Thanks a lot for looking into it! Downstream in Alpine I just patched the
missing files back in:
https://gitlab.alpinelinux.org/alpine/aports/-/commit/df2766011388c902e97c67ed90c49c3ca59ba254.

On Tue Oct 28, 2025 at 4:08 PM CET, Olivier Fourdan wrote:
> Hi Achill
>
> That's right, I also just saw that.
>
> This is because of [1], therefore unrelated to the security fixes.
>
> It is weird because the release process first tries to build from the
> tarball, yet it did not raise that issue.
>
> Looking into it…
>
> Cheers
> Olivier
>
> [1] https://gitlab.freedesktop.org/xorg/xserver/-/merge_requests/1636
>
> On Tue, Oct 28, 2025 at 3:28 PM Achill Gilgenast <[email protected]> wrote:
>>
>> Hi, I wanted to remind you that the release tarball didn't include
>> test/scripts/xephyr-glamor-gles2-piglit.sh from
>> https://gitlab.freedesktop.org/xorg/xserver/-/commit/95b8991181b22031f67384403bc166c8749e7a16#23806d3e653431dc570a6d51547e6b234b4e291b
>> and therefore meson setup fails.
>>
>> Thanks!
>>
>> On Tue Oct 28, 2025 at 2:43 PM CET, Olivier Fourdan wrote:
>> > This release contains the fixes for the issues reported in today's security
>> > advisory: 
>> > https://lists.x.org/archives/xorg-announce/2025-October/003635.html
>> >
>> >    * CVE-2025-62229
>> >    * CVE-2025-62230
>> >    * CVE-2025-62231
>> >
>> > Additionally, it contains a number of additional fixes:
>> >
>> > Adam Jackson (1):
>> >        glamor: Lift the GLX EGL backend from Xwayland
>> >
>> > Alan Coopersmith (25):
>> >        panoramix: avoid null dereference in PanoramiXMaybeAddDepth()
>> >        panoramix: avoid null dereference in PanoramiXConsolidate()
>> >        os: Use EVP APIs when building with OpenSSL 3
>> >        xfree86: fix meson build on 64-bit Solaris/SPARC systems
>> >        xfree86: add missing headers to build sun_init.c on Solaris/SPARC
>> >        xfree86: Fix -Wdiscarded-qualifiers warnings in SPARC Sbus probe 
>> > code
>> >        Xext/shm: avoid null dereference in ShmInitScreenPriv()
>> >        Xext/sync: avoid null dereference if SysCounterGetPrivate() returns 
>> > NULL
>> >        Xext/sync: avoid null dereference in init_system_idle_counter()
>> >        Xext/sync: Avoid dereference of invalid pointer if malloc() failed
>> >        Xext/vidmode: avoid null dereference if VidModeCreateMode() 
>> > allocation fails
>> >        Xext/xres: avoid null dereference in ProcXResQueryClients()
>> >        Xext/xselinux: add fast path to ProcSELinuxListSelections()
>> >        Xext/xselinux: avoid memory leak in SELinuxAtomToSID()
>> >        Xext/xtest: avoid null dereference in ProcXTestFakeInput()
>> >        Xi: avoid null dereference if wOtherInputMasks() returns NULL
>> >        Xi: set value for led_values in CopySwapKbdFeedback()
>> >        Xi: handle allocation failure in ProcXGetDeviceDontPropagateList()
>> >        Xi: handle allocation failure in ProcXListInputDevices()
>> >        Xi: handle allocation failure in add_master_func()
>> >        dix: handle allocation failure in DeviceFocusEvent()
>> >        dix: avoid null dereference if wOtherInputMasks() returns NULL
>> >        dix: assert that size of buffers to swap is a multiple of the swap 
>> > size
>> >        dix: handle allocation failure in ChangeWindowDeviceCursor()
>> >        dix: avoid memory leak in ProcListProperties()
>> >
>> > Balló György (2):
>> >        glamor: Don't require EXT_gpu_shader4 unconditionally
>> >        glamor: Fallback to software rendering on GLSL link failure
>> >
>> > Dave Airlie (1):
>> >        glamor: handle EXT_gpu_shader4 in dual source blend paths
>> >
>> > Icenowy Zheng (1):
>> >        glamor: Fix dual blend on GLES3
>> >
>> > Jeffy Chen (1):
>> >        glamor: xv: Fix invalid accessing of plane attributes for NV12
>> >
>> > Konstantin (17):
>> >        meson: add glamor gles2 tests
>> >        glamor: transpose gradients transparently
>> >        glamor: fix XVideo run with GLES
>> >        glamor: fixes GL_INVALID_ENUM errors on ES if there is no quads
>> >        glamor: add gl_PointSize for ES shaders
>> >        glamor_egl: add helper functions for contexts
>> >        glamor_egl: add RenderingAPI option
>> >        xorg.conf.man: document new RenderingAPI option
>> >        glamor_egl: add info message about context API
>> >        glamor_egl: add support of GlxVendorLibrary option
>> >        glamor: xv: do not force a version on XV shaders
>> >        glamor: xv: reuse ports and shaders when possible
>> >        glamor: xv: prepare to one-plane formats
>> >        glamor: xv: enable UYVY acceleration
>> >        glamor: check BPP by render_format.
