Sign Up
Log In
Log In
or
Sign Up
Places
All Projects
Status Monitor
Collapse sidebar
SUSE:SLE-15-SP4:Update
xwayland.32029
xwayland.changes
Overview
Repositories
Revisions
Requests
Users
Attributes
Meta
File xwayland.changes of Package xwayland.32029
------------------------------------------------------------------- Wed Jan 17 13:20:37 UTC 2024 - Stefan Dirsch <sndirsch@suse.com> - U_bsc1218845-glx-Call-XACE-hooks-on-the-GLX-buffer.patch * SELinux unlabeled GLX PBuffer (CVE-2024-0408, bsc#1218845) - U_bsc1218846-ephyr-xwayland-Use-the-proper-private-key-for-cursor.patch * SELinux context corruption (CVE-2024-0409, bsc#1218846) ------------------------------------------------------------------- Mon Jan 8 13:27:16 UTC 2024 - Stefan Dirsch <sndirsch@suse.com> - bsc1218582-0001-dix-allocate-enough-space-for-logical-button-maps.patch * Heap buffer overflow in DeviceFocusEvent and ProcXIQueryPointer (CVE-2023-6816, bsc#1218582) - bsc1218583-0001-dix-Allocate-sufficient-xEvents-for-our-DeviceStateN.patch bsc1218583-0002-dix-fix-DeviceStateNotify-event-calculation.patch bsc1218583-0003-Xi-when-creating-a-new-ButtonClass-set-the-number-of.patch * Reattaching to different master device may lead to out-of-bounds memory access ((CVE-2024-0229, bsc#1218583) - bsc1218584-0001-Xi-flush-hierarchy-events-after-adding-removing-mast.patch * Heap buffer overflow in XISendDeviceHierarchyEvent (CVE-2024-21885, bsc#1218584) - bsc1218585-0001-Xi-do-not-keep-linked-list-pointer-during-recursion.patch bsc1218585-0002-dix-when-disabling-a-master-float-disabled-slaved-de.patch * Heap buffer overflow in DisableDevice (CVE-2024-21886, bsc#1218585) ------------------------------------------------------------------- Wed Dec 13 11:28:28 UTC 2023 - Joan Torres <joan.torres@suse.com> - Add missing fixes on U_bsc1217765-Xi-allocate-enough-XkbActions-for-our-buttons.patch (bsc#1217765). ------------------------------------------------------------------- Mon Dec 4 18:41:49 UTC 2023 - Stefan Dirsch <sndirsch@suse.com> - U_bsc1217765-Xi-allocate-enough-XkbActions-for-our-buttons.patch * Out-of-bounds memory write in XKB button actions (CVE-2023-6377, ZDI-CAN-22412, ZDI-CAN-22413, bsc#1217765) - U_bsc1217766-randr-avoid-integer-truncation-in-length-check-of-Pr.patch * Out-of-bounds memory read in RRChangeOutputProperty and RRChangeProviderProperty (CVE-2023-6478, ZDI-CAN-22561, bsc#1217766) ------------------------------------------------------------------- Wed Oct 25 09:45:01 UTC 2023 - Stefan Dirsch <sndirsch@suse.com> - U_bsc1216261-0001-mi-fix-CloseScreen-initialization-order.patch U_bsc1216261-0002-fb-properly-wrap-unwrap-CloseScreen.patch * Server Damage Object Use-After-Free Local Privilege Escalation Vulnerability (CVE-2023-5574, ZDI-CAN-21213, bsc#1216261) - U_bsc1216261-0003-dix-always-initialize-pScreen-CloseScreen.patch * fixes a regresion, which can trigger a segfault in Xwayland on exit, introduced by U_bsc1216261-0002-fb-properly-wrap-unwrap-CloseScreen.patch (CVE-2023-5574, ZDI-CAN-21213, bsc#1216261) ------------------------------------------------------------------- Fri Oct 13 13:07:11 UTC 2023 - Stefan Dirsch <sndirsch@suse.com> - U_bsc1216135-Xi-randr-fix-handling-of-PropModeAppend-Prepend.patch * fix handling of PropModeAppend/Prepend ((CVE-2023-5367, ZDI-CAN-22153, bsc#1216135) ------------------------------------------------------------------- Wed Mar 22 14:41:41 UTC 2023 - Stefan Dirsch <sndirsch@suse.com> - U_xserver-composite-Fix-use-after-free-of-the-COW.patch * overlay window use-after-free (CVE-2023-1393, ZDI-CAN-19866, bsc#1209543) ------------------------------------------------------------------- Sun Mar 5 13:00:34 UTC 2023 - Stefan Dirsch <sndirsch@suse.com> - U_Xext-fix-invalid-event-type-mask-in-XTestSwapFakeInp.patch * fixes regression introduced with security update for CVE-2022-46340 (bsc#1205874) ------------------------------------------------------------------- Wed Feb 1 10:39:42 UTC 2023 - Stefan Dirsch <sndirsch@suse.com> - U_Xi-fix-potential-use-after-free-in-DeepCopyPointerCl.patch * DeepCopyPointerClasses use-after-free (CVE-2023-0494, ZDI-CAN-19596, bsc#1207783) ------------------------------------------------------------------- Tue