Age | Commit message (Collapse) | Author |
|
The xkb security fix was committed earlier. This is the rest of the
21.1.14 update.
|
|
from config file" messages. These were printed after hotplug events which
could be frequent in some cases (I have machines where this happens every
10 seconds when the monitor is in a dpms power-saving mode resulting in a
full /var/log filesystem).
EDID vendor/product ID still logged, giving an indication that events are
happening, but reduced from ~3.5KB per event to <100 bytes.
based on a diff from / ok matthieu@
|
|
|
|
|
|
|
|
The security patches were already commited, sync with the rest
of the 21.1.12 relase.
|
|
|
|
implementations:
1) CVE-2023-6816 can be triggered by passing an invalid array index to
DeviceFocusEvent or ProcXIQueryPointer.
2) CVE-2024-0229 can be triggered if a device has both a button and a
key class and zero buttons.
3) CVE-2024-21885 can be triggered if a device with a given ID was
removed and a new device with the same ID added both in the same
operation.
4) CVE-2024-21886 can be triggered by disabling a master device with
disabled slave devices.
5) CVE-2024-0409 can be triggered by enabling SELinux
xserver_object_manager and running a client.
6) CVE-2024-0408 can be triggered by enabling SELinux
xserver_object_manager and creating a GLX PBuffer.
|
|
The security fixes have already been committed.
|
|
All the security patches have already been committed.
Udated autoconf to 2.71 explains the large build infrastructure diff.
|
|
CVE-2023-5367 CVE-2023-5380 CVE-2023-5574
|
|
ok matthieu@
|
|
|
|
Includes a few fixes to the security patches already committed.
|
|
Not having those file only create noise when merging upstream releases.
|
|
The security patches were already committed as part of july 24 errata.
This brings a few other bug fixes.
Tested by Walter Alejandro Iglesias.
|
|
This does *not* include the commit that reverts the new computation
of the screen resolution from dimensions returned by the screen since
many of you told they prefer the new behaviour from 21.1.1.
This is going to be discussed again before 7.1
|
|
0x2972 is 946GZ which is gen 4
|
|
From Julien Cristau
0148a15da1616a868d71abe1b56e3f28cc79533c in xserver git
without arm_video.c changes.
OK matthieu@
|
|
bounds read. White-space fix and ok jsg@
|
|
ok jsg@ on the upstream merge request.
|
|
|
|
|
|
|
|
|
|
|
|
This avoids keeping an open file descriptor on machines
where /dev/console is not a wsdisplay device.
|
|
ok matthieu@
|
|
From Julien Cristau
0148a15da1616a868d71abe1b56e3f28cc79533c in xserver git
without arm_video.c changes.
Fixes clang 11 build on mips64.
Input and OK jsg@
|
|
ok matthieu@ kettenis@
|
|
|
|
|
|
There is no reason to keep /dev/pci* and /dev/ttyC* open in this process.
pointed to by deraadt. ok kettenis@ deraadt@
|
|
|
|
|
|
ok patrick@, jsg@
|
|
|
|
|
|
use it when running withour root privileges which prevents us from
scanning the PCI bus.
This makes startx(1)/xinit(1) work again on modern systems with inteldrm(4),
radeondrm(4) and amdgpu(4). In some cases this will result in using a
different driver than with xenodm(4) which may expose issues (e.g. when
we prefer the intel Xorg driver) or loss of acceleration (e.g. older
cards supported by radeondrm(4)).
ok jsg@, matthieu@
|
|
ok matthieu@
|
|
ok matthieu@
|
|
This function removes too many modes, causing trouble with the vesa
driver at least. Problem reported by semarie@. Thanks.
|
|
They accumulated over releases for various reasons.
No build change.
|
|
|
|
xfree86: Hold input_lock across SPRITE functions in VGA arbiter
Fixes stack overflow crash with VGA arbiter used with multi GPU systems.
Report and fix identified by 'Joe M' on misc@. ok matthieu@
|
|
|
|
the modesetting driver uses these to pick a dri driver name
ok phessler@ kettenis@ matthieu@
|
|
On OpenBSD, we need the console fd to query wsdisplay type,
This was only causing problems with -keepPriv, since the privilege
separation code already calls xf86OpenConsole() earlier.
The function is idempotent, so there's no harm calling it
several times.
ok kettenis@
|
|
privileges. This Could cause arbitrary files overwrite.
CVE-2018-14665.
|
|
ok matthieu@
|