OpenBSD / xenocara

Source

Committer

Branches

Tags ▶

Merges

Sort

OpenBSD/xenocara Aq9YfW0 — lib/libX11/modules/im/ximcp imDefLkup.c, lib/libXi/src XIQueryDevice.c XQueryDv.c

2026-11-04 15:11:34 UTC by bluhm on ⎇

OPENBSD_8_0

   Merge fixes from upstream for X client library issues:
   * CVE-2026-88806: libX11 xkb: Check the keysym range in _XkbReadKeyActions
   * CVE-2026-94283: libX11 ximcp: bound XIM_OPEN_REPLY attribute lengths
   * CVE-2026-94284: libX11 ximcp: bound XIM_REGISTER_TRIGGERKEYS keylist lengths
   * CVE-2026-94285: libX11 lcGenConv: bound byteM_parse_codeset() reads
   * CVE-2026-93541: libXi XQueryDeviceState: check ValuatorClass num_valuators
   * CVE-2026-93542: libXi size_classes/copy_classes: bound XI2 class lengths
   * CVE-2026-93543: libXi size_classes/copy_classes: enforce XI2 class sizes
   * CVE-2026-93544: libXi XIQueryDevice: keep padded name and class bytes
   * CVE-2026-93545: libXi XListInputDevices: validate device name lengths
   * CVE-2026-94281: libXi XListInputDevices: validate class lengths
   * CVE-2026-94282: libXi wireToEnterLeave: validate buttons_len
   * CVE-2026-109089: libXi XGetDeviceControl: reply control must match request
   * CVE-2026-109090: libXi XGetDeviceControl: size DEVICE_ENABLE replies
   * CVE-2026-94287: libXpm ParsePixels: reject zero-dimension XPM images
   * CVE-2026-88807: libXrender: Check numSubpixel against numScreens
   * CVE-2026-94286: libXtst parse_reply_call_callback: check element size
   * CVE-2026-109088: libXtst parse_reply_call_callback: reject zero progress
   from matthieu@

    [2 lines not shown]

Version	Delta		File
1.20.2.1	+282	-58	lib/libXi/src/XExtInt.c
1.9.40.1	+67	-20	lib/libXi/src/XListDev.c
1.7.40.1	+41	-9	lib/libXi/src/XQueryDv.c
1.8.8.1	+24	-7	lib/libXi/src/XIQueryDevice.c
1.8.10.1	+26	-4	lib/libXtst/src/XRecord.c
1.13.2.1	+20	-9	lib/libX11/modules/im/ximcp/imDefLkup.c
	+460	-107	8 files not shown
	+517	-120	14 files

OpenBSD/xenocara bhG7Erb — lib/libX11/modules/im/ximcp imDefLkup.c, lib/libXi/src XIQueryDevice.c XQueryDv.c

2026-11-04 15:09:32 UTC by bluhm on ⎇

OPENBSD_7_9

   Merge fixes from upstream for X client library issues:
   * CVE-2026-88806: libX11 xkb: Check the keysym range in _XkbReadKeyActions
   * CVE-2026-94283: libX11 ximcp: bound XIM_OPEN_REPLY attribute lengths
   * CVE-2026-94284: libX11 ximcp: bound XIM_REGISTER_TRIGGERKEYS keylist lengths
   * CVE-2026-94285: libX11 lcGenConv: bound byteM_parse_codeset() reads
   * CVE-2026-93541: libXi XQueryDeviceState: check ValuatorClass num_valuators
   * CVE-2026-93542: libXi size_classes/copy_classes: bound XI2 class lengths
   * CVE-2026-93543: libXi size_classes/copy_classes: enforce XI2 class sizes
   * CVE-2026-93544: libXi XIQueryDevice: keep padded name and class bytes
   * CVE-2026-93545: libXi XListInputDevices: validate device name lengths
   * CVE-2026-94281: libXi XListInputDevices: validate class lengths
   * CVE-2026-94282: libXi wireToEnterLeave: validate buttons_len
   * CVE-2026-109089: libXi XGetDeviceControl: reply control must match request
   * CVE-2026-109090: libXi XGetDeviceControl: size DEVICE_ENABLE replies
   * CVE-2026-94287: libXpm ParsePixels: reject zero-dimension XPM images
   * CVE-2026-88807: libXrender: Check numSubpixel against numScreens
   * CVE-2026-94286: libXtst parse_reply_call_callback: check element size
   * CVE-2026-109088: libXtst parse_reply_call_callback: reject zero progress
   from matthieu@

    [2 lines not shown]

Version	Delta		File
1.19.6.1	+282	-58	lib/libXi/src/XExtInt.c
1.9.38.1	+67	-20	lib/libXi/src/XListDev.c
1.7.38.1	+41	-9	lib/libXi/src/XQueryDv.c
1.8.6.1	+24	-7	lib/libXi/src/XIQueryDevice.c
1.8.8.1	+26	-4	lib/libXtst/src/XRecord.c
1.12.8.1	+20	-9	lib/libX11/modules/im/ximcp/imDefLkup.c
	+460	-107	8 files not shown
	+517	-120	14 files

OpenBSD/xenocara HFQZDTx — . 3RDPARTY

2026-10-28 21:23:31 UTC by matthieu on ⎇

HEAD

   update

Version	Delta		File
1.475	+3	-3	3RDPARTY
	+3	-3	1 files

OpenBSD/xenocara EdgftFd — app/xlockmore/modes marquee.c

2026-10-28 19:51:08 UTC by matthieu on ⎇

HEAD

   Replace memcpy() by memmove() for overlapping buffers copies.
   Reported by Dirk-Wilhelm Peters, ok claudio@

Version	Delta		File
1.2	+2	-2	app/xlockmore/modes/marquee.c
	+2	-2	1 files

OpenBSD/xenocara iJ2nVCQ — app/ssh-askpass resources.c

2026-10-24 22:33:03 UTC by dtucker on ⎇

HEAD

   Replace unchecked buffer copy used to implement case insensitive boolean
   resource handling with strcasecmp().  ok matthieu@

Version	Delta		File
1.4	+15	-14	app/ssh-askpass/resources.c
	+15	-14	1 files

OpenBSD/xenocara XUVJ3el — app/ssh-askpass x11-ssh-askpass.c

2026-10-24 22:27:57 UTC by dtucker on ⎇

HEAD

   Don't deref an initial null label.  ok matthieu@

Version	Delta		File
1.12	+6	-8	app/ssh-askpass/x11-ssh-askpass.c
	+6	-8	1 files

OpenBSD/xenocara lhaZ9aL — app/ssh-askpass x11-ssh-askpass.h x11-ssh-askpass.c

2026-10-24 22:26:48 UTC by dtucker on ⎇

HEAD

   Check strdup for failure before using.  ok matthieu@

Version	Delta		File
1.11	+13	-9	app/ssh-askpass/x11-ssh-askpass.c
1.6	+2	-2	app/ssh-askpass/x11-ssh-askpass.h
	+15	-11	2 files

OpenBSD/xenocara 8W3xapx — app/ssh-askpass dynlist.h dynlist.c

2026-10-24 22:25:00 UTC by dtucker on ⎇

HEAD

   Remove append_to_list as it's unused.  ok matthieu@

Version	Delta		File
1.3	+0	-25	app/ssh-askpass/dynlist.c
1.3	+0	-1	app/ssh-askpass/dynlist.h
	+0	-26	2 files

OpenBSD/xenocara 7Dr8p1M — app/ssh-askpass x11-ssh-askpass.c

2026-10-24 22:22:11 UTC by dtucker on ⎇

HEAD

   Use explicit_bzero passphrase on exit and delete.  ok matthieu@

Version	Delta		File
1.10	+3	-1	app/ssh-askpass/x11-ssh-askpass.c
	+3	-1	1 files

OpenBSD/xenocara ae0LCpq — app/ssh-askpass x11-ssh-askpass.c

2026-10-24 22:20:49 UTC by dtucker on ⎇

HEAD

   Add missing break after MotionNotify.  ok matthieu@

Version	Delta		File
1.9	+1	-0	app/ssh-askpass/x11-ssh-askpass.c
	+1	-0	1 files

OpenBSD/xenocara caOdRzq — app/ssh-askpass SshAskpass-1337.ad TODO

2026-10-18 08:18:00 UTC by matthieu on ⎇

HEAD

   Reduce diffs with upstreams. Comments and other aux files with
   no impact on the code. Most remaining diffs needs to be sent upstream.

