CRD: 2023-03-29 12:00 UTC

- U_xserver-composite-Fix-use-after-free-of-the-COW.patch
  * overlay window use-after-free (CVE-2023-1393, ZDI-CAN-19866,
    bsc#1209543)

• Files Changed
• Browse Source

- U_Xext-fix-invalid-event-type-mask-in-XTestSwapFakeInp.patch
  * fixes regression introduced with security update for
    CVE-2022-46340 (bsc#1205874)

• Files Changed
• Browse Source

Not to be checked in before CRD 2023-02-07

- U_Xi-fix-potential-use-after-free-in-DeepCopyPointerCl.patch
  * DeepCopyPointerClasses use-after-free (CVE-2023-0494, 
    ZDI-CAN-19596, bsc#1207783)

• Files Changed
• Browse Source

CRD 2022-12-14. Please don't check in before!

- U_0007-xkb-reset-the-radio_groups-pointer-to-NULL-after-fre.patch
  * XkbGetKbdByName use-after-free (ZDI-CAN-19530, CVE-2022-4283,
    bsc#1206017)

- U_0001-Xtest-disallow-GenericEvents-in-XTestSwapFakeInput.patch
  * Server XTestSwapFakeInput stack overflow (ZDI-CAN 19265,
    CVE-2022-46340, bsc#1205874)
- U_0002-Xi-return-an-error-from-XI-property-changes-if-verif.patch
  * Xi: return an error from XI property changes if verification
    failed (no ZDI-CAN id, no CVE id, bsc#1205875)
- U_0003-Xi-avoid-integer-truncation-in-length-check-of-ProcX.patch
  * Server XIChangeProperty out-of-bounds access (ZDI-CAN 19405,
    CVE-2022-46344, bsc#1205876)
- U_0004-Xi-disallow-passive-grabs-with-a-detail-255.patch
  * Server XIPassiveUngrabDevice out-of-bounds access (ZDI-CAN 19381,
    CVE-2022-46341, bsc#1205877)
- U_0005-Xext-free-the-screen-saver-resource-when-replacing-i.patch
  * Server ScreenSaverSetAttributes use-after-free (ZDI-CAN 19404,
    CVE-2022-46343, bsc#1205878)
- U_0006-Xext-free-the-XvRTVideoNotify-when-turning-off-from-.patch
  * Server XvdiSelectVideoNotify use-after-free (ZDI-CAN 19400,
    CVE-2022-46342, bsc#1205879)

• Files Changed
• Browse Source

Xserver/Driver(-related) update, which also syncs to Mesa 22.2.0 to select the
correct GL driver for GLAMOR support

- Release 21.1 covers bugfixes and JIRA tickets for bsc#1176015,bsc#1182510,bsc#1182884,bsc#1184072,bsc#1184543,bsc#1184906,bsc#1186092,bsc#1188970,bsc#1194159,bsc#1196577,bsc#1197046,bsc#1197269,bsc#1200076,fdo#574,jsc#SLE-18653,jsc#SLE-8470
- Release 21.1 supersedes the following patches still used with
  xorg-x11-server 1.20.3 on sle15-sp4/Leap 15.4:
  * U_0002-DRI2-Add-another-Coffeelake-PCI-ID.patch
  * U_0002-Fix-crash-on-XkbSetMap.patch
  * U_0003-Fix-crash-on-XkbSetMap.patch
  * U_0003-dri2-Sync-i965_pci_ids.h-from-mesa.patch
  * U_0004-dri2-Set-fallback-driver-names-for-Intel-and-AMD-chi.patch
  * U_0005-dri2-Sync-i965_pci_ids.h-from-mesa-iris_pci_ids.h.patch
  * U_build-glx-Lower-gl-version-to-work-with-libglvnd.patch
  * U_glamor-Make-pixmap-exportable-from-gbm_bo_from_pixma.patch
  * U_hw_do-not-include-sys-io-with-glibc.patch
  * U_meson-Fix-another-reference-to-gl-9.2.0.patch
  * U_modesetting-Fix-broken-manpage-in-autoconf-build.patch
  * U_present-wnmd-Fix-use-after-free-on-CRTC-removal.patch
  * U_present-wnmd-Relax-assertion-on-CRTC-on-abort_vblank.patch
  * U_xfree86-Change-displays-array-to-pointers-array-to-f.patch
  * U_xfree86-Fix-NULL-pointer-dereference-crash.patch
  * U_xkbsetdeviceinfo.patch
  * u_sync-pci-ids-with-Mesa-21.2.4.patch
  * u_xf86-Accept-devices-with-the-simpledrm-driver.patch
  * u_xichangehierarchy-CVE-2020-14346.patch
  * u_xkb-CVE-2020-14345.patch
  * u_xkb-CVE-2020-14360.patch
[...]

• Files Changed
• Browse Source

initialize package

• Browse Source