2021-10-07 17:14:47 by Nia Alarie | Files touched by this commit (675) |
Log message:
x11: Remove SHA1 hashes for distfiles
|
2021-06-06 23:05:08 by Thomas Klausner | Files touched by this commit (4) | |
Log message:
libX11: update to 1.7.2.
This is a bug fix release, correcting a regression [1] introduced by and
improving the checks from the fix for CVE-2021-31535.
[1] https://gitlab.freedesktop.org/xorg/lib/libx11/-/issues/133
Alan Coopersmith (1):
libX11 1.7.2
Matthieu Herrb (2):
include <limits.h> always, not if HAVE_CONFIG_H is set.
Check for NULL strings before getting their lengths
Tobias Stoeckmann (1):
Protect against overly long strings
|
2021-05-18 18:31:33 by Thomas Klausner | Files touched by this commit (2) | |
Log message:
libX11: update to 1.7.1.
Benno Schulenberg (3):
nls: add 'C.utf8' as an alias for 'en_US.UTF-8'
nls: allow composing all breved letters also with a lowercase "u"
nls: adjust three comments about the APL compose sequences
Christopher Chavez (1):
Xlib.h: spelling fix in comment
Gaurav Ujjwal (1):
Fix out-of-bound access in KeySymToUcs4()
Matthieu Herrb (2):
Reject string longer than USHRT_MAX before sending them on the wire
Version 1.7.1
Walter Harms (8):
FIX: warning: macro `Pn' not defined
FIX: warning: macro `hN' not defined
fix warning: macro `s' not defined
FIX: warning: macro `IN' not defined
FIX: warning: macro `hN' not defined
fix broken nroff coding for code comments
Fix some roff code add see also
fix same roff code
|
2021-01-20 10:42:55 by Nia Alarie | Files touched by this commit (2) |
Log message:
libX11: fix building with older gcc versions
|
2020-11-20 21:42:53 by Thomas Klausner | Files touched by this commit (4) | |
Log message:
libX11: update to 1.7.0.
libX11 version 1.7.0 includes a new API, hence the change from the 1.6
series to 1.7:
* XSetIOErrorExitHandler which provides a mechanism for applications
to recover from I/O error conditions instead of being forced to
exit. Thanks to Carlos Garnacho for this.
This release includes a bunch of bug fixes, some which have been pending for \
over three years:
* A bunch of nls cleanups to remove obsolete entries and clean up
formatting of the ist. Thanks to Benno Schulenberg for these.
* Warning fixes and other cleanups across a huge swath of the
library. Thanks to Alan Coopersmith for these.
* Memory allocation bugs, including leaks and use after free in the
locale code. Thanks to Krzesimir Nowak, Jacek Caban and Vittorio
Zecca for these.
* Thread safety fixes in the locale code. Thanks to Jacek Caban for
these.
* poll_for_response race condition fix. Thanks to Frediano Ziglio for
the bulk of this effort, and to Peter Hutterer for careful review
and improvements.
Version 1.7.0 includes a couple of new locales:
* ia and ie locales. Thanks to Carmina16 for these.
There are also numerous compose entries added, including:
* |^ or ^| for ↑, |v or v| for ↓, ~~ for ≈. Thanks to Antti
Savolainen for this.
* Allowing use of 'v' for caron, in addition to 'c', so things like
vC for Č, vc for č. Thanks to Benno Schulenberg for this.
* Compose sequences LT, lt for '<', and GT, gt for '>' for keyboards
where those are difficult to access. Thanks to Jonathan Belsewir
for this.
|
2020-08-26 12:28:03 by Thomas Klausner | Files touched by this commit (2) | |
Log message:
libX11: update to 1.6.12.
Christopher Chavez (1):
Fix typo GCCLipYOrigin -> GCClipYOrigin in XCreateGC() manpage
Felix Yan (1):
Correct a typo in GetStCmap.c
Matthieu Herrb (2):
Fix an integer overflow in init_om()
libX11 1.6.12
Maya Rashish (1):
Avoid the use of "register" keyword in XkbTranslateKeySym.
Niclas Zeising (1):
Fix input clients connecting to server
|
2020-08-07 22:20:40 by Thomas Klausner | Files touched by this commit (3) | |
Log message:
libX11: update to 1.6.11.
Alan Coopersmith (1):
libX11 1.6.11
Yichao Yu (1):
Fix size calculation in `_XimAttributeToValue`.
|
2020-08-04 17:50:19 by Maya Rashish | Files touched by this commit (3) |
Log message:
libX11: backport patch fixing regression from upstream. bump PKGREVISION
|
2020-07-31 18:36:55 by Maya Rashish | Files touched by this commit (2) | |
Log message:
libX11: update to 1.6.10
Heap corruption in the X input method client in libX11
======================================================
CVE-2020-14344
The X Input Method (XIM) client implementation in libX11 has some
integer overflows and signed/unsigned comparison issues that can lead
to heap corruption when handling malformed messages from an input
method.
Patches
=======
Patches for these issues have been commited to the libX11 git repository.
libX11 1.6.10 will be released shortly and will include those patches.
https://gitlab.freedesktop.org/xorg/lib/libx11
commit 1703b9f3435079d3c6021e1ee2ec34fd4978103d (HEAD -> master)
Change the data_len parameter of _XimAttributeToValue() to CARD16
It's coming from a length in the protocol (unsigned) and passed
to functions that expect unsigned int parameters (_XCopyToArg()
and memcpy()).
commit 1a566c9e00e5f35c1f9e7f3d741a02e5170852b2
Zero out buffers in functions
It looks like uninitialized stack or heap memory can leak
out via padding bytes.
commit 2fcfcc49f3b1be854bb9085993a01d17c62acf60
Fix more unchecked lengths
commit 388b303c62aa35a245f1704211a023440ad2c488
fix integer overflows in _XimAttributeToValue()
commit 0e6561efcfaa0ae7b5c74eac7e064b76d687544e
Fix signed length values in _XimGetAttributeID()
The lengths are unsigned according to the specification. Passing
negative values can lead to data corruption.
Thanks
======
X.Org thanks Todd Carson for reporting these issues to our security
team and assisting them in understanding them and providing fixes.
|
2020-01-19 00:36:14 by Roland Illig | Files touched by this commit (3046) |
Log message:
all: migrate several HOMEPAGEs to https
pkglint --only "https instead of http" -r -F
With manual adjustments afterwards since pkglint 19.4.4 fixed a few
indentations in unrelated lines.
This mainly affects projects hosted at SourceForce, as well as
freedesktop.org, CTAN and GNU.
|