Version	Delta		File
1.3	+205	-25	app/ssh-askpass/Imakefile
1.2	+84	-0	app/ssh-askpass/ChangeLog
1.2	+38	-16	app/ssh-askpass/README
1.7	+3	-5	app/ssh-askpass/x11-ssh-askpass.man.in
1.2	+4	-3	app/ssh-askpass/TODO
1.2	+3	-3	app/ssh-askpass/SshAskpass-1337.ad
	+337	-52	12 files not shown
	+364	-79	18 files

OpenBSD/xenocara 4BJnQhF — . 3RDPARTY

2026-10-18 07:46:58 UTC by matthieu on ⎇

HEAD

   It's spelled x11-ssh-askpass

Version	Delta		File
1.474	+2	-2	3RDPARTY
	+2	-2	1 files

OpenBSD/xenocara rs5NMsz — . 3RDPARTY

2026-10-18 07:36:44 UTC by matthieu on ⎇

HEAD

   New home for ssh-ask-pass

Version	Delta		File
1.473	+3	-3	3RDPARTY
	+3	-3	1 files

OpenBSD/xenocara vjNtXgo — . MODULES 3RDPARTY

2026-10-17 16:52:28 UTC by matthieu on ⎇

HEAD

   update

Version	Delta		File
1.472	+9	-9	3RDPARTY
1.574	+5	-5	MODULES
	+14	-14	2 files

OpenBSD/xenocara 2Sn3FQg — app/xterm menu.c charproc.c

2026-10-17 16:24:18 UTC by matthieu on ⎇

HEAD

   Update to xterm 412

Version	Delta		File
1.52	+873	-418	app/xterm/util.c
1.18	+333	-285	app/xterm/wcwidth.c
1.42	+220	-192	app/xterm/screen.c
1.23	+109	-41	app/xterm/cachedGCs.c
1.63	+78	-39	app/xterm/charproc.c
1.41	+73	-18	app/xterm/menu.c
	+1,686	-993	37 files not shown
	+2,156	-1,165	43 files

OpenBSD/xenocara QUQRqS1 — lib/libXtst Makefile.in configure, lib/libXtst/src Makefile.in

2026-10-17 16:23:38 UTC by matthieu on ⎇

HEAD

   Update to libXtst 1.2.6

Version	Delta		File
1.4	+206	-202	lib/libXtst/depcomp
1.4	+144	-259	lib/libXtst/missing
1.18	+157	-203	lib/libXtst/aclocal.m4
1.20	+76	-154	lib/libXtst/configure
1.13	+120	-102	lib/libXtst/Makefile.in
1.13	+93	-60	lib/libXtst/src/Makefile.in
	+796	-980	11 files not shown
	+1,051	-1,060	17 files

OpenBSD/xenocara 4fUGVUb — lib/libXrender meson.build Makefile.in, lib/libXrender/src Makefile.in

2026-10-17 16:22:50 UTC by matthieu on ⎇

HEAD

   Update to libXrender 0.9.13

Version	Delta		File
1.4	+206	-202	lib/libXrender/depcomp
1.4	+144	-259	lib/libXrender/missing
1.18	+136	-103	lib/libXrender/aclocal.m4
1.15	+123	-106	lib/libXrender/Makefile.in
1.12	+93	-60	lib/libXrender/src/Makefile.in
1.1	+118	-0	lib/libXrender/meson.build
	+820	-730	12 files not shown
	+978	-769	18 files

OpenBSD/xenocara UCla2yj — lib/libXpm configure.ac compile, lib/libXpm/src parse.c

