This release contains fixes for the issues reported in today's security advisory: https://lists.x.org/archives/xorg/2024-January/061525.html
* CVE-2023-6816 * CVE-2024-0229 * CVE-2024-21885 * CVE-2024-21886 * CVE-2024-0408 * CVE-2024-0409 Additionally, it also contains several other fixes for glamor, libEI support, and FreeBSD. Jan Beich (2): os: Use LOCAL_PEERCRED to determine local client PID on FreeBSD os: Use KERN_PROC_ARGS to determine client command on DragonFly and FreeBSD José Expósito (2): Xi: do not keep linked list pointer during recursion Bump version to 23.2.4 Michel Dänzer (3): glamor: Don't override source alpha to 1.0 if it's used for blending glamor: Make glamor_set_alu take a DrawablePtr glamor: Fall back for mixed depth 24/32 in glamor_set_alu Olivier Fourdan (3): xwayland: Pass the correct oeffis device types glx: Call XACE hooks on the GLX buffer ephyr,xwayland: Use the proper private key for cursor Peter Hutterer (10): Xi: require a pointer and keyboard device for XIAttachToMaster dix: don't allow for devices with 0 axes xwayland: override the XTest sendEventsProc for all devices dix: initialize the XTest sendEventsProc for all devices dix: allocate enough space for logical button maps dix: Allocate sufficient xEvents for our DeviceStateNotify dix: fix DeviceStateNotify event calculation Xi: when creating a new ButtonClass, set the number of buttons Xi: flush hierarchy events after adding/removing master devices dix: when disabling a master, float disabled slaved devices too git tag: xwayland-23.2.4 https://xorg.freedesktop.org/archive/individual/xserver/xwayland-23.2.4.tar.xz SHA256: a99e159b6d0d33098b3b6ab22a88bfcece23c8b9d0ca72c535c55dcb0681b46b xwayland-23.2.4.tar.xz SHA512: ac3ff208cbef5bbe4637c335cfda226489c93b0a3768f2f4fb0201c588485ede38262fbce77ef1425b3d2a0be61b6580df53341c7b95e6072c8b6371ad29d187 xwayland-23.2.4.tar.xz PGP: https://xorg.freedesktop.org/archive/individual/xserver/xwayland-23.2.4.tar.xz.sig
OpenPGP_0x14706DBE1E4B4540.asc
Description: OpenPGP public key
OpenPGP_signature.asc
Description: OpenPGP digital signature