* [Buildroot] [PATCH 2/4] package/x11r7/xserver_xorg-server: security bump version to 21.1.24
2026-07-12 11:30 [Buildroot] [PATCH 1/4] package/x11r7/xwayland: fix uClibc build Bernd Kuhls
@ 2026-07-12 11:30 ` Bernd Kuhls
2026-07-17 15:47 ` Thomas Perale via buildroot
2026-07-12 11:30 ` [Buildroot] [PATCH 3/4] package/x11r7/xwayland: security bump version to 24.1.13 Bernd Kuhls
` (3 subsequent siblings)
4 siblings, 1 reply; 9+ messages in thread
From: Bernd Kuhls @ 2026-07-12 11:30 UTC (permalink / raw)
To: buildroot; +Cc: Raphael Pavlidis
https://lists.x.org/archives/xorg-announce/2026-July/003718.html
https://lists.x.org/archives/xorg-announce/2026-July/003716.html
Fixes
- CVE-2026-55999: glamor Font Atlas Heap Buffer Overflow
- CVE-2026-56000: GLX contextTags Use-After-Free in CommonMakeCurrent()
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
---
Gitlab pipelines passed:
https://gitlab.com/bkuhls/buildroot/-/commits/ac5c6561894d41b86a43af13c4a5af16612c9195
https://gitlab.com/bkuhls/buildroot/-/commits/9c78a853c88fa85f7a31404b4ab324370cf049f6
package/x11r7/xserver_xorg-server/xserver_xorg-server.hash | 6 +++---
package/x11r7/xserver_xorg-server/xserver_xorg-server.mk | 2 +-
2 files changed, 4 insertions(+), 4 deletions(-)
diff --git a/package/x11r7/xserver_xorg-server/xserver_xorg-server.hash b/package/x11r7/xserver_xorg-server/xserver_xorg-server.hash
index 5f10908c8a..1f664e88e4 100644
--- a/package/x11r7/xserver_xorg-server/xserver_xorg-server.hash
+++ b/package/x11r7/xserver_xorg-server/xserver_xorg-server.hash
@@ -1,5 +1,5 @@
-# From https://lists.x.org/archives/xorg-announce/2026-June/003703.html
-sha256 e39832e5617dadaf072fdf9f0e19e5d2e1c2a13607ac280bac1aba9f8fe14634 xorg-server-21.1.23.tar.xz
-sha512 7eae854af1b5db1f5d1e59cb9d26b86d98fa176d4f80f70935c707f17982d0446a0a8ad8d29c922edbd208435f995b027604fbb72e62a7bf3ba79f2f570aa0bb xorg-server-21.1.23.tar.xz
+# From https://lists.x.org/archives/xorg-announce/2026-July/003718.html
+sha256 1a4eb36ca65cc3b1b936566d677a9786e13c11cd5806e951ac55f3f5ce3984af xorg-server-21.1.24.tar.xz
+sha512 f51372b04fe21632fc778ff240705161ed2dccc0114dbe3ee25156d8ac85ec945e2ac05d8638bc7d8d54bad4dfc89cb26b6bd2058b7804d54ab7179e1ac2eb13 xorg-server-21.1.24.tar.xz
# Locally calculated
sha256 c9f90a6669109aad6c9a7c3b46cc2c574221a73b792afa419336816b49da5c11 COPYING
diff --git a/package/x11r7/xserver_xorg-server/xserver_xorg-server.mk b/package/x11r7/xserver_xorg-server/xserver_xorg-server.mk
index cecbb821ae..d1596a8a3f 100644
--- a/package/x11r7/xserver_xorg-server/xserver_xorg-server.mk
+++ b/package/x11r7/xserver_xorg-server/xserver_xorg-server.mk
@@ -4,7 +4,7 @@
#
################################################################################
-XSERVER_XORG_SERVER_VERSION = 21.1.23
+XSERVER_XORG_SERVER_VERSION = 21.1.24
XSERVER_XORG_SERVER_SOURCE = xorg-server-$(XSERVER_XORG_SERVER_VERSION).tar.xz
XSERVER_XORG_SERVER_SITE = https://xorg.freedesktop.org/archive/individual/xserver
XSERVER_XORG_SERVER_LICENSE = MIT
--
2.47.3
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
^ permalink raw reply related [flat|nested] 9+ messages in thread* [Buildroot] [PATCH 3/4] package/x11r7/xwayland: security bump version to 24.1.13
2026-07-12 11:30 [Buildroot] [PATCH 1/4] package/x11r7/xwayland: fix uClibc build Bernd Kuhls
2026-07-12 11:30 ` [Buildroot] [PATCH 2/4] package/x11r7/xserver_xorg-server: security bump version to 21.1.24 Bernd Kuhls