2026-10-17 16:22:03 UTC by matthieu on ⎇

HEAD

   Update to libXpm 3.5.20

Version	Delta		File
1.13	+63	-0	lib/libXpm/ChangeLog
1.22	+10	-10	lib/libXpm/configure
1.7	+6	-3	lib/libXpm/compile
1.13	+1	-4	lib/libXpm/src/parse.c
1.14	+1	-1	lib/libXpm/configure.ac
	+81	-18	5 files

OpenBSD/xenocara ioWr7Gm — lib/libXi ChangeLog, lib/libXi/include/X11/extensions XInput.h

2026-10-17 16:21:21 UTC by matthieu on ⎇

HEAD

   Update to libXi 1.8.4

Version	Delta		File
1.4	+336	-336	lib/libXi/specs/library.xml
1.24	+418	-8	lib/libXi/ChangeLog
1.21	+327	-68	lib/libXi/src/XExtInt.c
1.10	+71	-21	lib/libXi/src/XListDev.c
1.3	+26	-26	lib/libXi/include/X11/extensions/XInput.h
1.8	+41	-9	lib/libXi/src/XQueryDv.c
	+1,219	-468	93 files not shown
	+1,543	-761	99 files

OpenBSD/xenocara HcPG2IV — lib/libX11 README.md configure, lib/libX11/modules/im/ximcp imRmAttr.c imDefLkup.c

2026-10-17 16:20:25 UTC by matthieu on ⎇

HEAD

   Update to libX11 1.8.14

Version	Delta		File
1.33	+313	-0	lib/libX11/ChangeLog
1.14	+20	-9	lib/libX11/modules/im/ximcp/imDefLkup.c
1.14	+23	-3	lib/libX11/modules/im/ximcp/imRmAttr.c
1.43	+10	-10	lib/libX11/configure
1.10	+17	-0	lib/libX11/README.md
1.19	+13	-2	lib/libX11/src/xcb_io.c
	+396	-24	15 files not shown
	+439	-42	21 files

OpenBSD/xenocara biYX2La — distrib/sets/lists/xbase mi

2026-10-17 16:17:55 UTC by matthieu on ⎇

HEAD

   sync

Version	Delta		File
1.165	+1	-1	distrib/sets/lists/xbase/mi
	+1	-1	1 files

OpenBSD/xenocara DhfC6jZ — lib/freetype ChangeLog, lib/freetype/src/hvf hvfload.c hvfdrv.c

2026-10-17 16:17:20 UTC by matthieu on ⎇

HEAD

   Update to freetype 2.15.0

Version	Delta		File
1.1	+3,774	-0	lib/freetype/src/truetype/ttvarc.c
1.44	+1,846	-0	lib/freetype/ChangeLog
1.36	+779	-41	lib/freetype/src/sfnt/ttcmap.c
1.1	+723	-0	lib/freetype/src/hvf/hvfdrv.c
1.34	+483	-156	lib/freetype/src/truetype/ttgxvar.c
1.1	+610	-0	lib/freetype/src/hvf/hvfload.c
	+8,215	-197	114 files not shown
	+13,492	-1,152	120 files

OpenBSD/xenocara Z1MZRAy — . MODULES

2026-10-11 16:09:12 UTC by matthieu on ⎇

HEAD

   update

Version	Delta		File
1.573	+9	-9	MODULES
	+9	-9	1 files

OpenBSD/xenocara ku3ZQf1 — app/xlockmore/xlock xlock.c

2026-10-11 14:48:18 UTC by deraadt on ⎇

HEAD

   xlock is setgid (auth), but does not use the bsd.prog.mk build infrastructure,
   so it needs manual definition of "mode_t _permit_setugid = S_ISGID". The other
   setgid program in X11R6 is xterm (group utmp), but it is built using bsd.prog.mk
   and automatically picks up the _permit_setugid variable.

