Subject: CVS commit: pkgsrc/x11/libX11
From: Thomas Klausner
Date: 2023-10-03 22:29:35
Message id: 20231003202935.9F2B4FBDB@cvs.NetBSD.org

Log Message:
libX11: update to 1.8.7.

This release contains fixes for the issues reported in today's security
advisory: https://lists.x.org/archives/xorg-announce/2023-October/003424.html
along with:
 * Fail XOpenDisplay() if server-provided default visual is invalid (!233)
 * Bring XKB docs in line with actual implementation (!231, !228)
 * Xutil.h: declare XEmptyRegion() and XEqualRegion() as Bool (!225)
 * Assorted updates to en_US.UTF-8 compose keys (!213, !214, !215, !216,
   !217, !219, !220, !222, !223, !226, !227, !229)

Alan Coopersmith (17):
      Remove XkbSetBounceKeysDelay.man from list of man pages to build
      docs: finish removing XkbGetBounceKeysDelay & XkbSetBounceKeysDelay
      docs: remove XkbAllocDeviceLedInfo
      docs: remove XkbGetAccessXTimeout & XkbSetAccessXTimeout
      docs: remove XkbGetSlowKeysDelay & XkbSetSlowKeysDelay
      docs: remove XkbGetStickyKeysOptions & XkbSetStickyKeysOptions
      docs: XkbSAActionSetCtrls is really named XkbActionSetCtrls
      docs: remove XkbChangeIndicators and Xkb{Get,Note}IndicatorChanges
      docs: remove XkbGetNameChanges
      docs: remove XkbKeySymsOffset
      docs: fix names for XkbKeyKeyType & XkbKeyKeyTypeIndex
      XOpenDisplay: ensure each screen has a valid root_visual pointer
      CVE-2023-43785: out-of-bounds memory access in _XkbReadKeySyms()
      CVE-2023-43786: stack exhaustion from infinite recursion in PutSubImage()
      XPutImage: clip images to maximum height & width allowed by protocol
      XCreatePixmap: trigger BadValue error for out-of-range dimensions
      libX11 1.8.7

Antti Savolainen (2):
      nls: add a compose sequence with double dead_tilde for ≈ (almost equal to)
      Add two compose sequences for dagger/obelisk symbols

Benno Schulenberg (12):
      nls: remove three duplicated combining acute accents
      nls: order a few compose sequences left first, and in mirroring pairs
      nls: remove four unobvious and redundant compose sequences for ¥ (yen)
      nls: delete twenty eight compose sequences that cannot be typed
      nls: use the shorter and more consistent name for the dead capital schwa
      nls: harmonize the comments for compose sequences with combining accents
      nls: add, correct, and normalize some comments of compose sequences
      nls: delete twenty seven untypable Greek compose sequences
      nls: change result of sequence `<C> <bar>` from `¢` (CENT) to \ 
`₵` (CEDI)
      nls: add compose sequences for `₲` (guaraní), `₭` (kip), and `₮` \ 
(tugrik)
      nls: reshuffle the compose sequences for currencies into ascending order
      nls: add two compose sequences for currency symbol `฿` (the Thai baht)

Christopher Chavez (1):
      Xutil.h: use Bool for XEmptyRegion(), XEqualRegion()

G. Branden Robinson (1):
      configure script reports stray, confusing "yes"

Walter Harms (1):
      rm XkbSetBounceKeysDelay.man

Yair Mizrahi (1):
      CVE-2023-43787: Integer overflow in XCreateImage() leading to a heap overflow

jmcwilliams403 (1):
      NLS: Drop two math sequences, slightly clean up APL sequences.

Files:
RevisionActionfile
1.75modifypkgsrc/x11/libX11/Makefile
1.17modifypkgsrc/x11/libX11/PLIST
1.54modifypkgsrc/x11/libX11/distinfo