>> >        glamor: xv: fix UYVY alignment
>> >        Fix autotools build for Glamor GLX provider
>> >
>> > Konstantin Pugin (4):
>> >        glamor: accelerate incomplete textures for GL ES
>> >        glamor: support GLES3 shaders
>> >        glamor: add glvnd_vendor private
>> >        xorg: initialize glamor provider
>> >
>> > Lucas Stach (2):
>> >        glamor_egl: handle fd export failure in glamor_egl_fds_from_pixmap
>> >        glamor_egl: properly get FDs from multiplanar GBM BOs
>> >
>> > Michel Dänzer (1):
>> >        xwayland/glamor: Handle depth 15 in gbm_format_for_depth
>> >
>> > Mikhail Dmitrichenko (2):
>> >        os: avoid potential out-of-bounds access at logVHdrMessageVerb
>> >        dix: avoid null ptr deref at doListFontsWithInfo
>> >
>> > Nicolas Dufresne (1):
>> >        glamor: xv: Rewrite UYVY shader to match NV12/I420 CSC
>> >
>> > Olivier Fourdan (6):
>> >        .gitlab-ci: Use meson instead of ninja for running the tests
>> >        present: Fix use-after-free in present_create_notifies()
>> >        xkb: Make the RT_XKBCLIENT resource private
>> >        xkb: Free the XKB resource when freeing XkbInterest
>> >        xkb: Prevent overflow in XkbSetCompatMap()
>> >        xserver 21.1.19
>> >
>> > Pierre-Eric Pelloux-Prayer (3):
>> >        glamor: return the result of gbm_format_for_depth
>> >        glamor: use gbm_format_for_depth instead of open-coding it
>> >        glamor: reject configs using unsupported rgbBits size
>> >
>> > Vasily Khoruzhick (1):
>> >        glamor: use dual source blend on GL 2.1 with ARB_ES2_compatibility
>> >
>> > Yuriy Vasilev (3):
>> >        glamor: fix CbCr format handling
>> >        glamor: xv: add rgba32 format
>> >        glamor: xv: add rgb565
>> >
>> > git tag: xorg-server-21.1.19
>> >
>> > https://xorg.freedesktop.org/archive/individual/xserver/xorg-server-21..1.19.tar.gz
>> > SHA256: d99934e82dc8f0f4b4ffca1831e49a3ed5c0ab20488b3c31757443ac71af9f32  
>> > xorg-server-21.1.19.tar.gz
>> > SHA512: 
>> > 9477fe1a764691a1a15b8c43977e276070def8e6f0ccee81a8829b62ed068f1e238996b2c86fe7a2012f80a61fa442740d09cfcc288318d9933885c2cc416d14
>> >   xorg-server-21.1.19.tar.gz
>> > PGP:  
>> > https://xorg.freedesktop.org/archive/individual/xserver/xorg-server-21.1.19.tar.gz.sig
>> >
>> > https://xorg.freedesktop.org/archive/individual/xserver/xorg-server-21..1.19.tar.xz
>> > SHA256: ca6b38181685d7d7c935d0597cfe35ee8df4d0fbf8ac63301541e037e8b08f07  
>> > xorg-server-21.1.19.tar.xz
>> > SHA512: 
>> > f3b10c8c3aac849c889e0cd58f82c25b371d28702a93ad0bbb83a46c73d8079eec306f22e7441a1a2b53b6e29cb279d6203f03a2f0a80c9f39b1d134768806b6
>> >   xorg-server-21.1.19.tar.xz
>> > PGP:  
>> > https://xorg.freedesktop.org/archive/individual/xserver/xorg-server-21.1.19.tar.xz.sig
>>

Reply via email to