CVSROOT: /cvs
Module name: xenocara
Changes by: [email protected] 2026/10/07 10:00:56
Modified files:
xserver/Xi : Tag: OPENBSD_7_9 exevents.c xibarriers.c
xipassivegrab.c
xserver/dix : Tag: OPENBSD_7_9 devices.c
xserver/glamor : Tag: OPENBSD_7_9 glamor_priv.h
glamor_transfer.c
xserver/glx : Tag: OPENBSD_7_9 glxcmds.c
xserver/include: Tag: OPENBSD_7_9 xkbstr.h
xserver/present: Tag: OPENBSD_7_9 present_notify.c
xserver/xkb : Tag: OPENBSD_7_9 XKBAlloc.c XKBMAlloc.c xkb.c
Log message:
Merge fixes from upstream for Xserver issues:
* CVE-2026-88812: XKB SetGeometry TextDoodad Double Free
* CVE-2026-93515: Present Extension Cross-Window Notify Use-After-Free
* CVE-2026-93516: XInput Passive Grab modifierDevice Use-After-Free
* CVE-2026-93517: GLX RenderLarge Heap Buffer Overflow
* CVE-2026-93518: XKB ResizeKeyType Numeric Truncation
* CVE-2026-93519: XFixes Pointer Barrier Event List Buffer Overflow
* CVE-2026-93520: XKB ChangeKeycodeRange Heap Out-of-Bounds Write
* CVE-2026-93521: RandR ChangeProviderProperty Heap Buffer Overflow
* CVE-2026-93522: Glamor CopyArea CPU-FBO Heap Buffer Overflow
* CVE-2026-93523: XInput2 PassiveUngrabDevice Modifier Out-of-Bounds Write
* CVE-2026-93524: XKB SetMap Key Width/Action Count Desync Out-Of-Bounds Read
* CVE-2026-93536: GestureBuildSprite Use-After-Free
from matthieu@
this is errata/7.9/032_xserver.patch.sig
