* New upstream release.
* render: Avoid possible double-free in ProcRenderAddGlyphs()
(closes: #1068470)
xorg-server (2:21.1.11-3) unstable; urgency=high
[ Chris Hofstaedtler ]
* Use udev.pc to place udev files (Closes: #1057945)
[ Julien Cristau ]
* Pull from upstream server-21.1-branch:
- hw/xfree86: fix NULL pointer refrence to mode name
- Initialize Mode->name in xf86CVTMode()
- Allow disabling byte-swapped clients
- Xext: SProcSyncCreateFence needs to swap drawable id too
- Xi: ProcXIGetSelectedEvents needs to use unswapped length to send
reply (CVE-2024-31080)
- Xi: ProcXIPassiveGrabDevice needs to use unswapped length to send
reply (CVE-2024-31081)
- Xquartz: ProcAppleDRICreatePixmap needs to use unswapped length to
send reply (CVE-2024-31082)
- render: fix refcounting of glyphs during ProcRenderAddGlyphs
(CVE-2024-31083)
* dix-Fix-use-after-free-in-input-device-shutdown.patch: drop (now upstream).
This bug was fixed in the package xorg-server - 2:21.1.12-1ubuntu1
--------------- 12-1ubuntu1) noble; urgency=medium
xorg-server (2:21.1.
* Merge from Debian.
xorg-server (2:21.1.12-1) unstable; urgency=medium
* New upstream release. yphs()
* render: Avoid possible double-free in ProcRenderAddGl
(closes: #1068470)
xorg-server (2:21.1.11-3) unstable; urgency=high
[ Chris Hofstaedtler ]
* Use udev.pc to place udev files (Closes: #1057945)
[ Julien Cristau ] Fence needs to swap drawable id too edEvents needs to use unswapped length to send abDevice needs to use unswapped length to send atePixmap needs to use unswapped length to CVE-2024- 31083) use-after- free-in- input-device- shutdown. patch: drop (now upstream).
* Pull from upstream server-21.1-branch:
- hw/xfree86: fix NULL pointer refrence to mode name
- Initialize Mode->name in xf86CVTMode()
- Allow disabling byte-swapped clients
- Xext: SProcSyncCreate
- Xi: ProcXIGetSelect
reply (CVE-2024-31080)
- Xi: ProcXIPassiveGr
reply (CVE-2024-31081)
- Xquartz: ProcAppleDRICre
send reply (CVE-2024-31082)
- render: fix refcounting of glyphs during ProcRenderAddGlyphs
(
* dix-Fix-
-- Timo Aaltonen <email address hidden> Fri, 12 Apr 2024 12:10:06 +0300