Dec 6 14:35:49 UTC 2022 - Stefan Dirsch <sndirsch@suse.com> - U_0007-xkb-reset-the-radio_groups-pointer-to-NULL-after-fre.patch * XkbGetKbdByName use-after-free (ZDI-CAN-19530, CVE-2022-4283, bsc#1206017) ------------------------------------------------------------------- Wed Nov 30 15:09:50 UTC 2022 - Stefan Dirsch <sndirsch@suse.com> - U_0001-Xtest-disallow-GenericEvents-in-XTestSwapFakeInput.patch * Server XTestSwapFakeInput stack overflow (ZDI-CAN 19265, CVE-2022-46340, bsc#1205874) - U_0002-Xi-return-an-error-from-XI-property-changes-if-verif.patch * Xi: return an error from XI property changes if verification failed (no ZDI-CAN id, no CVE id, bsc#1205875) - U_0003-Xi-avoid-integer-truncation-in-length-check-of-ProcX.patch * Server XIChangeProperty out-of-bounds access (ZDI-CAN 19405, CVE-2022-46344, bsc#1205876) - U_0004-Xi-disallow-passive-grabs-with-a-detail-255.patch * Server XIPassiveUngrabDevice out-of-bounds access (ZDI-CAN 19381, CVE-2022-46341, bsc#1205877) - U_0005-Xext-free-the-screen-saver-resource-when-replacing-i.patch * Server ScreenSaverSetAttributes use-after-free (ZDI-CAN 19404, CVE-2022-46343, bsc#1205878) - U_0006-Xext-free-the-XvRTVideoNotify-when-turning-off-from-.patch * Server XvdiSelectVideoNotify use-after-free (ZDI-CAN 19400, CVE-2022-46342, bsc#1205879) ------------------------------------------------------------------- Wed Oct 19 11:25:32 UTC 2022 - Stefan Dirsch <sndirsch@suse.com> - U_xkb-proof-GetCountedString-against-request-length-at.patch * security update for CVE-2022-3550 (bsc#1204412) - U_xkb-fix-some-possible-memleaks-in-XkbGetKbdByName.patch * security update for CVE-2022-3551 (bsc#1204416) ------------------------------------------------------------------- Tue Dec 14 15:44:46 UTC 2021 - Stefan Dirsch <sndirsch@suse.com> - Update to version 21.1.4 * Fixes for multiple input validation failures in X server extensions: + CVE-2021-4008/ZDI-CAN-14192 SProcRenderCompositeGlyphs out-of-bounds access (boo#1193030) + CVE-2021-4009/ZDI-CAN 14950 SProcXFixesCreatePointerBarrier out-of-bounds access (boo#1190487) + CVE-2021-4010/ZDI-CAN-14951 SProcScreenSaverSuspend out-of-bounds access (boo#1190488) + CVE-2021-4011/ZDI-CAN-14952 SwapCreateRegister out-of-bounds access (boo#1190489) * This release also includes other fixes such as: + Store EGLcontext to avoid superfluous eglMakeCurrent() calls + Prefer EGLStream with NVIDIA proprietary driver if both GBM and EGLstream are available ------------------------------------------------------------------- Mon Nov 8 11:45:16 UTC 2021 - Stefan Dirsch <sndirsch@suse.com> - Update to version 21.1.3 * Most notable change is a fix for the GBM backend to work with the Nvidia driver series 495. - supersedes U_glamor-Fix-handling-of-1-bit-pixmaps.patch ------------------------------------------------------------------- Thu Oct 7 12:22:22 UTC 2021 - Joan Torres <joan.torres@suse.com> - Specfile cleanup ------------------------------------------------------------------- Tue Sep 28 16:22:32 UTC 2021 - Stefan Dirsch <sndirsch@suse.com> - U_glamor-Fix-handling-of-1-bit-pixmaps.patch * glamor: Fix handling of 1-bit pixmaps; fixes e.g. issues with gimp on Wayland (which needs Xwayland) (boo#1189310) ------------------------------------------------------------------- Mon Sep 27 11:56:41 UTC 2021 - Stefan Dirsch <sndirsch@suse.com> - covers jira#SLE/SLE-18653 ------------------------------------------------------------------- Thu Jul 15 18:24:01 UTC 2021 - Macie McKitrick <macie.mckitrick@protonmail.com> - xwayland pc is required for S390x and S390 ------------------------------------------------------------------- Fri Jul 9 11:19:50 UTC 2021 - Stefan Dirsch <sndirsch@suse.com> - Update to version 21.1.2 * The only change compared to the release candidate is a fix for a long standing issue where Xwayland wouldn't send events to notify clients of RandR configuration changes in some cases. ------------------------------------------------------------------- Thu Jul 1 10:16:22 UTC 2021 - Stefan Dirsch <sndirsch@suse.com> - Update to version 21.1.1.901 (21.1.2 RC1) * It's a bit special, as most of the changes