CVSROOT: /cvs
Module name: xenocara
Changes by: [email protected] 2026/10/06 20:51:16
Modified files:
xserver/Xi : exevents.c xibarriers.c xipassivegrab.c
xserver/dix : devices.c
xserver/glamor : glamor_priv.h glamor_transfer.c
xserver/glx : glxcmds.c
xserver/include: xkbstr.h
xserver/present: present_notify.c
xserver/xkb : XKBAlloc.c XKBMAlloc.c xkb.c
Log message:
Merge fixes from upstream for Xserver issues:
* CVE-2026-88812: XKB SetGeometry TextDoodad Double Free
* CVE-2026-93515: Present Extension Cross-Window Notify Use-After-Free
* CVE-2026-93516: XInput Passive Grab modifierDevice Use-After-Free
* CVE-2026-93517: GLX RenderLarge Heap Buffer Overflow
* CVE-2026-93518: XKB ResizeKeyType Numeric Truncation
* CVE-2026-93519: XFixes Pointer Barrier Event List Buffer Overflow
* CVE-2026-93520: XKB ChangeKeycodeRange Heap Out-of-Bounds Write
* CVE-2026-93521: RandR ChangeProviderProperty Heap Buffer Overflow
* CVE-2026-93522: Glamor CopyArea CPU-FBO Heap Buffer Overflow
* CVE-2026-93523: XInput2 PassiveUngrabDevice Modifier Out-of-Bounds Write
* CVE-2026-93524: XKB SetMap Key Width/Action Count Desync Out-Of-Bounds Read
* CVE-2026-93536: GestureBuildSprite Use-After-Free