Version	Delta		File
1.6	+4	-0	app/xlockmore/xlock/xlock.c
	+4	-0	1 files

OpenBSD/xenocara 7iG3dIM — util/makedepend aclocal.m4 missing

2026-10-11 13:05:02 UTC by matthieu on ⎇

HEAD

   Update to makedepend 1.0.10

Version	Delta		File
1.4	+1,471	-1,293	util/makedepend/config.sub
1.4	+1,028	-753	util/makedepend/config.guess
1.13	+449	-163	util/makedepend/Makefile.in
1.4	+206	-202	util/makedepend/depcomp
1.4	+144	-259	util/makedepend/missing
1.18	+148	-126	util/makedepend/aclocal.m4
	+3,446	-2,796	8 files not shown
	+3,810	-3,083	14 files

OpenBSD/xenocara 5mUU7tm — app/xwininfo aclocal.m4 configure, app/xwininfo/m4 iconv.m4 lib-prefix.m4

2026-10-11 13:02:30 UTC by matthieu on ⎇

HEAD

   Update to xwininfo 1.1.7

Version	Delta		File
1.18	+4,195	-5,406	app/xwininfo/configure
1.17	+151	-2,399	app/xwininfo/aclocal.m4
1.1	+815	-0	app/xwininfo/m4/lib-link.m4
1.1	+529	-0	app/xwininfo/m4/host-cpu-c-abi.m4
1.1	+334	-0	app/xwininfo/m4/lib-prefix.m4
1.1	+324	-0	app/xwininfo/m4/iconv.m4
	+6,348	-7,805	14 files not shown
	+7,105	-7,965	20 files

OpenBSD/xenocara WKjGvxq — app/xpr aclocal.m4 xpr.man

2026-10-11 12:54:34 UTC by matthieu on ⎇

HEAD

   Update to xpr 1.2.1

Version	Delta		File
1.4	+1,471	-1,293	app/xpr/config.sub
1.4	+1,028	-753	app/xpr/config.guess
1.4	+206	-202	app/xpr/depcomp
1.4	+144	-259	app/xpr/missing
1.6	+174	-187	app/xpr/xpr.man
1.14	+148	-126	app/xpr/aclocal.m4
	+3,171	-2,820	10 files not shown
	+3,640	-3,122	16 files

OpenBSD/xenocara qglr5ao — app/xmodmap missing depcomp

2026-10-11 12:52:03 UTC by matthieu on ⎇

HEAD

   Update to xmodmap 1.0.12

Version	Delta		File
1.18	+3,632	-3,301	app/xmodmap/configure
1.4	+1,471	-1,293	app/xmodmap/config.sub
1.4	+1,028	-753	app/xmodmap/config.guess
1.4	+216	-202	app/xmodmap/install-sh
1.4	+206	-202	app/xmodmap/depcomp
1.4	+144	-259	app/xmodmap/missing
	+6,697	-6,010	18 files not shown
	+7,750	-6,550	24 files

OpenBSD/xenocara vLH5KAC — app/xload Makefile.in aclocal.m4

2026-10-11 12:45:45 UTC by matthieu on ⎇

HEAD

   update to xload 1.2.2

Version	Delta		File
1.4	+1,471	-1,293	app/xload/config.sub
1.4	+1,028	-753	app/xload/config.guess
1.4	+206	-202	app/xload/depcomp
1.4	+144	-259	app/xload/missing
1.15	+148	-126	app/xload/aclocal.m4
1.10	+134	-112	app/xload/Makefile.in
	+3,131	-2,745	11 files not shown
	+3,634	-2,976	17 files

OpenBSD/xenocara KWwRryI — app/xkbprint meson.build configure

2026-10-11 12:40:21 UTC by matthieu on ⎇

HEAD

   Update to xkbprint 1.0.8

Version	Delta		File
1.4	+206	-202	app/xkbprint/depcomp
1.4	+144	-259	app/xkbprint/missing
1.14	+146	-124	app/xkbprint/aclocal.m4
1.9	+131	-110	app/xkbprint/Makefile.in
1.14	+68	-146	app/xkbprint/configure
1.1	+110	-0	app/xkbprint/meson.build
	+805	-841	7 files not shown
	+1,018	-915	13 files