Use-after-free in miSyncTriggerFence()
   * CVE-2026-34002: XKB Out-of-bounds read in CheckModifierMap()
   * CVE-2026-34003: XKB Buffer overflow in CheckKeyTypes()
   from matthieu@

   this is errata/7.7/034_xserver.patch.sig

   Merge fixes from upstream for multiple Xserver issues:
   * CVE-2026-33999: XKB Integer Underflow in XkbSetCompatMap()
   * CVE-2026-34000: XKB Out-of-bounds Read in CheckSetGeom()
   * CVE-2026-34001: XSYNC Use-after-free in miSyncTriggerFence()
   * CVE-2026-34002: XKB Out-of-bounds read in CheckModifierMap()
   * CVE-2026-34003: XKB Buffer overflow in CheckKeyTypes()
   from matthieu@

   this is errata/7.8/028_xserver.patch.sig

   Merge fixes from upstream for multiple Xserver issues:
    * CVE-2026-33999: XKB Integer Underflow in XkbSetCompatMap()
    * CVE-2026-34000: XKB Out-of-bounds Read in CheckSetGeom()
    * CVE-2026-34001: XSYNC Use-after-free in miSyncTriggerFence()
    * CVE-2026-34002: XKB Out-of-bounds read in CheckModifierMap()
    * CVE-2026-34003: XKB Buffer overflow in CheckKeyTypes()

   update

   Update to libpng 1.6.57. ok deraadt@, naddy@, tb@

   Security fixe for CVE-2026-34757

   update

   sync

   stop installing libgbm.a everything should be using libgbm.so
   ok tb@ matthieu@

   update

   Update to libpng 1.6.56 ok tb@

   Security fixes for CVE-2026-33416 and CVE-2026-33636

   No need to set soname.  Wasn't set by autotools or meson builds.

   update

   sync

   update to xf86-video-amdgpu 25.0.0

   tested by matthieu and myself on multiple machines

   set metaSendsEscape by default. In UTF-8 mode the high bit would be
   interpreted in a latin-1 fashion, before being converted into its UTF-8
   equivalent, resulting in a character, instead of a Meta-combination.

   OK helg@, op@, sthen@, matthieu@

   Backport security fixes from freetype 2.14.2.
   Prevent an integer overflow leading to out-of-bounds read.
   CVE-2026-23865
   from matthieu@

   this is errata/7.7/026_freetype.patch.sig

   Backport security fixes from freetype 2.14.2.
   Prevent an integer overflow leading to out-of-bounds read.
   CVE-2026-23865
   from matthieu@

   this is errata/7.8/020_freetype.patch.sig

   update

   Update to xcalc 1.1.3

   Update to xauth 1.1.5

   Update to xconsole 1.1.0

   Update to xfd 1.1.5

   Update to freetype 2.14.2. tested by rsadowski@
   includes fix for CVE-2026-23865 (Prevent an integer overflow
   leading to out-of-bounds read)

   Fix variable substitution in target install-headers-subdirs.
   There may be more than one subdir level.
   Note this target is currently unused in xenocara.

   update

   update to bitmap 1.1.2

   Update to libXrandr 1.5.5

   Update to libXpm 3.5.18

   sync