* [Buildroot] [PATCH 1/2] package/xserver_xorg-server: security bump to version 21.1.9
@ 2023-12-11 15:25 Peter Korsgaard
2023-12-11 15:25 ` [Buildroot] [PATCH 2/2] package/xwayland: security bump to version 23.2.2 Peter Korsgaard
` (2 more replies)
0 siblings, 3 replies; 6+ messages in thread
From: Peter Korsgaard @ 2023-12-11 15:25 UTC (permalink / raw)
To: buildroot
Fixes the following security issues:
- CVE-2023-5367 X.Org server: OOB write in
XIChangeDeviceProperty/RRChangeOutputProperty
- CVE-2023-5380: Use-after-free bug in DestroyWindow
- CVE-2023-5574: Use-after-free bug in DamageDestroy
For details, see the advisory:
https://lists.x.org/archives/xorg-announce/2023-October/003430.html
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
---
package/x11r7/xserver_xorg-server/xserver_xorg-server.hash | 6 +++---
package/x11r7/xserver_xorg-server/xserver_xorg-server.mk | 2 +-
2 files changed, 4 insertions(+), 4 deletions(-)
diff --git a/package/x11r7/xserver_xorg-server/xserver_xorg-server.hash b/package/x11r7/xserver_xorg-server/xserver_xorg-server.hash
index 092a640f04..ccd7cc74fa 100644
--- a/package/x11r7/xserver_xorg-server/xserver_xorg-server.hash
+++ b/package/x11r7/xserver_xorg-server/xserver_xorg-server.hash
@@ -1,5 +1,5 @@
-# From https://lists.x.org/archives/xorg-announce/2023-March/003377.html
-sha256 38aadb735650c8024ee25211c190bf8aad844c5f59632761ab1ef4c4d5aeb152 xorg-server-21.1.8.tar.xz
-sha512 6104b3620ed2e1e27d9a8e963388bbe8785a764585b1bc03dbf5d719a92894773dda580d377ca18ceeab353e65a5d23cc947bab84a4012f9dd1eca31cac36937 xorg-server-21.1.8.tar.xz
+# From https://lists.x.org/archives/xorg-announce/2023-October/003431.html
+sha256 ff697be2011b4c4966b7806929e51b7a08e9d33800d505305d26d9ccde4b533a xorg-server-21.1.9.tar.xz
+sha512 9044e1b9222616fb63aea444b75f4ca6582edb7d899018f8ea30359e57edf04b1555e69397ebc4d288f7e36d6b82a54dde3895f11d414573d229e908ac17bfe8 xorg-server-21.1.9.tar.xz
# Locally calculated
sha256 4cc0447a22635c7b2f1a93fec4aa94f1970fadeb72a063de006b51cf4963a06f COPYING
diff --git a/package/x11r7/xserver_xorg-server/xserver_xorg-server.mk b/package/x11r7/xserver_xorg-server/xserver_xorg-server.mk
index ede03d024c..cf0e688c36 100644
--- a/package/x11r7/xserver_xorg-server/xserver_xorg-server.mk
+++ b/package/x11r7/xserver_xorg-server/xserver_xorg-server.mk
@@ -4,7 +4,7 @@
#
################################################################################
-XSERVER_XORG_SERVER_VERSION = 21.1.8
+XSERVER_XORG_SERVER_VERSION = 21.1.9
XSERVER_XORG_SERVER_SOURCE = xorg-server-$(XSERVER_XORG_SERVER_VERSION).tar.xz
XSERVER_XORG_SERVER_SITE = https://xorg.freedesktop.org/archive/individual/xserver
XSERVER_XORG_SERVER_LICENSE = MIT
--
2.39.2
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
^ permalink raw reply related [flat|nested] 6+ messages in thread* [Buildroot] [PATCH 2/2] package/xwayland: security bump to version 23.2.2
2023-12-11 15:25 [Buildroot] [PATCH 1/2] package/xserver_xorg-server: security bump to version 21.1.9 Peter Korsgaard
@ 2023-12-11 15:25 ` Peter Korsgaard
2023-12-12 21:56 ` Peter Korsgaard
2024-01-05 10:52 ` Peter Korsgaard
2023-12-12 21:56 ` [Buildroot] [PATCH 1/2] package/xserver_xorg-server: security bump to version 21.1.9 Peter Korsgaard
2024-01-05 10:46 ` Peter Korsgaard
2 siblings, 2 replies; 6+ messages in thread
From: Peter Korsgaard @ 2023-12-11 15:25 UTC (permalink / raw)
To: buildroot; +Cc: Raphael Pavlidis
Fixes the following security issues:
- CVE-2023-5367 X.Org server: OOB write in
XIChangeDeviceProperty/RRChangeOutputProperty
For details, see the advisory:
https://lists.x.org/archives/xorg-announce/2023-October/003430.html
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
---
package/x11r7/xwayland/xwayland.hash | 6 +++---
package/x11r7/xwayland/xwayland.mk | 2 +-
2 files changed, 4 insertions(+), 4 deletions(-)
diff --git a/package/x11r7/xwayland/xwayland.hash b/package/x11r7/xwayland/xwayland.hash
index b62f404d40..12363a66bf 100644
--- a/package/x11r7/xwayland/xwayland.hash
+++ b/package/x11r7/xwayland/xwayland.hash
@@ -1,6 +1,6 @@
-# From https://lists.x.org/archives/xorg-announce/2023-March/003376.html
-sha256 fb9461f5cb9fea5e07e91882311b0c88b43e8843b017ebac05eb5af69aa34c15 xwayland-23.1.1.tar.xz