are not the usual stable branch fixes material, but are needed for HW accelerated direct rendering with the Nvidia 470 driver (which is currently in open beta). * changes are mostly specific to the EGLStream backend and do not affect the GBM backend. And they make a big difference for users of the EGLStream backend. * See https://lists.fedoraproject.org/archives/list/desktop@lists.fedoraproject.org/thread/BBZVDNST67I2AQOCPSHKYAY6D5Z66JIP/ for more information about testing the EGLStream changes - enabled Wayland eglstreams (needs new packages egl-wayland and eglexternalplatform) ------------------------------------------------------------------- Tue Apr 13 15:21:03 UTC 2021 - Stefan Dirsch <sndirsch@suse.com> - Update to version 21.1.1 * Fix XChangeFeedbackControl() request underflow (CVE-2021-3472, ZDI-CAN-1259, bsc#1180128) ------------------------------------------------------------------- Mon Apr 12 18:01:05 UTC 2021 - Tobias Klausmann <tobias.klausmann@freenet.de> - Additionally to not packing /usr/lib64/xorg/protocol.txt, delete it to fix the build ------------------------------------------------------------------- Mon Apr 12 10:48:11 UTC 2021 - Callum Farmer <gmbr3@opensuse.org> - Make vendor name the same as xorg-x11-server ------------------------------------------------------------------- Mon Apr 12 09:22:12 UTC 2021 - Stefan Dirsch <sndirsch@suse.com> - removed conflicting /usr/lib64/xorg/protocol.txt (already in xorg-x11-server package) ------------------------------------------------------------------- Wed Apr 7 08:55:57 UTC 2021 - Stefan Dirsch <sndirsch@suse.com> - added summary for -devel package - some cleanup ------------------------------------------------------------------- Wed Mar 17 21:20:29 UTC 2021 - Tobias Klausmann <tobias.klausmann@freenet.de> - Update to version 21.1.0: * meson: Make sure XKM_OUTPUT_DIR has a trailing slash * xwayland: Fix LeaveNotify for relative pointer - Highlights compared to xserver 1.20.10: * Xwayland's XVideo support (via glamor) now supports NV12 * glamor can now accelerate some more RENDER extension formats * Xwayland's GLX provider now uses the EGL implementation instead of Mesa's swrast_dri.so directly * Xwayland can now use the wp_viewport Wayland protocol for up-scaling of fullscreen applications setting lower resolutions via the RandR / XFree86-VidModeExtension extensions * Xwayland now alternates between multiple buffers for all Wayland surfaces, making it less of a special case compared to other Wayland clients * Xwayland can now use memfd_create for creating buffers shared with the Wayland compositor when glamor hardware acceleration is disabled * Xwayland has better support for clients using relative mouse input and keyboard grabs * An Xwayland.1 manpage is now installed * Xwayland now supports -listenfd, -version and -verbose command line options * Xwayland now installs an xwayland.pc file which helps discovering the path of the installed Xwayland binary and the features it supports * Only meson is supported for building * Only Xwayland and Xvfb can be built, only Xwayland can be installed ------------------------------------------------------------------- Thu Mar 4 09:49:25 UTC 2021 - Stefan Dirsch <sndirsch@suse.com> - update to 21.0.99.902 * second release candidate for the standalone Xwayland 21.1.0 release * meson.build: Keep the protocol version looking like xserver 1.20.x did * xwayland: Delay cursor visibility update ------------------------------------------------------------------- Fri Feb 26 10:25:41 UTC 2021 - Stefan Dirsch <sndirsch@suse.com> - added Buildrequires to pkgconfig(glproto) and pkgconfig(gl) to fix build on Leap ------------------------------------------------------------------- Fri Feb 19 13:22:04 UTC 2021 - Tobias Klausmann <tobias.klausmann@freenet.de> - Initial stand-alone Xwayland package version 21.0.99.901 (boo#1182677)
Locations
Projects
Search
Status Monitor
Help
OpenBuildService.org
Documentation
API Documentation
Code of Conduct
Contact
Support
@OBShq
Terms
openSUSE Build Service is sponsored by
The Open Build Service is an
openSUSE project
.
Sign Up
Log In
Places
Places
All Projects
Status Monitor
