OpenBSD / xenocara

Source

Committer

Branches

Tags ▶

Merges

Sort

OpenBSD/xenocara XbfRIE1 — . MODULES

2026-11-11 19:42:52 UTC by matthieu on ⎇

HEAD

   update

Version	Delta		File
1.576	+3	-3	MODULES
	+3	-3	1 files

OpenBSD/xenocara cvTSd3S — xserver configure ChangeLog, xserver/Xext xres.c

2026-11-11 19:04:29 UTC by matthieu on ⎇

HEAD

   Update to xserver 21.1.26.
   The security fixes have already been committed

Version	Delta		File
1.60	+904	-583	xserver/ChangeLog
1.6	+102	-0	xserver/test/xfree86.c
1.100	+14	-14	xserver/configure
1.17	+5	-17	xserver/miext/damage/damage.c
1.10	+9	-7	xserver/Xi/xibarriers.c
1.17	+13	-1	xserver/Xext/xres.c
	+1,047	-622	6 files not shown
	+1,062	-641	12 files

OpenBSD/xenocara CVfVY9V — . MODULES

2026-11-11 09:34:26 UTC by matthieu on ⎇

HEAD

   update

Version	Delta		File
1.575	+2	-2	MODULES
	+2	-2	1 files

OpenBSD/xenocara ueNlUhX — xserver/Xext xres.c xvdisp.c, xserver/glamor glamor_xv.c

2026-11-10 22:07:38 UTC by bluhm on ⎇

OPENBSD_8_0

   Merge fixes from upstream for Xserver issues:
   * CVE-2026-109091: EDID DS_RANGES Out-Of-Bounds Write
   * CVE-2026-109092: XvShmPutImage Shared-Memory Bounds Overflow
   * CVE-2026-109093: XTestFakeInput Valuator Stack Out-Of-Bounds Write
   * CVE-2026-109904: XRes QueryClientIds Request Size Overflow
   * CVE-2026-109094: XRes QueryResourceBytes Swap Path Size Overflow
   * CVE-2026-109095: glamor Xv Image Size Integer Overflow
   * CVE-2026-109096: XvPutImage Negative Image Size Length Bypass
   * CVE-2026-109903: XvQueryImageAttributes Negative Size Reply
   from matthieu@

   this is errata/8.0/010_xserver.patch.sig

Version	Delta		File
1.21.10.1	+20	-16	xserver/hw/xfree86/modes/xf86EdidModes.c
1.16.6.1	+6	-5	xserver/Xext/xtest.c
1.9.6.1	+9	-1	xserver/glamor/glamor_xv.c
1.16.32.1	+9	-1	xserver/Xext/xvdisp.c
1.15.6.1	+6	-0	xserver/Xext/xres.c
	+50	-23	5 files

OpenBSD/xenocara LJLNhQD — xserver/Xext xres.c xvdisp.c, xserver/glamor glamor_xv.c

2026-11-10 22:06:13 UTC by bluhm on ⎇

OPENBSD_7_9

   Merge fixes from upstream for Xserver issues:
   * CVE-2026-109091: EDID DS_RANGES Out-Of-Bounds Write
   * CVE-2026-109092: XvShmPutImage Shared-Memory Bounds Overflow
   * CVE-2026-109093: XTestFakeInput Valuator Stack Out-Of-Bounds Write
   * CVE-2026-109904: XRes QueryClientIds Request Size Overflow
   * CVE-2026-109094: XRes QueryResourceBytes Swap Path Size Overflow
   * CVE-2026-109095: glamor Xv Image Size Integer Overflow
   * CVE-2026-109096: XvPutImage Negative Image Size Length Bypass
   * CVE-2026-109903: XvQueryImageAttributes Negative Size Reply
   from matthieu@

   this is errata/7.9/045_xserver.patch.sig

Version	Delta		File
1.21.6.1	+20	-16	xserver/hw/xfree86/modes/xf86EdidModes.c
1.16.2.1	+6	-5	xserver/Xext/xtest.c
1.9.2.1	+9	-1	xserver/glamor/glamor_xv.c
1.16.28.1	+9	-1	xserver/Xext/xvdisp.c
1.15.2.1	+6	-0	xserver/Xext/xres.c
	+50	-23	5 files

