[BLFS Trac] #23577: xorg-server-21.1.24

#23577: xorg-server-21.1.24
-------------------------+-----------------------
 Reporter:  Joe Locash   |      Owner:  blfs-book
     Type:  enhancement  |     Status:  new
 Priority:  normal       |  Milestone:  13.1
Component:  BOOK         |    Version:  git
 Severity:  normal       |   Keywords:
-------------------------+-----------------------
 {{{
 This release contains the fixes for the issues reported in today's
 security advisory:
 https://lists.x.org/archives/xorg-announce/2026-July/003716.html

   -  CVE-2026-55999: glamor Font Atlas Heap Buffer Overflow
   -  CVE-2026-56000: GLX contextTags Use-After-Free in CommonMakeCurrent()

 As noted in the security advisory, CVE-2026-56000 seems to depend on a
 commit not previously in a 21.1.x release (but is present in this
 release). As far as we can tell, 21.1.23 and earlier are not vulnerable
 to CVE-2026-56000.

 On top of those we have few cleanup fixes backported to the 21.1 releases.

 Doğukan Korkmaztürk (1):
       GLX: Free the tag of the old context later

 Jeremy Huddleston Sequoia (2):
       xquartz/GL: silence OpenGL deprecation warnings
       xquartz/GL: advertise GLX_ARB_create_context and _profile

 Mikhail Dmitrichenko (1):
       xkb: preserve buffer on realloc failure

 Olivier Fourdan (4):
       dix: Silence a compiler warning in doListFontsAndAliases()
       dix: Silent static analyzer warning
       dix: Silence a compiler warning in doListFontsWithInfo()
       Xi: Check window attribute is valid in XIChangeCursor

 Peter Hutterer (7):
       dix/colormap: fix out-of-bounds read in FindColorInRootCmap
       glx: fix duplicate tagInfo->vendor = NULL assignment
       glamor: fix an error path cleanup
       glx: free old context tag before allocating new one in
 CommonMakeCurrent
       fb/mi/glamor: reject glyphs with negative dimensions
       glamor: reject fonts with per-glyph metrics exceeding maxbounds
       xserver 21.1.24

 git tag: xorg-server-21.1.24
 }}}
-- 
Ticket URL: <https://wiki.linuxfromscratch.org/blfs/ticket/23577>
BLFS Trac <https://wiki.linuxfromscratch.org/blfs/>
Beyond Linux From Scratch

-- 
http://lists.linuxfromscratch.org/sympa/info/blfs-book
Unsubscribe: See the above information page