This release contains the fixes for the issues reported in today's security advisory: https://lists.x.org/archives/xorg-announce/2025-October/003635.html
* CVE-2025-62229
* CVE-2025-62230
* CVE-2025-62231
Additionally, it contains a number of additional fixes:
Adam Jackson (1):
glamor: Lift the GLX EGL backend from Xwayland
Alan Coopersmith (25):
panoramix: avoid null dereference in PanoramiXMaybeAddDepth()
panoramix: avoid null dereference in PanoramiXConsolidate()
os: Use EVP APIs when building with OpenSSL 3
xfree86: fix meson build on 64-bit Solaris/SPARC systems
xfree86: add missing headers to build sun_init.c on Solaris/SPARC
xfree86: Fix -Wdiscarded-qualifiers warnings in SPARC Sbus probe code
Xext/shm: avoid null dereference in ShmInitScreenPriv()
Xext/sync: avoid null dereference if SysCounterGetPrivate() returns NULL
Xext/sync: avoid null dereference in init_system_idle_counter()
Xext/sync: Avoid dereference of invalid pointer if malloc() failed
Xext/vidmode: avoid null dereference if VidModeCreateMode() allocation
fails
Xext/xres: avoid null dereference in ProcXResQueryClients()
Xext/xselinux: add fast path to ProcSELinuxListSelections()
Xext/xselinux: avoid memory leak in SELinuxAtomToSID()
Xext/xtest: avoid null dereference in ProcXTestFakeInput()
Xi: avoid null dereference if wOtherInputMasks() returns NULL
Xi: set value for led_values in CopySwapKbdFeedback()
Xi: handle allocation failure in ProcXGetDeviceDontPropagateList()
Xi: handle allocation failure in ProcXListInputDevices()
Xi: handle allocation failure in add_master_func()
dix: handle allocation failure in DeviceFocusEvent()
dix: avoid null dereference if wOtherInputMasks() returns NULL
dix: assert that size of buffers to swap is a multiple of the swap size
dix: handle allocation failure in ChangeWindowDeviceCursor()
dix: avoid memory leak in ProcListProperties()
Balló György (2):
glamor: Don't require EXT_gpu_shader4 unconditionally
glamor: Fallback to software rendering on GLSL link failure
Dave Airlie (1):
glamor: handle EXT_gpu_shader4 in dual source blend paths
Icenowy Zheng (1):
glamor: Fix dual blend on GLES3
Jeffy Chen (1):
glamor: xv: Fix invalid accessing of plane attributes for NV12
Konstantin (17):
meson: add glamor gles2 tests
glamor: transpose gradients transparently
glamor: fix XVideo run with GLES
glamor: fixes GL_INVALID_ENUM errors on ES if there is no quads
glamor: add gl_PointSize for ES shaders
glamor_egl: add helper functions for contexts
glamor_egl: add RenderingAPI option
xorg.conf.man: document new RenderingAPI option
glamor_egl: add info message about context API
glamor_egl: add support of GlxVendorLibrary option
glamor: xv: do not force a version on XV shaders
glamor: xv: reuse ports and shaders when possible
glamor: xv: prepare to one-plane formats
glamor: xv: enable UYVY acceleration
glamor: check BPP by render_format.
glamor: xv: fix UYVY alignment
Fix autotools build for Glamor GLX provider
Konstantin Pugin (4):
glamor: accelerate incomplete textures for GL ES
glamor: support GLES3 shaders
glamor: add glvnd_vendor private
xorg: initialize glamor provider
Lucas Stach (2):
glamor_egl: handle fd export failure in glamor_egl_fds_from_pixmap
glamor_egl: properly get FDs from multiplanar GBM BOs
Michel Dänzer (1):
xwayland/glamor: Handle depth 15 in gbm_format_for_depth
Mikhail Dmitrichenko (2):
os: avoid potential out-of-bounds access at logVHdrMessageVerb
dix: avoid null ptr deref at doListFontsWithInfo
Nicolas Dufresne (1):
glamor: xv: Rewrite UYVY shader to match NV12/I420 CSC
Olivier Fourdan (6):
.gitlab-ci: Use meson instead of ninja for running the tests
present: Fix use-after-free in present_create_notifies()
xkb: Make the RT_XKBCLIENT resource private
xkb: Free the XKB resource when freeing XkbInterest
xkb: Prevent overflow in XkbSetCompatMap()
xserver 21.1.19
Pierre-Eric Pelloux-Prayer (3):
glamor: return the result of gbm_format_for_depth
glamor: use gbm_format_for_depth instead of open-coding it
glamor: reject configs using unsupported rgbBits size
Vasily Khoruzhick (1):
glamor: use dual source blend on GL 2.1 with ARB_ES2_compatibility
Yuriy Vasilev (3):
glamor: fix CbCr format handling
glamor: xv: add rgba32 format
glamor: xv: add rgb565
git tag: xorg-server-21.1.19
https://xorg.freedesktop.org/archive/individual/xserver/xorg-server-21.1.19.tar.gz
SHA256: d99934e82dc8f0f4b4ffca1831e49a3ed5c0ab20488b3c31757443ac71af9f32
xorg-server-21.1.19.tar.gz
SHA512:
9477fe1a764691a1a15b8c43977e276070def8e6f0ccee81a8829b62ed068f1e238996b2c86fe7a2012f80a61fa442740d09cfcc288318d9933885c2cc416d14
xorg-server-21.1.19.tar.gz
PGP:
https://xorg.freedesktop.org/archive/individual/xserver/xorg-server-21.1.19.tar.gz.sig
https://xorg.freedesktop.org/archive/individual/xserver/xorg-server-21.1.19.tar.xz
SHA256: ca6b38181685d7d7c935d0597cfe35ee8df4d0fbf8ac63301541e037e8b08f07
xorg-server-21.1.19.tar.xz
SHA512:
f3b10c8c3aac849c889e0cd58f82c25b371d28702a93ad0bbb83a46c73d8079eec306f22e7441a1a2b53b6e29cb279d6203f03a2f0a80c9f39b1d134768806b6
xorg-server-21.1.19.tar.xz
PGP:
https://xorg.freedesktop.org/archive/individual/xserver/xorg-server-21.1.19.tar.xz.sig
OpenPGP_0x14706DBE1E4B4540.asc
Description: OpenPGP public key
OpenPGP_signature.asc
Description: OpenPGP digital signature