-sha512 21c386847135c5cb4ac884926b0fbeb6ad21c9ee54752e0cdc8418e31a72872d81032159c1d91b8afb915aaaf65e80454342461d676996b2f3c535a37b0147f0 xwayland-23.1.1.tar.xz
+# From https://lists.x.org/archives/xorg-announce/2023-October/003432.html
+sha256 9f7c0938d2a41e941ffa04f99c35e5db2bcd3eec034afe8d35d5c810a22eb0a8 xwayland-23.2.2.tar.xz
+sha512 f5b319fdace7d7c078544730ecd26afeb63b1a0c779fb097455147945df85af32d9e91501ebdb70209d48e8a3ead3b23be31e9d5118358ac17e699abb4b6ac07 xwayland-23.2.2.tar.xz
# Locally calculated
sha256 4cc0447a22635c7b2f1a93fec4aa94f1970fadeb72a063de006b51cf4963a06f COPYING
diff --git a/package/x11r7/xwayland/xwayland.mk b/package/x11r7/xwayland/xwayland.mk
index 8550b61389..8eac602042 100644
--- a/package/x11r7/xwayland/xwayland.mk
+++ b/package/x11r7/xwayland/xwayland.mk
@@ -4,7 +4,7 @@
#
################################################################################
-XWAYLAND_VERSION = 23.1.1
+XWAYLAND_VERSION = 23.2.2
XWAYLAND_SOURCE = xwayland-$(XWAYLAND_VERSION).tar.xz
XWAYLAND_SITE = https://xorg.freedesktop.org/archive/individual/xserver
XWAYLAND_LICENSE = MIT
--
2.39.2
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
^ permalink raw reply related [flat|nested] 6+ messages in thread
* Re: [Buildroot] [PATCH 1/2] package/xserver_xorg-server: security bump to version 21.1.9
2023-12-11 15:25 [Buildroot] [PATCH 1/2] package/xserver_xorg-server: security bump to version 21.1.9 Peter Korsgaard
2023-12-11 15:25 ` [Buildroot] [PATCH 2/2] package/xwayland: security bump to version 23.2.2 Peter Korsgaard
@ 2023-12-12 21:56 ` Peter Korsgaard
2024-01-05 10:46 ` Peter Korsgaard
2 siblings, 0 replies; 6+ messages in thread
From: Peter Korsgaard @ 2023-12-12 21:56 UTC (permalink / raw)
To: buildroot
>>>>> "Peter" == Peter Korsgaard <peter@korsgaard.com> writes:
> Fixes the following security issues:
> - CVE-2023-5367 X.Org server: OOB write in
> XIChangeDeviceProperty/RRChangeOutputProperty
> - CVE-2023-5380: Use-after-free bug in DestroyWindow
> - CVE-2023-5574: Use-after-free bug in DamageDestroy
> For details, see the advisory:
> https://lists.x.org/archives/xorg-announce/2023-October/003430.html
> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Committed, thanks.
--
Bye, Peter Korsgaard
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
^ permalink raw reply [flat|nested] 6+ messages in thread
* Re: [Buildroot] [PATCH 1/2] package/xserver_xorg-server: security bump to version 21.1.9
2023-12-11 15:25 [Buildroot] [PATCH 1/2] package/xserver_xorg-server: security bump to version 21.1.9 Peter Korsgaard
2023-12-11 15:25 ` [Buildroot] [PATCH 2/2] package/xwayland: security bump to version 23.2.2 Peter Korsgaard
2023-12-12 21:56 ` [Buildroot] [PATCH 1/2] package/xserver_xorg-server: security bump to version 21.1.9 Peter Korsgaard
@ 2024-01-05 10:46 ` Peter Korsgaard
2 siblings, 0 replies; 6+ messages in thread
From: Peter Korsgaard @ 2024-01-05 10:46 UTC (permalink / raw)
To: buildroot
>>>>> "Peter" == Peter Korsgaard <peter@korsgaard.com> writes:
> Fixes the following security issues:
> - CVE-2023-5367 X.Org server: OOB write in
> XIChangeDeviceProperty/RRChangeOutputProperty
> - CVE-2023-5380: Use-after-free bug in DestroyWindow
> - CVE-2023-5574: Use-after-free bug in DamageDestroy
> For details, see the advisory:
> https://lists.x.org/archives/xorg-announce/2023-October/003430.html
> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Committed to 2023.02.x and 2023.11.x, thanks.
--
Bye, Peter Korsgaard
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
^ permalink raw reply [flat|nested] 6+ messages in thread
end of thread, other threads:[~2024-01-05 10:52 UTC | newest]
Thread overview: 6+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2023-12-11 15:25 [Buildroot] [PATCH 1/2] package/xserver_xorg-server: security bump to version 21.1.9 Peter Korsgaard
2023-12-11 15:25 ` [Buildroot] [PATCH 2/2] package/xwayland: security bump to version 23.2.2 Peter Korsgaard
2023-12-12 21:56 ` Peter Korsgaard
2024-01-05 10:52 ` Peter Korsgaard
2023-12-12 21:56 ` [Buildroot] [PATCH 1/2] package/xserver_xorg-server: security bump to version 21.1.9 Peter Korsgaard
2024-01-05 10:46 ` Peter Korsgaard
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox