Local attackers with a X connection able to provide GLX commit to the X server xorg-server before 21.2.24 and xwayland before 24.1.13 could cause a Heap Use After Free, …
Local attackers with a X connection able to provide PCX fonts to the X
server xorg-server before 21.2.24 and xwayland before 24.1.13 could
cause a heap buffer overflow…
A use-after-free flaw was found in xorg-x11-server-Xvfb. This issue occurs in Xvfb with a very specific and legacy configuration (a multi-screen setup with multiple prot…
VuXML only (0)
Listed in VuXML, the packaged version 21.1.25,1 is still in the affected range; pkg audit reports it. What does this mean?
None.
Fixed (33)
Show 33 fixed
VuXML entries whose affected range the packaged version has left, plus CVEs whose record still lists this version although VuXML considers them fixed (usually a backported fix).
VuXML · Local attackers with a X connection able to provide GLX commit to the X server xorg-server before 21.2.24 and xwayland before 24.1.13 could cause a Heap Use After Free, …
VuXML · Local attackers with a X connection able to provide PCX fonts to the X
server xorg-server before 21.2.24 and xwayland before 24.1.13 could
cause a heap buffer overflow…
x11-servers/xorg-server: fix wrong types string instead of bool
meson has a bug which makes those wrong type being ignored, but muon
chokes on it.
No functional changes intented.
x11-servers/xorg-server: unbreak build on 15.0 after Secure RPC DES authentication removal (+)
FreeDesktop upstream have dropped support for Secure RPC DES authentication
in xorg-servers more than year ago [1]
FreeBSD have it dropped in commit https://cgit.freebsd.org/src/commit/?id=7ac276298b72982189ac1a5b17461936dc00163e
As follow-up set meson build flag -Dsecure-rpc to false to avoid include a dead legacy code.
[1] https://gitlab.freedesktop.org/xorg/xserver/-/commit/71b207a2ebc1465c7d9ad9262f60930f6a1d42ee
Discussed with: ivy
Approved by: portmgr blanket
x11-servers/xorg-server: Add upstream patch for xkbcomp directory
Add a patch commited upstream but not present in any releases (except
Xwayland ones) as xorg-server releases stopped a while ago. This adds
a fallback to use $XDG_RUNTIME_DIR for xkbcomp result file if the user
can't write to the configured directory, which is unlikely for xorg-server
as it's SUID but it is likely for xephyr or xvfb.
While here use the meson default for xkb_dir as it's the same as the one we
provide and use also the default for xkb_output_dir which defaults to
xkb_dir/compiled which is a link to /var/lib/xkb (setup by the xkeyboard-config
port).
Differential Revision: https://reviews.freebsd.org/D44697
Reviewed by: bapt
Sponsored by: Beckhoff Automation GmbH & Co. KG
*/*: Sunset 12.4-RELEASE/12-STABLE from ports tree
- Remove all references to defunct ARCH arm
- Remove all references to defunct ARCH sparc64
- Remove x11-drivers/xf86-video-sunffb which requires defunct sparc64
ARCH
- Remove sysutils/afbinit requires defunct sparc64 ARCH
- Remove all references to bktr driver
- Remove all references to defunct FreeBSD_12
- Remove all references to OSVERSION/OSREL corresponding to 12
- Remove conditionals in Mk/Uses/cabal.mk
- Remove sparc reference from Mk/Uses/qt-dist.mk
- Remove BROKEN_sparc64/NOT_FOR_ARCH=sparc64
- Remove BROKEN_FreeBSD_12* from:
- Remove OpenSSL patches from:
- Remove conditional flags for OSVERSION >= 1300000 to fixed flags.
Also move conditional flags for non sparc64/arm ARCH to fixed flags.
Reviewed by: brooks, jbeich, rene, salvadore
Differential Revision: https://reviews.freebsd.org/D42068
x11-servers/xorg-server: fix build on armv6/armv7
This reinstates USE_DEV_IO=1 on arm, a patch that was dropped in the
switch from autotools to meson.
Approved by: portmgr (build fix blanket)
MFH: 2023Q4
x11/xtrans: Don't unlink X11 Unix sockets.
Without this change calling `Xorg -displayfd ..` would always make X to use
:0 as the DISPLAY. This was a showstopper for running parallel desktop sessions.
The leftover UDS' are cleaned up during system's boot by the /etc/rc.d/cleartmp
service.