@ 2026-07-12 11:30 ` Bernd Kuhls
2026-07-17 15:47 ` Thomas Perale via buildroot
2026-07-12 11:30 ` [Buildroot] [PATCH 4/4] package/x11r7/xlib_libXfont2: security bump version to 2.0.8 Bernd Kuhls
` (2 subsequent siblings)
4 siblings, 1 reply; 9+ messages in thread
From: Bernd Kuhls @ 2026-07-12 11:30 UTC (permalink / raw)
To: buildroot; +Cc: Raphael Pavlidis
https://lists.x.org/archives/xorg-announce/2026-July/003717.html
https://lists.x.org/archives/xorg-announce/2026-July/003716.html
Fixes
- CVE-2026-55999: glamor Font Atlas Heap Buffer Overflow
- CVE-2026-56000: GLX contextTags Use-After-Free in CommonMakeCurrent()
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
---
Gitlab pipelines passed:
https://gitlab.com/bkuhls/buildroot/-/commits/ac5c6561894d41b86a43af13c4a5af16612c9195
https://gitlab.com/bkuhls/buildroot/-/commits/9c78a853c88fa85f7a31404b4ab324370cf049f6
package/x11r7/xwayland/xwayland.hash | 6 +++---
package/x11r7/xwayland/xwayland.mk | 2 +-
2 files changed, 4 insertions(+), 4 deletions(-)
diff --git a/package/x11r7/xwayland/xwayland.hash b/package/x11r7/xwayland/xwayland.hash
index 2bf2d19020..c9b931b6e2 100644
--- a/package/x11r7/xwayland/xwayland.hash
+++ b/package/x11r7/xwayland/xwayland.hash
@@ -1,6 +1,6 @@
-# From https://lists.x.org/archives/xorg-announce/2026-June/003704.html
-sha256 6df02c511b92c1b9848734d9d1b03a4c24f8375ba3cada44e9684a21b5f78e21 xwayland-24.1.12.tar.xz
-sha512 b4ee41761c2caa7332573be07d9143b60015bb4a7910c90b6ae079dde0a1bf6b0b4773ff4e6fba48279cdee83b4de5eb4a19b9369b5753e4147b94fa2deece96 xwayland-24.1.12.tar.xz
+# From https://lists.x.org/archives/xorg-announce/2026-July/003717.html
+sha256 173aea3d6f79609164c04528e1c8e4c9b60fcd59391c3c9dad4667297d727fb6 xwayland-24.1.13.tar.xz
+sha512 e06e58025b441892fdd17ac55fd5c7e137bffc941b76ad784dc008047c778c6ee2895fcc47b9e8c74b1d8372491e69c39933c4186aec4df55571614f8ba98e3c xwayland-24.1.13.tar.xz
# Locally calculated
sha256 c9f90a6669109aad6c9a7c3b46cc2c574221a73b792afa419336816b49da5c11 COPYING
diff --git a/package/x11r7/xwayland/xwayland.mk b/package/x11r7/xwayland/xwayland.mk
index 2b8513602c..02a21b96c1 100644
--- a/package/x11r7/xwayland/xwayland.mk
+++ b/package/x11r7/xwayland/xwayland.mk
@@ -4,7 +4,7 @@
#
################################################################################
-XWAYLAND_VERSION = 24.1.12
+XWAYLAND_VERSION = 24.1.13
XWAYLAND_SOURCE = xwayland-$(XWAYLAND_VERSION).tar.xz
XWAYLAND_SITE = https://xorg.freedesktop.org/archive/individual/xserver
XWAYLAND_LICENSE = MIT
--
2.47.3
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
^ permalink raw reply related [flat|nested] 9+ messages in thread* [Buildroot] [PATCH 4/4] package/x11r7/xlib_libXfont2: security bump version to 2.0.8
2026-07-12 11:30 [Buildroot] [PATCH 1/4] package/x11r7/xwayland: fix uClibc build Bernd Kuhls
2026-07-12 11:30 ` [Buildroot] [PATCH 2/4] package/x11r7/xserver_xorg-server: security bump version to 21.1.24 Bernd Kuhls
2026-07-12 11:30 ` [Buildroot] [PATCH 3/4] package/x11r7/xwayland: security bump version to 24.1.13 Bernd Kuhls
@ 2026-07-12 11:30 ` Bernd Kuhls
2026-07-17 15:47 ` Thomas Perale via buildroot
2026-07-13 10:33 ` [Buildroot] [PATCH 1/4] package/x11r7/xwayland: fix uClibc build Julien Olivain via buildroot
2026-07-17 15:47 ` Thomas Perale via buildroot
4 siblings, 1 reply; 9+ messages in thread
From: Bernd Kuhls @ 2026-07-12 11:30 UTC (permalink / raw)
