libX11 is the original client-side library for the core X11 protocol. This release includes:
* ximcp: bound XIM_OPEN_REPLY attribute lengths (CVE-2026-94283) (!310) * ximcp: bound XIM_REGISTER_TRIGGERKEYS keylist lengths (CVE-2026-94284) (!310) * lcGenConv: bound byteM_parse_codeset() reads (CVE-2026-94285) (!310) * xkb: Check the keysym range in _XkbReadKeyActions (CVE-2026-88806) (!309) * OpenDisplay: avoid NULL dereference in out-of-memory error path (!307) * XSetFontPath: zero-initialize packed font path buffer (#248, !306) * _XSend: treat xcb_writev returning 0 as failure (!305) * _XSend: discard the output buffer after an I/O error (!305) * XkbSetIndicatorMap: avoid undefined behavior due to left shift (#246, !304) * nls: Add ca_ES.UTF-8@valencia locale (#234, !303) * Xutil.h: add include of Xresource.h (#242, !302) * xkb: fix incorrect size check when growing doodads in a section (!300) * XlibInt.c: use correct type for Win32 in SocketBytesReadable() (!299) * XlibInt.h: prevent Win32 CreateWindow macro from leaking into our code (!299) For more information on the included security fixes, see the advisory at: https://lists.x.org/archives/xorg-announce/2026-October/003752.html Alan Coopersmith (9): XlibInt.h: prevent Win32 CreateWindow macro from leaking into our code XlibInt.c: use correct type for Win32 in SocketBytesReadable() Xutil.h: add include of Xresource.h nls: Add ca_ES.UTF-8@valencia locale XkbSetIndicatorMap: avoid undefined behavior due to left shift overflow XSetFontPath: zero-initialize packed font path buffer XOpenDisplay: avoid NULL dereference in out-of-memory error path Revert "XGetSubImage: improve efficiency by reducing number of temporary allocations" libX11 1.8.14 Charles G Waldman (2): _XSend: discard the output buffer after an I/O error _XSend: treat xcb_writev returning 0 as failure Mikhail Dmitrichenko (1): xkb: fix incorrect size check when growing doodads in a section Olivier Fourdan (3): ximcp: bound XIM_OPEN_REPLY attribute lengths to the received packet ximcp: bound XIM_REGISTER_TRIGGERKEYS keylist lengths to the packet lcGenConv: bound byteM_parse_codeset() reads to remaining input length Peter Hutterer (1): xkb: Check the keysym range in _XkbReadKeyActions (CVE-2026-88806) qkot (1): XGetSubImage: improve efficiency by reducing number of temporary allocations git tag: libX11-1.8.14 https://xorg.freedesktop.org/archive/individual/lib/libX11-1.8.14.tar.gz SHA256: ebb8a58549ddde50aa2e742b3b256557f451053d173be8dbfc2e8ac078eee1d6 libX11-1.8.14.tar.gz SHA512: 3c09aee8716a3ed44d8ab7afb4ed2daee84dd938b82f048550029ff728dd5f0077cfc74d5a37ff0e01d8e7ad1ae88e1e1a03579cedddc19e427194841f764860 libX11-1.8.14.tar.gz PGP: https://xorg.freedesktop.org/archive/individual/lib/libX11-1.8.14.tar.gz.sig https://xorg.freedesktop.org/archive/individual/lib/libX11-1.8.14.tar.xz SHA256: bbc78c46217174655c2b32b138ad119f3ac15f50808b4d0b3a2677a4b1afc950 libX11-1.8.14.tar.xz SHA512: 4d61596d06235791d6afab823d0457dc42d2769717eb80d4c7e5bc825bb08db6fae46a75561547c679b5f892f24ebd0e1129b60bd4a574f7d1edb3cbfc91df0c libX11-1.8.14.tar.xz PGP: https://xorg.freedesktop.org/archive/individual/lib/libX11-1.8.14.tar.xz.sig -- -Alan Coopersmith- [email protected] Oracle Solaris Engineering - https://blogs.oracle.com/solaris
signature.asc
Description: PGP signature
