xserver 21.1.7 is now available. This release contains the fix for CVE-2023-0494 in today's security advisory: https://lists.x.org/archives/xorg-announce/2023-February/003320.html It also fixes a second possible OOB access during EnqueueEvent and a crasher caused by ResourceClientBits not correctly honouring the MaxClients value in the configuration file.
Finally, a bunch of Xquartz updates including the ability to correctly detect
ssh-tunneled clients as remote.
Jeremy Huddleston Sequoia (11):
xquartz: Ignore SIGPIPE at process launch
xquartz: Use xorg_backtrace() instead of rolling our own for debugging
rootless: Add additional debug logging to help triage XQuartz
fb/rootless/damage crashes
xquartz: Fix building with autoconf
xquartz: Update the about box copyright to 2023
xquartz: Disable COMPOSITE at runtime
Revert "meson: Don't build COMPOSITE for XQuartz"
os: Update AllocNewConnection() debug logging to include whether or not
the client is local
os: Update GetLocalClientCreds to prefer getpeerucred() or SO_PEERCRED
over getpeereid()
os: Use LOCAL_PEERPID from sys/un.h if it is available to detemine the
pid when falling back on getpeereids()
darwin: Implement DetermineClientCmd for macOS
Mike Gorse (1):
dix: Use CopyPartialInternalEvent in EnqueueEvent
Olivier Fourdan (1):
dix: Fix overzealous caching of ResourceClientBits()
Peter Hutterer (2):
Xi: fix potential use-after-free in DeepCopyPointerClasses
xserver 21.1.7
git tag: xorg-server-21.1.7
https://xorg.freedesktop.org/archive/individual/xserver/xorg-server-21.1.7.tar.gz
SHA256: 1a9005f47c7ea83645a977581324439628a32c4426303e5a4b9c2d6615becfbf
xorg-server-21.1.7.tar.gz
SHA512:
ac9dd13abfd4ce95febd189c7801992cdbf3eafd66f8a2c94c1b4929399a49cb2ae9345fb383fa0606567f29e6dbd530c2cb31aac9a3d816da1ee5a96ad3e1df
xorg-server-21.1.7.tar.gz
PGP:
https://xorg.freedesktop.org/archive/individual/xserver/xorg-server-21.1.7.tar.gz.sig
https://xorg.freedesktop.org/archive/individual/xserver/xorg-server-21.1.7.tar.xz
SHA256: d9c60b2dd0ec52326ca6ab20db0e490b1ff4f566f59ca742d6532e92795877bb
xorg-server-21.1.7.tar.xz
SHA512:
e2a093381e28da9b2aa700c6609349fa851f4ca8df23c776f30e4e2733e7a6c1b257576b93f4c4e87fb09df901385bf52528982f6e7a6ad469597aeae8640bb5
xorg-server-21.1.7.tar.xz
PGP:
https://xorg.freedesktop.org/archive/individual/xserver/xorg-server-21.1.7.tar.xz.sig
signature.asc
Description: PGP signature