To: buildroot; +Cc: Raphael Pavlidis
https://lists.x.org/archives/xorg-announce/2026-July/003715.html
https://lists.x.org/archives/xorg-announce/2026-July/003714.html
Fixes
- CVE-2026-56001: BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow
- CVE-2026-56002: PCF Font Parsing Heap Buffer Overflow
- CVE-2026-56003: computeProps Property Buffer Heap Buffer Overflow
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
---
Gitlab pipelines passed:
https://gitlab.com/bkuhls/buildroot/-/commits/ac5c6561894d41b86a43af13c4a5af16612c9195
https://gitlab.com/bkuhls/buildroot/-/commits/9c78a853c88fa85f7a31404b4ab324370cf049f6
package/x11r7/xlib_libXfont2/xlib_libXfont2.hash | 6 +++---
package/x11r7/xlib_libXfont2/xlib_libXfont2.mk | 2 +-
2 files changed, 4 insertions(+), 4 deletions(-)
diff --git a/package/x11r7/xlib_libXfont2/xlib_libXfont2.hash b/package/x11r7/xlib_libXfont2/xlib_libXfont2.hash
index 4f50b2dbd2..86e972a0e8 100644
--- a/package/x11r7/xlib_libXfont2/xlib_libXfont2.hash
+++ b/package/x11r7/xlib_libXfont2/xlib_libXfont2.hash
@@ -1,5 +1,5 @@
-# From https://lists.x.org/archives/xorg-announce/2024-August/003523.html
-sha256 8b7b82fdeba48769b69433e8e3fbb984a5f6bf368b0d5f47abeec49de3e58efb libXfont2-2.0.7.tar.xz
-sha512 f703127df5d5b1093c9b73e019153ed7799523573d52e61d344209f0acfd4df42e11be12bdd1880479c47c2b70de581a4f2ef74e199e9b1ac438f426593d56b0 libXfont2-2.0.7.tar.xz
+# From https://lists.x.org/archives/xorg-announce/2026-July/003715.html
+sha256 f556c0e1093a4e6911cc90bc4b106d201902ee187fd74af206ff162f7e6a24d5 libXfont2-2.0.8.tar.xz
+sha512 e14cc3fa03d7baa4554ee5754ab33f69ac1da3d509c686a5f705fde8cd07772be564d68cc18d9fd0beb5ed7b2f864fcd7f6bf4983f5c0db08a9c747d0e001531 libXfont2-2.0.8.tar.xz
# Locally calculated
sha256 3b1047f0d45584973866a40e3eedc74aea4c6ac636960d650ae05af603e6d1a8 COPYING
diff --git a/package/x11r7/xlib_libXfont2/xlib_libXfont2.mk b/package/x11r7/xlib_libXfont2/xlib_libXfont2.mk
index c95f6c6395..a881a4c55b 100644
--- a/package/x11r7/xlib_libXfont2/xlib_libXfont2.mk
+++ b/package/x11r7/xlib_libXfont2/xlib_libXfont2.mk
@@ -4,7 +4,7 @@
#
################################################################################
-XLIB_LIBXFONT2_VERSION = 2.0.7
+XLIB_LIBXFONT2_VERSION = 2.0.8
XLIB_LIBXFONT2_SOURCE = libXfont2-$(XLIB_LIBXFONT2_VERSION).tar.xz
XLIB_LIBXFONT2_SITE = https://xorg.freedesktop.org/archive/individual/lib
XLIB_LIBXFONT2_LICENSE = MIT
--
2.47.3
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
^ permalink raw reply related [flat|nested] 9+ messages in thread
* Re: [Buildroot] [PATCH 1/4] package/x11r7/xwayland: fix uClibc build
2026-07-12 11:30 [Buildroot] [PATCH 1/4] package/x11r7/xwayland: fix uClibc build Bernd Kuhls
` (2 preceding siblings ...)
2026-07-12 11:30 ` [Buildroot] [PATCH 4/4] package/x11r7/xlib_libXfont2: security bump version to 2.0.8 Bernd Kuhls
@ 2026-07-13 10:33 ` Julien Olivain via buildroot
2026-07-17 15:47 ` Thomas Perale via buildroot
4 siblings, 0 replies; 9+ messages in thread
From: Julien Olivain via buildroot @ 2026-07-13 10:33 UTC (permalink / raw)
To: Bernd Kuhls; +Cc: buildroot, Raphael Pavlidis
On 12/07/2026 13:30, Bernd Kuhls wrote:
> Copy patch from xserver_xorg-server to fix build errors with uClibc.
>
> Fixes:
> https://autobuild.buildroot.net/results/c03/c03d57ad7ed3feac008091a38ea50bfccfa62b08/
>
> Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Series applied to master, thanks.
