Path to this page:
Subject: CVS commit: pkgsrc/x11/libX11
From: Thomas Klausner
Date: 2023-10-03 22:29:35
Message id: 20231003202935.9F2B4FBDB@cvs.NetBSD.org
Log Message:
libX11: update to 1.8.7.
This release contains fixes for the issues reported in today's security
advisory: https://lists.x.org/archives/xorg-announce/2023-October/003424.html
along with:
* Fail XOpenDisplay() if server-provided default visual is invalid (!233)
* Bring XKB docs in line with actual implementation (!231, !228)
* Xutil.h: declare XEmptyRegion() and XEqualRegion() as Bool (!225)
* Assorted updates to en_US.UTF-8 compose keys (!213, !214, !215, !216,
!217, !219, !220, !222, !223, !226, !227, !229)
Alan Coopersmith (17):
Remove XkbSetBounceKeysDelay.man from list of man pages to build
docs: finish removing XkbGetBounceKeysDelay & XkbSetBounceKeysDelay
docs: remove XkbAllocDeviceLedInfo
docs: remove XkbGetAccessXTimeout & XkbSetAccessXTimeout
docs: remove XkbGetSlowKeysDelay & XkbSetSlowKeysDelay
docs: remove XkbGetStickyKeysOptions & XkbSetStickyKeysOptions
docs: XkbSAActionSetCtrls is really named XkbActionSetCtrls
docs: remove XkbChangeIndicators and Xkb{Get,Note}IndicatorChanges
docs: remove XkbGetNameChanges
docs: remove XkbKeySymsOffset
docs: fix names for XkbKeyKeyType & XkbKeyKeyTypeIndex
XOpenDisplay: ensure each screen has a valid root_visual pointer
CVE-2023-43785: out-of-bounds memory access in _XkbReadKeySyms()
CVE-2023-43786: stack exhaustion from infinite recursion in PutSubImage()
XPutImage: clip images to maximum height & width allowed by protocol
XCreatePixmap: trigger BadValue error for out-of-range dimensions
libX11 1.8.7
Antti Savolainen (2):
nls: add a compose sequence with double dead_tilde for ≈ (almost equal to)
Add two compose sequences for dagger/obelisk symbols
Benno Schulenberg (12):
nls: remove three duplicated combining acute accents
nls: order a few compose sequences left first, and in mirroring pairs
nls: remove four unobvious and redundant compose sequences for ¥ (yen)
nls: delete twenty eight compose sequences that cannot be typed
nls: use the shorter and more consistent name for the dead capital schwa
nls: harmonize the comments for compose sequences with combining accents
nls: add, correct, and normalize some comments of compose sequences
nls: delete twenty seven untypable Greek compose sequences
nls: change result of sequence `<C> <bar>` from `¢` (CENT) to \
`₵` (CEDI)
nls: add compose sequences for `₲` (guaraní), `₭` (kip), and `₮` \
(tugrik)
nls: reshuffle the compose sequences for currencies into ascending order
nls: add two compose sequences for currency symbol `฿` (the Thai baht)
Christopher Chavez (1):
Xutil.h: use Bool for XEmptyRegion(), XEqualRegion()
G. Branden Robinson (1):
configure script reports stray, confusing "yes"
Walter Harms (1):
rm XkbSetBounceKeysDelay.man
Yair Mizrahi (1):
CVE-2023-43787: Integer overflow in XCreateImage() leading to a heap overflow
jmcwilliams403 (1):
NLS: Drop two math sequences, slightly clean up APL sequences.
Files: