Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package xorg-x11-server for openSUSE:Factory
checked in at 2023-10-25 18:02:08
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/xorg-x11-server (Old)
and /work/SRC/openSUSE:Factory/.xorg-x11-server.new.24901 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "xorg-x11-server"
Wed Oct 25 18:02:08 2023 rev:420 rq:1120244 version:21.1.9
Changes:
--------
--- /work/SRC/openSUSE:Factory/xorg-x11-server/xorg-x11-server.changes
2023-04-02 19:17:01.744418994 +0200
+++
/work/SRC/openSUSE:Factory/.xorg-x11-server.new.24901/xorg-x11-server.changes
2023-10-25 18:02:53.746590489 +0200
@@ -1,0 +2,9 @@
+Wed Oct 25 11:05:06 UTC 2023 - Stefan Dirsch <sndir...@suse.com>
+
+- Update to version 21.1.9
+ * This release contains fixes for CVE-2023-5367, CVE-2023-5380
+ and CVE-2023-5574 as reported in today's security advisory:
+ https://lists.x.org/archives/xorg-announce/2023-October/003430.html
+- adjusted u_Use-better-fallbacks-to-generate-cookies-if-arc4rand.patch
+
+-------------------------------------------------------------------
Old:
----
xorg-server-21.1.8.tar.xz
xorg-server-21.1.8.tar.xz.sig
New:
----
xorg-server-21.1.9.tar.xz
xorg-server-21.1.9.tar.xz.sig
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ xorg-x11-server.spec ++++++
--- /var/tmp/diff_new_pack.b1ANse/_old 2023-10-25 18:02:54.778625198 +0200
+++ /var/tmp/diff_new_pack.b1ANse/_new 2023-10-25 18:02:54.782625333 +0200
@@ -36,7 +36,7 @@
%endif
Name: xorg-x11-server
-Version: 21.1.8
+Version: 21.1.9
Release: 0
URL: http://xorg.freedesktop.org/
Summary: X
++++++ u_Use-better-fallbacks-to-generate-cookies-if-arc4rand.patch ++++++
--- /var/tmp/diff_new_pack.b1ANse/_old 2023-10-25 18:02:54.922630041 +0200
+++ /var/tmp/diff_new_pack.b1ANse/_new 2023-10-25 18:02:54.926630176 +0200
@@ -24,11 +24,11 @@
os/auth.c | 138 ++++++++++++++++++++++++++++++++++++++++++++++--
3 files changed, 141 insertions(+), 7 deletions(-)
-Index: xorg-server-1.20.5/configure.ac
+Index: xorg-server-21.1.9/configure.ac
===================================================================
---- xorg-server-1.20.5.orig/configure.ac
-+++ xorg-server-1.20.5/configure.ac
-@@ -134,7 +134,7 @@ AM_CONDITIONAL(SPECIAL_DTRACE_OBJECTS, [
+--- xorg-server-21.1.9.orig/configure.ac
++++ xorg-server-21.1.9/configure.ac
+@@ -132,7 +132,7 @@ AM_CONDITIONAL(SPECIAL_DTRACE_OBJECTS, [
AC_HEADER_DIRENT
AC_HEADER_STDC
AC_CHECK_HEADERS([fcntl.h stdlib.h string.h unistd.h dlfcn.h stropts.h \
@@ -37,20 +37,11 @@
dnl Checks for typedefs, structures, and compiler characteristics.
AC_C_CONST
-@@ -166,7 +166,7 @@ AC_REPLACE_FUNCS([reallocarray strcasecm
- AM_CONDITIONAL(POLL, [test "x$ac_cv_func_poll" = "xyes"])
-
- AC_CHECK_LIB([bsd], [arc4random_buf])
--AC_CHECK_FUNCS([arc4random_buf])
-+AC_CHECK_FUNCS([arc4random_buf getentropy])
-
- AC_CHECK_DECLS([program_invocation_short_name], [], [], [[#include
<errno.h>]])
-
-Index: xorg-server-1.20.5/include/dix-config.h.in
+Index: xorg-server-21.1.9/include/dix-config.h.in
===================================================================
---- xorg-server-1.20.5.orig/include/dix-config.h.in
-+++ xorg-server-1.20.5/include/dix-config.h.in
-@@ -155,6 +155,9 @@
+--- xorg-server-21.1.9.orig/include/dix-config.h.in
++++ xorg-server-21.1.9/include/dix-config.h.in
+@@ -149,6 +149,9 @@
/* Define to 1 if you have the `arc4random_buf' function. */
#undef HAVE_ARC4RANDOM_BUF
@@ -60,7 +51,7 @@
/* Define to use libc SHA1 functions */
#undef HAVE_SHA1_IN_LIBC
-@@ -232,6 +235,9 @@
+@@ -226,6 +229,9 @@
/* Define to 1 if you have the <sys/utsname.h> header file. */
#undef HAVE_SYS_UTSNAME_H
@@ -70,22 +61,22 @@
/* Define to 1 if you have the `timingsafe_memcmp' function. */
#undef HAVE_TIMINGSAFE_MEMCMP
-Index: xorg-server-1.20.5/os/auth.c
+Index: xorg-server-21.1.9/os/auth.c
===================================================================
---- xorg-server-1.20.5.orig/os/auth.c
-+++ xorg-server-1.20.5/os/auth.c
-@@ -49,6 +49,10 @@ from The Open Group.
- #ifdef HAVE_LIBBSD
- #include <bsd/stdlib.h> /* for arc4random_buf() */
+--- xorg-server-21.1.9.orig/os/auth.c
++++ xorg-server-21.1.9/os/auth.c
+@@ -34,6 +34,10 @@ from The Open Group.
+ #ifdef HAVE_DIX_CONFIG_H
+ #include <dix-config.h>
#endif
+#include <errno.h>
+#ifdef HAVE_SYS_SYSCALL_H
+#include <syscall.h>
+#endif
- struct protocol {
- unsigned short name_length;
-@@ -310,16 +314,140 @@ GenerateAuthorization(unsigned name_leng
+ #include <X11/X.h>
+ #include <X11/Xauth.h>
+@@ -308,16 +312,140 @@ GenerateAuthorization(unsigned name_leng
#endif /* XCSECURITY */
++++++ xorg-server-21.1.8.tar.xz -> xorg-server-21.1.9.tar.xz ++++++
++++ 9473 lines of diff (skipped)
++++++ xorg-x11-server.keyring ++++++
Binary files /var/tmp/diff_new_pack.b1ANse/_old and
/var/tmp/diff_new_pack.b1ANse/_new differ
