[ANNOUNCE] xorg-server 21.1.14

Olivier Fourdan ofourdan at redhat.com
Tue Oct 29 17:08:51 UTC 2024


This release contains the fix for the issue reported in today's security
advisory: https://lists.x.org/archives/xorg-announce/2024-October/003545.html

  * CVE-2024-9632

Additionally, it also contains several other fixes for glamor, Xnest,
compilation warnings with newer compilers, FreeBSD issues and more.

Alan Coopersmith (11):
       dix: check for calloc() failure in Xi event conversion routines
       dix: PolyText: fully initialize local_closure
       dix: SetFontPath: don't set errorValue on Success
       dix: enterleave.c: fix implicit fallthrough warnings
       dix: CreateScratchGC: avoid dereference of pointer we just set to NULL
       dix: InitPredictableAccelerationScheme: avoid memory leak on failure
       dix: dixChangeWindowProperty: don't call memcpy if malloc failed
       dix: ProcListProperties: skip unneeded work if numProps is 0
       dix: HashResourceID: use unsigned integers for bit shifting
       dix: GetPairedDevice: check if GetMaster returned NULL
       dix: FindBestPixel: fix implicit fallthrough warning

Alexey (1):
       Fixed mirrored glyphs on big-endian machines

Enrico Weigelt, metux IT consult (2):
       Xnest: cursor: fix potentially uninitialized memory
       Xnest: fix broken exposure events

José Expósito (2):
       ephyr: Fix incompatible pointer type build error
       xserver 21.1.14

Konstantin (1):
       glamor: make use of GL_EXT_texture_format_BGRA8888

Matthieu Herrb (4):
       Don't crash if the client argv or argv[0] is NULL.
       Return NULL in *cmdname if the client argv or argv[0] is NULL
       Fix a double-free on syntax error without a new line.
       xkb: Fix buffer overflow in _XkbSetCompatMap()

Olivier Fourdan (1):
       build: Drop libxcvt requirement from SDK_REQUIRED_MODULES

Peter Hutterer (1):
       dix: fix valuator copy/paste error in the DeviceStateNotify event

git tag: xorg-server-21.1.14

https://xorg.freedesktop.org/archive/individual/xserver/xorg-server-21.1.14.tar.gz
SHA256: b79dbaf668c67da25c4eb5b395eec60f2593240519aefdd3e8645023ef46226f  xorg-server-21.1.14.tar.gz
SHA512: 58bf3cadbb97f32066a4d45ad4335a68a1cbaafd88fb881ef2c6fb2aa3e0cb874849f77f13b4f755912ef982255c5751b1a49de866bc50941621c3ddef60b548  xorg-server-21.1.14.tar.gz
PGP:  https://xorg.freedesktop.org/archive/individual/xserver/xorg-server-21.1.14.tar.gz.sig

https://xorg.freedesktop.org/archive/individual/xserver/xorg-server-21.1.14.tar.xz
SHA256: 8f2102cebdc4747d1656c1099ef610f5063c7422c24a177e300de569b354ee35  xorg-server-21.1.14.tar.xz
SHA512: 833d36ca4a409363dc021a50702bc29dbb32d074de319d6910a158b6e4d8f51a20c3b0de0486d9613d4e526fe4fd60ca306b3c9fcce7d014ca8cc10185afd973  xorg-server-21.1.14.tar.xz
PGP:  https://xorg.freedesktop.org/archive/individual/xserver/xorg-server-21.1.14.tar.xz.sig
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_0x14706DBE1E4B4540.asc
Type: application/pgp-keys
Size: 2988 bytes
Desc: OpenPGP public key
URL: <https://lists.x.org/archives/xorg-announce/attachments/20241029/d5cea703/attachment.key>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature.asc
Type: application/pgp-signature
Size: 203 bytes
Desc: OpenPGP digital signature
URL: <https://lists.x.org/archives/xorg-announce/attachments/20241029/d5cea703/attachment.sig>


More information about the xorg-announce mailing list