Commit Graph

2986 Commits

Author SHA1 Message Date
Fredrik Rinnestam
3a026cd9c1 [notify] xorg-server: Fix for CVE-2020-14347.
X.Org security advisory: July 31, 2020

X Server Pixel Data Uninitialized Memory Information Disclosure
===============================================================

CVE-2020-14347

Allocation for pixmap data in AllocatePixmap() does not initialize the
memory in xserver, it leads to leak uninitialize heap memory to
clients. When the X server runs with elevated privileges.

This flaw can lead to ASLR bypass, which when combined with other
flaws (known/unknown) could lead to lead to privilege elevation in the
client.
2020-08-01 16:17:09 +02:00
Fredrik Rinnestam
7617936b6e [notify] xorg-libx11: 1.6.10. Fix for CVE-2020-14344
X.Org security advisory: July 31, 2020

Heap corruption in the X input method client in libX11
======================================================

CVE-2020-14344

The X Input Method (XIM) client implementation in libX11 has some
integer overflows and signed/unsigned comparison issues that can lead
to heap corruption when handling malformed messages from an input
method.
2020-07-31 22:48:49 +02:00
Fredrik Rinnestam
a5b9b1a161 mesa3d: 20.1.4 2020-07-23 17:40:43 +02:00
Danny Rawlins
b58931cf4d libglvnd: 1.3.1 -> 1.3.2 2020-07-22 08:52:46 +10:00
3c1e7930a3 xorg-libevdev: update to 1.9.1 2020-07-20 15:24:46 +02:00
4d44e58738 xorg-xev: update to 1.2.4 2020-07-19 10:30:32 +02:00
Fredrik Rinnestam
659618a723 mesa3d: 20.1.3 2020-07-08 23:20:15 +02:00
Danny Rawlins
fbda46c5d8 [notify] libva: new dependency: libglvnd 2020-07-02 20:31:58 +10:00
d7d4e2b465 xkeyboard-config: update to 2.30 2020-07-01 17:24:40 +02:00
9cf96e4b41 libva: update to 2.8.0 2020-07-01 17:09:52 +02:00
bc1b0a847a mesa3d: update to 20.1.2 2020-06-25 11:42:06 +02:00
d47d16f099 libpthread-stubs: updated homepage URL to use HTTPS 2020-06-24 16:17:25 -05:00
dc5e679781 libinput: update to 1.15.6 2020-06-22 13:32:40 +02:00
9a4a1e6e19 Updated a bunch of homepage URLs to their proper HTTPS counterparts 2020-06-18 20:33:08 -05:00
a1273c70b3 libvdpau: updated homepage URL 2020-06-18 20:24:47 -05:00
142429ba83 libinput: updated homepage URL 2020-06-18 20:22:25 -05:00
Danny Rawlins
585d2498ac mesa3d: 20.1.0 -> 20.1.1 2020-06-11 23:13:46 +10:00
Fredrik Rinnestam
29a3aad520 mesa3d: 20.1.0 2020-06-03 22:41:18 +02:00
25dc4a805b xorg-xf86-video-intel: update to 2.99.917-909 2020-05-30 13:10:20 +02:00
453e3c097b mtdev: update to 1.1.6 2020-05-27 15:17:08 +02:00
da27d72b96 libdrm: update to 2.4.102 2020-05-27 12:00:19 +02:00
5ec5895296 xorg-xf86-input-libinput: update to 0.30.0 2020-05-19 12:45:27 +02:00
Fredrik Rinnestam
0faa0f7024 mesa3d: 20.0.7 2020-05-14 21:53:53 +02:00
6dc719486a mesa3d: update to 20.0.6 2020-04-30 13:27:17 +02:00
Danny Rawlins
382c7075d0 libvdpau: 1.3 -> 1.4 2020-04-25 23:09:43 +10:00
Danny Rawlins
40a6ecc8c7 libva: 2.7.0 -> 2.7.1 2020-04-25 22:54:14 +10:00
49c64fcd4b mesa3d: update to 20.0.5 2020-04-23 13:21:28 +02:00
e47ee25688 xorg-libpixman: update to 0.40.0 2020-04-21 18:21:43 +02:00
Danny Rawlins
a7e2bb76a9 libva: 2.6.1 -> 2.7.0 2020-04-16 20:20:25 +10:00
Fredrik Rinnestam
96c5b5ac6d xorg-xorgproto: 2020.1 2020-04-14 22:21:18 +02:00
862c6e7a87 libinput: update to 1.15.5 2020-04-11 10:33:09 +02:00
39f3ea0acc xorg-libxfont2: fix build if libbsd is installed, FS#1784 2020-04-09 13:38:19 +02:00
6d384355d0 xkeyboard-config: update to 2.29 2020-04-06 15:46:21 +02:00
733f15f8f2 [notify] libdrm: update to 2.4.101
upstream switched from autotools to meson, thus all libtool file
are gone. Rebuild all ports dependent on libdrm to fix wrong entries
in their *.la files, probably most of xorg-xf86-video-*.

Use the following script to find problematic ports:

for f in $(grep -lrs libdrm.la /usr/lib); do pkginfo -o $f | \
awk '!/^Package/ {print $1}'; done | sort -u
2020-04-06 15:26:52 +02:00
837e26ce3c mesa3d: update to 20.0.4 2020-04-03 14:13:38 +02:00
Fredrik Rinnestam
1c28460602 mesa3d: updated to 20.0.3 2020-04-02 09:13:01 +02:00
5732fa490c xorg-server: update to 1.20.8 2020-04-01 14:15:21 +02:00
63a96b49db xorg-libevdev: update to 1.9.0 2020-03-29 16:02:33 +02:00
Danny Rawlins
0b4d769604 xkeyboard-config: fix man page inclusion when xsltproc is not present, else missing file in footprint 2020-03-28 00:35:51 +11:00
2e25c9365e xorg-font-dejavu-ttf: update to 2.37 2020-03-21 12:23:51 +01:00
Fredrik Rinnestam
49ef7f9bc7 mesa3d: updated to 20.0.2 2020-03-19 07:51:53 +01:00
5e14327dc5 libinput: update to 1.15.4 2020-03-18 11:38:31 +01:00
e1a96a3e72 xorg-xf86-input-evdev: fixed .signature 2020-03-14 19:09:05 -05:00
Danny Rawlins
9893079501 xorg-xf86-input-evdev: add missing dependencies: mtdev xorg-libevdev 2020-03-12 21:54:29 +11:00
Danny Rawlins
258814c2a4 xorg-xf86-input-libinput: add missing dependency: libinput 2020-03-12 21:48:00 +11:00
Danny Rawlins
ec585875ec xorg-xf86-input-synaptics: add missing dependency: xorg-libevdev 2020-03-12 21:40:02 +11:00
6bae44a579 mesa3d: update to 20.0.1 2020-03-08 12:26:11 +01:00
f2dd013d81 libinput: update to 1.15.3 2020-03-07 18:08:45 +01:00
Danny Rawlins
b0deb956a0 libglvnd: 1.3.0 -> 1.3.1 2020-03-05 19:49:42 +11:00
caba53057f xorg-libxcb: update to 1.14 2020-02-24 11:58:19 +01:00