OpenBSD/xenocara OAbqyB8 — xserver/Xext xres.c xvdisp.c, xserver/glamor glamor_xv.c

2026-11-10 18:56:47 UTC by matthieu on ⎇

HEAD

   Merge fixes from upstream for Xserver issues:
   * CVE-2026-109091: EDID DS_RANGES Out-Of-Bounds Write
   * CVE-2026-109092: XvShmPutImage Shared-Memory Bounds Overflow
   * CVE-2026-109093: XTestFakeInput Valuator Stack Out-Of-Bounds Write
   * CVE-2026-109904: XRes QueryClientIds Request Size Overflow
   * CVE-2026-109094: XRes QueryResourceBytes Swap Path Size Overflow
   * CVE-2026-109095: glamor Xv Image Size Integer Overflow
   * CVE-2026-109096: XvPutImage Negative Image Size Length Bypass
   * CVE-2026-109903: XvQueryImageAttributes Negative Size Reply

Version	Delta		File
1.22	+20	-16	xserver/hw/xfree86/modes/xf86EdidModes.c
1.18	+6	-5	xserver/Xext/xtest.c
1.10	+9	-1	xserver/glamor/glamor_xv.c
1.17	+9	-1	xserver/Xext/xvdisp.c
1.16	+6	-0	xserver/Xext/xres.c
	+50	-23	5 files

OpenBSD/xenocara WIHxybW — . 3RDPARTY

2026-11-07 12:03:46 UTC by matthieu on ⎇

HEAD

   update

Version	Delta		File
1.476	+2	-2	3RDPARTY
	+2	-2	1 files

OpenBSD/xenocara b6FVymO — app/xenodm configure

2026-11-07 10:47:45 UTC by robert on ⎇

HEAD

   regen part of configure that checks for login_wscons()

Version	Delta		File
1.14	+10	-10	app/xenodm/configure
	+10	-10	1 files

OpenBSD/xenocara kt8nug3 — app/xenodm configure.ac, app/xenodm/config TakeConsole.in GiveConsole.in

2026-11-07 09:12:55 UTC by robert on ⎇

HEAD

   call setusercontext with LOGIN_SETWSCONSGROUP instead of directly handling dev perms

Version	Delta		File
1.18	+2	-11	app/xenodm/xenodm/session.c
1.4	+1	-10	app/xenodm/config/GiveConsole.in
1.4	+1	-9	app/xenodm/config/TakeConsole.in
1.13	+1	-1	app/xenodm/configure.ac
	+5	-31	4 files

OpenBSD/xenocara Aq9YfW0 — lib/libX11/modules/im/ximcp imDefLkup.c, lib/libXi/src XIQueryDevice.c XQueryDv.c

2026-11-04 15:11:34 UTC by bluhm on ⎇

OPENBSD_8_0

   Merge fixes from upstream for X client library issues:
   * CVE-2026-88806: libX11 xkb: Check the keysym range in _XkbReadKeyActions
   * CVE-2026-94283: libX11 ximcp: bound XIM_OPEN_REPLY attribute lengths
   * CVE-2026-94284: libX11 ximcp: bound XIM_REGISTER_TRIGGERKEYS keylist lengths
   * CVE-2026-94285: libX11 lcGenConv: bound byteM_parse_codeset() reads
   * CVE-2026-93541: libXi XQueryDeviceState: check ValuatorClass num_valuators
   * CVE-2026-93542: libXi size_classes/copy_classes: bound XI2 class lengths
   * CVE-2026-93543: libXi size_classes/copy_classes: enforce XI2 class sizes
   * CVE-2026-93544: libXi XIQueryDevice: keep padded name and class bytes
   * CVE-2026-93545: libXi XListInputDevices: validate device name lengths
   * CVE-2026-94281: libXi XListInputDevices: validate class lengths
   * CVE-2026-94282: libXi wireToEnterLeave: validate buttons_len
   * CVE-2026-109089: libXi XGetDeviceControl: reply control must match request
   * CVE-2026-109090: libXi XGetDeviceControl: size DEVICE_ENABLE replies
   * CVE-2026-94287: libXpm ParsePixels: reject zero-dimension XPM images
   * CVE-2026-88807: libXrender: Check numSubpixel against numScreens
   * CVE-2026-94286: libXtst parse_reply_call_callback: check element size
   * CVE-2026-109088: libXtst parse_reply_call_callback: reject zero progress
   from matthieu@