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
^ permalink raw reply [flat|nested] 9+ messages in thread* Re: [Buildroot] [PATCH 1/4] package/x11r7/xwayland: fix uClibc build
2026-07-12 11:30 [Buildroot] [PATCH 1/4] package/x11r7/xwayland: fix uClibc build Bernd Kuhls
` (3 preceding siblings ...)
2026-07-13 10:33 ` [Buildroot] [PATCH 1/4] package/x11r7/xwayland: fix uClibc build Julien Olivain via buildroot
@ 2026-07-17 15:47 ` Thomas Perale via buildroot
4 siblings, 0 replies; 9+ messages in thread
From: Thomas Perale via buildroot @ 2026-07-17 15:47 UTC (permalink / raw)
To: Bernd Kuhls; +Cc: Thomas Perale, buildroot
In reply of:
> Copy patch from xserver_xorg-server to fix build errors with uClibc.
>
> Fixes:
> https://autobuild.buildroot.net/results/c03/c03d57ad7ed3feac008091a38ea50bfccfa62b08/
>
> Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Applied to 2025.02.x & 2026.05.x. Thanks
> ---
> Gitlab pipelines passed:
> https://gitlab.com/bkuhls/buildroot/-/commits/ac5c6561894d41b86a43af13c4a5af16612c9195
> https://gitlab.com/bkuhls/buildroot/-/commits/9c78a853c88fa85f7a31404b4ab324370cf049f6
>
> .checkpackageignore | 1 +
> ...0001-include-misc.h-fix-uClibc-build.patch | 31 +++++++++++++++++++
> 2 files changed, 32 insertions(+)
> create mode 100644 package/x11r7/xwayland/0001-include-misc.h-fix-uClibc-build.patch
>
> diff --git a/.checkpackageignore b/.checkpackageignore
> index 6147f35b03..4ec39f9f36 100644
> --- a/.checkpackageignore
> +++ b/.checkpackageignore
> @@ -971,6 +971,7 @@ package/x11r7/xdriver_xf86-video-mach64/0001-cross-compile.patch lib_patch.Upstr
> package/x11r7/xdriver_xf86-video-tdfx/0001-cross.patch lib_patch.Upstream
> package/x11r7/xserver_xorg-server/0001-include-misc.h-fix-uClibc-build.patch lib_patch.Upstream
> package/x11r7/xserver_xorg-server/S40xorg Shellcheck lib_sysv.Variables
> +package/x11r7/xwayland/0001-include-misc.h-fix-uClibc-build.patch lib_patch.Upstream
> package/xl2tp/xl2tpd lib_shellscript.TrailingSpace
> package/yajl/0001-Let-the-shared-and-the-static-library-have-the-same-.patch lib_patch.Upstream
> package/yajl/0002-cmake-disable-shared-library-build-when-BUILD_SHARED.patch lib_patch.Upstream
> diff --git a/package/x11r7/xwayland/0001-include-misc.h-fix-uClibc-build.patch b/package/x11r7/xwayland/0001-include-misc.h-fix-uClibc-build.patch
> new file mode 100644
> index 0000000000..562aa79fbb
> --- /dev/null
> +++ b/package/x11r7/xwayland/0001-include-misc.h-fix-uClibc-build.patch
> @@ -0,0 +1,31 @@
> +From 2e8fca00f5bdb02f2f59aaa428d1e9d808ab0e86 Mon Sep 17 00:00:00 2001
> +From: Bernd Kuhls <bernd.kuhls@t-online.de>
> +Date: Sat, 16 Jun 2018 19:20:16 +0200
> +Subject: [PATCH] include/misc.h: fix uClibc build
> +
> +A similar fix was used for Dovecot:
> +https://www.dovecot.org/list/dovecot/2017-November/110019.html
> +
> +Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
> +---
> + include/misc.h | 4 ++++
> + 1 file changed, 4 insertions(+)
> +
> +diff --git a/include/misc.h b/include/misc.h
> +index 14920c3c3..390e52b60 100644
> +--- a/include/misc.h
> ++++ b/include/misc.h
> +@@ -185,6 +185,10 @@ typedef struct _xReq *xReqPtr;
> + #endif
> + #endif
> +
> ++#undef bswap_16
> ++#undef bswap_32
> ++#undef bswap_64
> ++
> + /**
> + * Calculate the number of bytes needed to hold bits.
> + * @param bits The minimum number of bits needed.
> +--
> +2.17.1
> +
> --
> 2.47.3
>
> _______________________________________________
> buildroot mailing list
> buildroot@buildroot.org
> https://lists.buildroot.org/mailman/listinfo/buildroot
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
^ permalink raw reply [flat|nested] 9+ messages in thread