Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package libX11 for openSUSE:Factory checked in at 2026-10-18 19:22:31 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/libX11 (Old) and /work/SRC/openSUSE:Factory/.libX11.new.3698736 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "libX11" Sun Oct 18 19:22:31 2026 rev:63 rq:1385482 version:1.8.14 Changes: -------- --- /work/SRC/openSUSE:Factory/libX11/libX11.changes 2026-09-28 10:34:58.874121583 +0200 +++ /work/SRC/openSUSE:Factory/.libX11.new.3698736/libX11.changes 2026-10-18 19:22:44.858326345 +0200 @@ -1,0 +2,24 @@ +Sat Oct 17 12:05:51 UTC 2026 - Stefan Dirsch <[email protected]> + +- Update to 1.8.13; this release includes: + * ximcp: bound XIM_OPEN_REPLY attribute lengths (CVE-2026-94283) (!310) + * ximcp: bound XIM_REGISTER_TRIGGERKEYS keylist lengths (CVE-2026-94284) (!310) + * lcGenConv: bound byteM_parse_codeset() reads (CVE-2026-94285) (!310) + * xkb: Check the keysym range in _XkbReadKeyActions (CVE-2026-88806) (!309) + * OpenDisplay: avoid NULL dereference in out-of-memory error path (!307) + * XSetFontPath: zero-initialize packed font path buffer (#248, !306) + * _XSend: treat xcb_writev returning 0 as failure (!305) + * _XSend: discard the output buffer after an I/O error (!305) + * XkbSetIndicatorMap: avoid undefined behavior due to left shift (#246, !304) + * nls: Add ca_ES.UTF-8@valencia locale (#234, !303) + * Xutil.h: add include of Xresource.h (#242, !302) + * xkb: fix incorrect size check when growing doodads in a section (!300) + * XlibInt.c: use correct type for Win32 in SocketBytesReadable() (!299) + * XlibInt.h: prevent Win32 CreateWindow macro from leaking into our code (!299) +- superseded the following patches: + * 0001-1281653_CVE-2026-94283_ximcp-bound-XIM_OPEN_REPLY-attribute-lengths-to-the-.patch + * 0002-1281657_CVE-2026-94284_ximcp-bound-XIM_REGISTER_TRIGGERKEYS-keylist-lengths.patch + * 0003-1281661_CVE-2026-94285_lcGenConv-bound-byteM_parse_codeset-reads-to-remaini.patch + * u_xkb-Check-the-keysym-range-in-_XkbReadKeyActions-CVE.patch + +------------------------------------------------------------------- Old: ---- 0001-1281653_CVE-2026-94283_ximcp-bound-XIM_OPEN_REPLY-attribute-lengths-to-the-.patch 0002-1281657_CVE-2026-94284_ximcp-bound-XIM_REGISTER_TRIGGERKEYS-keylist-lengths.patch 0003-1281661_CVE-2026-94285_lcGenConv-bound-byteM_parse_codeset-reads-to-remaini.patch libX11-1.8.13.tar.xz u_xkb-Check-the-keysym-range-in-_XkbReadKeyActions-CVE.patch New: ---- libX11-1.8.14.tar.xz ----------(Old B)---------- Old:- superseded the following patches: * 0001-1281653_CVE-2026-94283_ximcp-bound-XIM_OPEN_REPLY-attribute-lengths-to-the-.patch * 0002-1281657_CVE-2026-94284_ximcp-bound-XIM_REGISTER_TRIGGERKEYS-keylist-lengths.patch Old: * 0001-1281653_CVE-2026-94283_ximcp-bound-XIM_OPEN_REPLY-attribute-lengths-to-the-.patch * 0002-1281657_CVE-2026-94284_ximcp-bound-XIM_REGISTER_TRIGGERKEYS-keylist-lengths.patch * 0003-1281661_CVE-2026-94285_lcGenConv-bound-byteM_parse_codeset-reads-to-remaini.patch Old: * 0002-1281657_CVE-2026-94284_ximcp-bound-XIM_REGISTER_TRIGGERKEYS-keylist-lengths.patch * 0003-1281661_CVE-2026-94285_lcGenConv-bound-byteM_parse_codeset-reads-to-remaini.patch * u_xkb-Check-the-keysym-range-in-_XkbReadKeyActions-CVE.patch Old: * 0003-1281661_CVE-2026-94285_lcGenConv-bound-byteM_parse_codeset-reads-to-remaini.patch * u_xkb-Check-the-keysym-range-in-_XkbReadKeyActions-CVE.patch ----------(Old E)---------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ libX11.spec ++++++ --- /var/tmp/diff_new_pack.V9sKIy/_old 2026-10-18 19:22:45.879368626 +0200 +++ /var/tmp/diff_new_pack.V9sKIy/_new 2026-10-18 19:22:45.881368709 +0200 @@ -17,7 +17,7 @@ Name: libX11 -Version: 1.8.13 +Version: 1.8.14 Release: 0 Summary: Core X11 protocol client library License: MIT @@ -32,10 +32,6 @@ # PATCH-FIX-UPSTREAM en-locales.diff fdo#48596 bnc#388711 -- Add missing data for more en locales Patch2: en-locales.diff Patch3: u_no-longer-crash-in-XVisualIDFromVisual.patch -Patch4: u_xkb-Check-the-keysym-range-in-_XkbReadKeyActions-CVE.patch -Patch11: 0001-1281653_CVE-2026-94283_ximcp-bound-XIM_OPEN_REPLY-attribute-lengths-to-the-.patch -Patch12: 0002-1281657_CVE-2026-94284_ximcp-bound-XIM_REGISTER_TRIGGERKEYS-keylist-lengths.patch -Patch13: 0003-1281661_CVE-2026-94285_lcGenConv-bound-byteM_parse_codeset-reads-to-remaini.patch BuildRequires: fdupes BuildRequires: libtool BuildRequires: pkgconfig @@ -125,10 +121,6 @@ %patch -P 1 %patch -P 2 %patch -P 3 -p1 -%patch -P 4 -p1 -%patch -P 11 -p1 -%patch -P 12 -p1 -%patch -P 13 -p1 %build %configure \ ++++++ libX11-1.8.13.tar.xz -> libX11-1.8.14.tar.xz ++++++ ++++ 16270 lines of diff (skipped)