    [2 lines not shown]

Version	Delta		File
1.20.2.1	+282	-58	lib/libXi/src/XExtInt.c
1.9.40.1	+67	-20	lib/libXi/src/XListDev.c
1.7.40.1	+41	-9	lib/libXi/src/XQueryDv.c
1.8.8.1	+24	-7	lib/libXi/src/XIQueryDevice.c
1.8.10.1	+26	-4	lib/libXtst/src/XRecord.c
1.13.2.1	+20	-9	lib/libX11/modules/im/ximcp/imDefLkup.c
	+460	-107	8 files not shown
	+517	-120	14 files

OpenBSD/xenocara bhG7Erb — lib/libX11/modules/im/ximcp imDefLkup.c, lib/libXi/src XIQueryDevice.c XQueryDv.c

2026-11-04 15:09:32 UTC by bluhm on ⎇

OPENBSD_7_9

   Merge fixes from upstream for X client library issues:
   * CVE-2026-88806: libX11 xkb: Check the keysym range in _XkbReadKeyActions
   * CVE-2026-94283: libX11 ximcp: bound XIM_OPEN_REPLY attribute lengths
   * CVE-2026-94284: libX11 ximcp: bound XIM_REGISTER_TRIGGERKEYS keylist lengths
   * CVE-2026-94285: libX11 lcGenConv: bound byteM_parse_codeset() reads
   * CVE-2026-93541: libXi XQueryDeviceState: check ValuatorClass num_valuators
   * CVE-2026-93542: libXi size_classes/copy_classes: bound XI2 class lengths
   * CVE-2026-93543: libXi size_classes/copy_classes: enforce XI2 class sizes
   * CVE-2026-93544: libXi XIQueryDevice: keep padded name and class bytes
   * CVE-2026-93545: libXi XListInputDevices: validate device name lengths
   * CVE-2026-94281: libXi XListInputDevices: validate class lengths
   * CVE-2026-94282: libXi wireToEnterLeave: validate buttons_len
   * CVE-2026-109089: libXi XGetDeviceControl: reply control must match request
   * CVE-2026-109090: libXi XGetDeviceControl: size DEVICE_ENABLE replies
   * CVE-2026-94287: libXpm ParsePixels: reject zero-dimension XPM images
   * CVE-2026-88807: libXrender: Check numSubpixel against numScreens
   * CVE-2026-94286: libXtst parse_reply_call_callback: check element size
   * CVE-2026-109088: libXtst parse_reply_call_callback: reject zero progress
   from matthieu@

    [2 lines not shown]

Version	Delta		File
1.19.6.1	+282	-58	lib/libXi/src/XExtInt.c
1.9.38.1	+67	-20	lib/libXi/src/XListDev.c
1.7.38.1	+41	-9	lib/libXi/src/XQueryDv.c
1.8.6.1	+24	-7	lib/libXi/src/XIQueryDevice.c
1.8.8.1	+26	-4	lib/libXtst/src/XRecord.c
1.12.8.1	+20	-9	lib/libX11/modules/im/ximcp/imDefLkup.c
	+460	-107	8 files not shown
	+517	-120	14 files

OpenBSD/xenocara HFQZDTx — . 3RDPARTY

2026-10-28 21:23:31 UTC by matthieu on ⎇

HEAD

   update

Version	Delta		File
1.475	+3	-3	3RDPARTY
	+3	-3	1 files

OpenBSD/xenocara EdgftFd — app/xlockmore/modes marquee.c

2026-10-28 19:51:08 UTC by matthieu on ⎇

HEAD

   Replace memcpy() by memmove() for overlapping buffers copies.
   Reported by Dirk-Wilhelm Peters, ok claudio@

Version	Delta		File
1.2	+2	-2	app/xlockmore/modes/marquee.c
	+2	-2	1 files

OpenBSD/xenocara iJ2nVCQ — app/ssh-askpass resources.c

2026-10-24 22:33:03 UTC by dtucker on ⎇

HEAD

   Replace unchecked buffer copy used to implement case insensitive boolean
   resource handling with strcasecmp().  ok matthieu@

