BSD Commit Log Search

   update

   Missed  removals in xterm 395 update.

   Update to xterm 395. Tested by tb@, jsg@ and others.

   update

   sync

   update to libXcursor 1.2.3

   update to xwud 1.0.7

   update to xrandr 1.5.3

   update to xmag 1.0.8

   update to xkbprint 1.0.7

   update to xcmsdb 1.0.7

   update to xclipboard 1.1.5

   update to xbacklight 1.2.4

   update to fonttosnft 1.2.4

   update to bdftopcf 1.1.2

   update

   Update to libXi 1.8.2.

   The fix for double alignment on 32bits machines with strict constraints
   was already committed.

   Update to libXfont2 2.0.7

   Update to xserver 21.1.14. tested by tb@

   The xkb security fix was committed earlier. This is the rest of the
   21.1.14 update.

   Don't log DDC modelines (after hotplug events/xrandr) or "Using XX ranges
   from config file" messages. These were printed after hotplug events which
   could be frequent in some cases (I have machines where this happens every
   10 seconds when the monitor is in a dpms power-saving mode resulting in a
   full /var/log filesystem).

   EDID vendor/product ID still logged, giving an indication that events are
   happening, but reduced from ~3.5KB per event to <100 bytes.

   based on a diff from / ok matthieu@

   xkb: Fix buffer overflow in _XkbSetCompatMap()

   The _XkbSetCompatMap() function attempts to resize the `sym_interpret`
   buffer.

   However, It didn't update its size properly. It updated `num_si` only,
   without updating `size_si`.

   CVE-2024-9632

   from matthieu@

   this is errata/7.5/012_xserver.patch.sig

   xkb: Fix buffer overflow in _XkbSetCompatMap()

   The _XkbSetCompatMap() function attempts to resize the `sym_interpret`
   buffer.

   However, It didn't update its size properly. It updated `num_si` only,
   without updating `size_si`.

   CVE-2024-9632

   from matthieu@

   this is errata/7.6/002_xserver.patch.sig

   xkb: Fix buffer overflow in _XkbSetCompatMap()

   The _XkbSetCompatMap() function attempts to resize the `sym_interpret`
   buffer.

   However, It didn't update its size properly. It updated `num_si` only,
   without updating `size_si`.

   CVE-2024-9632

   update

   sync

   Merge libdrm 2.4.123

   Import libdrm 2.4.123

   update

   build blake3_neon.c on arm64

   fixes undefined blake3_hash_many_neon symbol in libvulkan_radeon.so

   sync