Based on work of jbeich and Olivier Certner <olivier.freebsd@free.fr>.
PR: 253277
Approved by: manu
Sponsored by: Serenity Cybersecurity, LLC
Differential Revision: https://reviews.freebsd.org/D30557
x11-servers/xorg-server: unbreak nvidia-driver < 410 after 88b0ae2bb9c6
Restore libglx.so -> .nvidia/libglx.so hardlink as symlink when
xorg-server is reinstalled after nvidia-driver.
PR: 271629
Reported by: gallatin
x11-servers/xorg-server: add missing features for PRIME
Modern PRIME X11 setups autoconfigure themselves, which internally
uses the udev and udev_kms options to do so. These options are required
for X to find the available DRM devices. This is needed for PRIME on
FreeBSD.
This is also adds the DRM platform code, taken from X commit:
https://gitlab.freedesktop.org/xorg/xserver/-/commit/5468123822bbe8cd0a0abe07bbbd3a9cb14ed2cb
Differential Revision: https://reviews.freebsd.org/D39886
Which is in master but not yet in any releases. This adds the platform
code to the build for DRM so that PRIME setups can work.
x11-servers/xorg-server: update to 21.1.8
This fixes:
* ZDI-CAN-19866/CVE-2023-1393: X.Org Server Overlay Window
Use-After-Free Local Privilege Escalation Vulnerability
If a client explicitly destroys the compositor overlay window (aka
COW), the Xserver would leave a dangling pointer to that window in the
CompScreen structure, which will trigger a use-after-free later.
PR: 270540
Approved by: x11 (maintainer)
MFH: 2023Q2
Security: 96d84238-b500-490b-b6aa-2b77090a0410
Remove WWW entries moved into port Makefiles
Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.
This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.
Approved by: portmgr (tcberner)
Add WWW entries to port Makefiles
It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.
Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.
There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.
This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.
There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.
The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.
Approved by: portmgr (tcberner)
xorg: upgrade to 21.1.4
Port changes:
- flavorize the port
- decouple Xwayland as it has been split from Xorg
- switch to meson
- cleanup non necessary patches anymore
- stop butchering the build system to play with Xorg.wrap but do it
in post-install
- remove dmx (no longer existing)
- use libmd for sha1 (remove dependency on open/libre ssl)
- always activate RPC security
- simplify postinstall/deinstall script and make them cross install friendly
- remove the SUID option and make it the default, we cannot startx as user without it
- only keep the mesa-dri dependency on xorg-server not others
xf86-video-ati: fix build with recent xorg
While here incorporate a patch which prevent crash of the driver
when xrandr is invoked
Update x11/libxcvt to provide cvt(1) and friends which are not provided anymore
Xorg
Reviewed by: tcberner, manu, jbeich
Approved by: tcberner, manu
Differential Revision: https://reviews.freebsd.org/D35661
x11-servers: remove 'Created by' lines
A big Thank You to the original contributors of these ports:
* Ade Lovett <ade@FreeBSD.org>
* Eric Anholt <anholt@FreeBSD.org>
* grog
* jabley@clear.co.nz
* lesi@FreeBSD.org
With hat: portmgr
x11-servers/xorg-server: Update to 1.20.13
Summary:
Changelogs to 1.20.12 in [1] and 1.20.13 in [2].
[1] https://lists.x.org/archives/xorg-announce/2021-July/003098.html
[2] https://lists.x.org/archives/xorg-announce/2021-July/003100.html
Reviewd by: x11 (manu,zeising)
Differential Revision: https://reviews.freebsd.org/D32539
x11-servers/xorg-server: patch to utilize CLOCK_MONOTONIC_FAST for the clock
This patches the X server to use CLOCK_MONOTONIC_FAST instead of
CLOCK_MONOTONIC for the clock. This is basically a reintroduction of
r208485 by jkim@ that was removed by accident(?).
Since the X server is fine with the Linux _COARSE clock the accuracy of
the FreeBSD _FAST clock should work too. I have run with this patch for
a long time without ill effects.
PR: 252816
Reviewed by: imp, markj, jkim, mhorne
Approved by: x11
graphics/mesa-libs: Bump reverse deps for libglvnd
Per discussion with bapt on helping pkg handle the changing of these
deps and avoiding impossible upgrade senarios.
PR: 246767
Reviewed by: manu, bapt
Approved by: x11
Differential Revision: https://reviews.freebsd.org/D30824