Version	Delta		File
1.4	+15	-14	app/ssh-askpass/resources.c
	+15	-14	1 files

OpenBSD/xenocara XUVJ3el — app/ssh-askpass x11-ssh-askpass.c

2026-10-24 22:27:57 UTC by dtucker on ⎇

HEAD

   Don't deref an initial null label.  ok matthieu@

Version	Delta		File
1.12	+6	-8	app/ssh-askpass/x11-ssh-askpass.c
	+6	-8	1 files

OpenBSD/xenocara lhaZ9aL — app/ssh-askpass x11-ssh-askpass.h x11-ssh-askpass.c

2026-10-24 22:26:48 UTC by dtucker on ⎇

HEAD

   Check strdup for failure before using.  ok matthieu@

Version	Delta		File
1.11	+13	-9	app/ssh-askpass/x11-ssh-askpass.c
1.6	+2	-2	app/ssh-askpass/x11-ssh-askpass.h
	+15	-11	2 files

OpenBSD/xenocara 8W3xapx — app/ssh-askpass dynlist.h dynlist.c

2026-10-24 22:25:00 UTC by dtucker on ⎇

HEAD

   Remove append_to_list as it's unused.  ok matthieu@

Version	Delta		File
1.3	+0	-25	app/ssh-askpass/dynlist.c
1.3	+0	-1	app/ssh-askpass/dynlist.h
	+0	-26	2 files

OpenBSD/xenocara 7Dr8p1M — app/ssh-askpass x11-ssh-askpass.c

2026-10-24 22:22:11 UTC by dtucker on ⎇

HEAD

   Use explicit_bzero passphrase on exit and delete.  ok matthieu@

Version	Delta		File
1.10	+3	-1	app/ssh-askpass/x11-ssh-askpass.c
	+3	-1	1 files

OpenBSD/xenocara ae0LCpq — app/ssh-askpass x11-ssh-askpass.c

2026-10-24 22:20:49 UTC by dtucker on ⎇

HEAD

   Add missing break after MotionNotify.  ok matthieu@

Version	Delta		File
1.9	+1	-0	app/ssh-askpass/x11-ssh-askpass.c
	+1	-0	1 files

OpenBSD/xenocara caOdRzq — app/ssh-askpass SshAskpass-1337.ad TODO

2026-10-18 08:18:00 UTC by matthieu on ⎇

HEAD

   Reduce diffs with upstreams. Comments and other aux files with
   no impact on the code. Most remaining diffs needs to be sent upstream.

Version	Delta		File
1.3	+205	-25	app/ssh-askpass/Imakefile
1.2	+84	-0	app/ssh-askpass/ChangeLog
1.2	+38	-16	app/ssh-askpass/README
1.7	+3	-5	app/ssh-askpass/x11-ssh-askpass.man.in
1.2	+4	-3	app/ssh-askpass/TODO
1.2	+3	-3	app/ssh-askpass/SshAskpass-1337.ad
	+337	-52	12 files not shown
	+364	-79	18 files

OpenBSD/xenocara 4BJnQhF — . 3RDPARTY

2026-10-18 07:46:58 UTC by matthieu on ⎇

HEAD

   It's spelled x11-ssh-askpass

Version	Delta		File
1.474	+2	-2	3RDPARTY
	+2	-2	1 files

OpenBSD/xenocara rs5NMsz — . 3RDPARTY

2026-10-18 07:36:44 UTC by matthieu on ⎇

HEAD

   New home for ssh-ask-pass

Version	Delta		File
1.473	+3	-3	3RDPARTY
	+3	-3	1 files

OpenBSD/xenocara vjNtXgo — . MODULES 3RDPARTY

2026-10-17 16:52:28 UTC by matthieu on ⎇

HEAD

   update

Version	Delta		File
1.472	+9	-9	3RDPARTY
1.574	+5	-5	MODULES
	+14	-14	2 files

OpenBSD/xenocara 2Sn3FQg — app/xterm menu.c charproc.c

2026-10-17 16:24:18 UTC by matthieu on ⎇

HEAD

   Update to xterm 412

Version	Delta		File
1.52	+873	-418	app/xterm/util.c
1.18	+333	-285	app/xterm/wcwidth.c
1.42	+220	-192	app/xterm/screen.c
1.23	+109	-41	app/xterm/cachedGCs.c
1.63	+78	-39	app/xterm/charproc.c
1.41	+73	-18	app/xterm/menu.c
	+1,686	-993	37 files not shown
	+2,156	-1,165	43 files

