[ANNOUNCE] xorg-server 21.1.5

Peter Hutterer peter.hutterer at who-t.net
Wed Dec 14 02:32:43 UTC 2022


This release fixes 6 recently reported security vulnerabilities in
various extensions. The CVE numbers are:
CVE-2022-46340, CVE-2022-46341, CVE-2022-46342, CVE-2022-46343,
CVE-2022-46344, and CVE-2022-4283

For details on the these issues please see the security advisory here:
https://lists.x.org/archives/xorg-announce/2022-December/003302.html

Jeremy Huddleston Sequoia (3):
      xquartz: Remove unused macro (X11LIBDIR)
      xquartz: Move default applications list outside of the main executable
      meson: Don't build COMPOSITE for XQuartz

Peter Hutterer (8):
      Xtest: disallow GenericEvents in XTestSwapFakeInput
      Xi: disallow passive grabs with a detail > 255
      Xext: free the XvRTVideoNotify when turning off from the same client
      Xext: free the screen saver resource when replacing it
      Xi: return an error from XI property changes if verification failed
      Xi: avoid integer truncation in length check of ProcXIChangeProperty
      xkb: reset the radio_groups pointer to NULL after freeing it
      xserver 21.1.5

git tag: xorg-server-21.1.5

https://xorg.freedesktop.org/archive/individual/xserver/xorg-server-21.1.5.tar.gz
SHA256: 5e391867bfe44ce766a8c748e7563dc9678c229af72b5f94e221a92b1b04b7a1  xorg-server-21.1.5.tar.gz
SHA512: e564e27e9cd6a535ff6cc673443c17bb8878e9ea7b4faba86e593fab514c504f995a7475a73682c4009e3973157e3efb81e89d8455d15819b617a54c93adf599  xorg-server-21.1.5.tar.gz
PGP:  https://xorg.freedesktop.org/archive/individual/xserver/xorg-server-21.1.5.tar.gz.sig

https://xorg.freedesktop.org/archive/individual/xserver/xorg-server-21.1.5.tar.xz
SHA256: 05b0c8301cee7c5a78083df421ba3a071891553541a417b3d85adf5cf20f8720  xorg-server-21.1.5.tar.xz
SHA512: a39c6ba36f94241d330b679a9a6fe2c5fda73fc3f5a9308a7a9cfd0d58503e407291759c9e553455c07cf5a3862952ae3904334eeca29c97ff5af7cffd2e6953  xorg-server-21.1.5.tar.xz
PGP:  https://xorg.freedesktop.org/archive/individual/xserver/xorg-server-21.1.5.tar.xz.sig

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 195 bytes
Desc: not available
URL: <https://lists.x.org/archives/xorg-announce/attachments/20221214/c9e97d16/attachment.sig>


More information about the xorg-announce mailing list