OpenBSD/xenocara QUQRqS1 — lib/libXtst Makefile.in configure, lib/libXtst/src Makefile.in

2026-10-17 16:23:38 UTC by matthieu on ⎇

HEAD

   Update to libXtst 1.2.6

Version	Delta		File
1.4	+206	-202	lib/libXtst/depcomp
1.4	+144	-259	lib/libXtst/missing
1.18	+157	-203	lib/libXtst/aclocal.m4
1.20	+76	-154	lib/libXtst/configure
1.13	+120	-102	lib/libXtst/Makefile.in
1.13	+93	-60	lib/libXtst/src/Makefile.in
	+796	-980	11 files not shown
	+1,051	-1,060	17 files

OpenBSD/xenocara 4fUGVUb — lib/libXrender meson.build Makefile.in, lib/libXrender/src Makefile.in

2026-10-17 16:22:50 UTC by matthieu on ⎇

HEAD

   Update to libXrender 0.9.13

Version	Delta		File
1.4	+206	-202	lib/libXrender/depcomp
1.4	+144	-259	lib/libXrender/missing
1.18	+136	-103	lib/libXrender/aclocal.m4
1.15	+123	-106	lib/libXrender/Makefile.in
1.12	+93	-60	lib/libXrender/src/Makefile.in
1.1	+118	-0	lib/libXrender/meson.build
	+820	-730	12 files not shown
	+978	-769	18 files

OpenBSD/xenocara UCla2yj — lib/libXpm configure.ac compile, lib/libXpm/src parse.c

2026-10-17 16:22:03 UTC by matthieu on ⎇

HEAD

   Update to libXpm 3.5.20

Version	Delta		File
1.13	+63	-0	lib/libXpm/ChangeLog
1.22	+10	-10	lib/libXpm/configure
1.7	+6	-3	lib/libXpm/compile
1.13	+1	-4	lib/libXpm/src/parse.c
1.14	+1	-1	lib/libXpm/configure.ac
	+81	-18	5 files

OpenBSD/xenocara ioWr7Gm — lib/libXi ChangeLog, lib/libXi/include/X11/extensions XInput.h

2026-10-17 16:21:21 UTC by matthieu on ⎇

HEAD

   Update to libXi 1.8.4

Version	Delta		File
1.4	+336	-336	lib/libXi/specs/library.xml
1.24	+418	-8	lib/libXi/ChangeLog
1.21	+327	-68	lib/libXi/src/XExtInt.c
1.10	+71	-21	lib/libXi/src/XListDev.c
1.3	+26	-26	lib/libXi/include/X11/extensions/XInput.h
1.8	+41	-9	lib/libXi/src/XQueryDv.c
	+1,219	-468	93 files not shown
	+1,543	-761	99 files

OpenBSD/xenocara HcPG2IV — lib/libX11 README.md configure, lib/libX11/modules/im/ximcp imRmAttr.c imDefLkup.c

2026-10-17 16:20:25 UTC by matthieu on ⎇

HEAD

   Update to libX11 1.8.14

Version	Delta		File
1.33	+313	-0	lib/libX11/ChangeLog
1.14	+20	-9	lib/libX11/modules/im/ximcp/imDefLkup.c
1.14	+23	-3	lib/libX11/modules/im/ximcp/imRmAttr.c
1.43	+10	-10	lib/libX11/configure
1.10	+17	-0	lib/libX11/README.md
1.19	+13	-2	lib/libX11/src/xcb_io.c
	+396	-24	15 files not shown
	+439	-42	21 files

OpenBSD/xenocara biYX2La — distrib/sets/lists/xbase mi

2026-10-17 16:17:55 UTC by matthieu on ⎇

HEAD

   sync

Version	Delta		File
1.165	+1	-1	distrib/sets/lists/xbase/mi
	+1	-1	1 files