Size, dependencies, options and messages are those of xephyr.
Packages by version and architecture
latest
FreeBSD version
amd64
aarch64
i386
FreeBSD 16
21.1.25,1
21.1.25,1
–
FreeBSD 15
21.1.25,1
21.1.25,1
–
FreeBSD 14
21.1.25,1
21.1.25,1
21.1.25,1
quarterly (2026Q4)
FreeBSD version
amd64
aarch64
i386
FreeBSD 15
21.1.25,1
21.1.25,1
–
FreeBSD 14
21.1.25,1
21.1.25,1
21.1.25,1
version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.
Unaddressed (3)
The CVE record lists the packaged version 21.1.25,1 as affected, and no VuXML entry names the CVE. What does this mean?
Local attackers with a X connection able to provide GLX commit to the X server xorg-server before 21.2.24 and xwayland before 24.1.13 could cause a Heap Use After Free, …
Local attackers with a X connection able to provide PCX fonts to the X
server xorg-server before 21.2.24 and xwayland before 24.1.13 could
cause a heap buffer overflow…
A use-after-free flaw was found in xorg-x11-server-Xvfb. This issue occurs in Xvfb with a very specific and legacy configuration (a multi-screen setup with multiple prot…
VuXML only (0)
Listed in VuXML, the packaged version 21.1.25,1 is still in the affected range; pkg audit reports it. What does this mean?
None.
Fixed (33)
Show 33 fixed
VuXML entries whose affected range the packaged version has left, plus CVEs whose record still lists this version although VuXML considers them fixed (usually a backported fix).
VuXML · Local attackers with a X connection able to provide GLX commit to the X server xorg-server before 21.2.24 and xwayland before 24.1.13 could cause a Heap Use After Free, …
VuXML · Local attackers with a X connection able to provide PCX fonts to the X
server xorg-server before 21.2.24 and xwayland before 24.1.13 could
cause a heap buffer overflow…
maintainer-feedback? x11-servers/xorg-server: 'X -configure' does not delete /tmp/.X11-unix/X0 when done
New
2024-08-04
Commits (287)
Jung-uk Kim (jkim) · 1.5.3_3,1
- Partially back out the previous attempt to fix PS/2 protocol support. Extended PS/2 protocol without moused(8) is only supported from FreeBSD 7.1 and above. - Try default PS/2 and USB mouse ports if /dev/sysmouse does not exist. Previously, it was only available when HAL support was compiled in. They should be able to handle SysMouse protocol at operation level 1. - Check protocol for ums(4) as
Reviewed by: rnoland
- Update X.org ports to 7.4+ (few ports are more recent than the katamari). - Bump PORTREVISION for all ports depending on libglut since the shlib version number went from 4 to 3. - Bump PORTREVISION for all ports depending on libXaw as libXaw.so.8 isn't installed anymore. - Couple of ports fixes (mostly missing xorg components added to USE_XORG).
Bump portrevision due to upgrade of devel/gettext.
The affected ports are the ones with gettext as a run-dependency
according to ports/INDEX-7 (5007 of them) and the ones with USE_GETTEXT
in Makefile (29 of them).
PR: ports/124340
Submitted by: edwin@
Approved by: portmgr (pav)
- Auto-detect and use native extended PS/2 protocols with the latest psm(4). Since psm has gained write(2) support, it can be directly driven by X.org input drivers without help of moused(8) or SysMouse protocol. - Fix regressions without moused running.
PR: ports/122363, ports/122405
Fix mouse probing issues with HAL support:
- Do not probe /dev/psm0 as SysMouse if HAL support is enabled.
- Add /dev/ums0 as SysMouse if HAL support is disabled.
- Do not force sysmouse(4) mode unless device is /dev/sysmouse. When
moused(8) is not running, current mode level is untouched.
- Correcly check if moused is actually running. Checking pid file is
not enough because it may be /var/run/moused.<device>.pid when it is
invoked by devd(8) for USB mice.
- Do not attach device if it is opened by moused.
- Correctly add device path for HAL.
This patch is tested with many possible combinations of moused(8), HAL,
PS/2 mouse, USB mouse, and xorg.conf.
Tested by: cokane, jkim, marcus,
Matthew Seaman (m dot seaman at infracaninophile dot co dot uk)
- Check correct POSIX spec. date for clock_gettime(2) whether CLOCK_MONOTONIC is available. - If FreeBSD-specific CLOCK_MONOTONIC_FAST is available, use it instead of precise but slow gettimeofday(2) or CLOCK_MONOTONIC.
Reviewed by: stable, x11
Fix plist for sparc64. Should be a no-op on other archs, but bump portrevision for sparc64. While here, pet portlint.
Tested on: pointyhat
Submitted by: flz
Approved by: portmgr (self)
Add temporary fix for LEDs. Proper fix will be available in next xorg-server release but this one has been deemed good enough for now.
Obtained from: fd.o bugzilla
Teach xorg-server that FreeBSD >= 700053 supports PCI domains and how to deal with it. This affects !386 only and is based on the respective Linux support code.
Approved by: flz
- Update X.org ports to 7.3. - Mark XFree86-4 as DEPRECATED with EXPIRATION_DATE set to 2007-12-25. I hope that nobody will be bored enough on Christmas to remove them on that day.
Tested by: vehemens, Rene Ladan, Beech Rintoul, sarek on x11@
Fix loading modules on current by adding patch from devel/imake-6 since local copy of imake is used at configuring. Since FreeBSD versions older than 300004 are not supported, simplify patch to just return elf for default.
PR: ports/109091
Submitted by: Szilveszter Adam (sziszi at bsd dot hu)
Add vendor patch preventing overwiting of data on the stack or other parts of server by dbe and render extensions.
PR: ports/107733
Security: CVE-2006-6101 CVE-2006-6102 CVE-2006-6103
Chase the GNOME X11BASE to LOCALBASE move, and fix the build with the new freetype2 where needed.
Submitted by: mezz, ahze, pav, and many others
Approved by: portmgr (implicit, kris)
Add a better workaround for LP64 bug in ProcRenderCompositeGlyphs() in Xrender from XFree86 that takes endianess into account. This should fix the following errors on FreeBSD/sparc64:
'RenderBadGlyphSet (invalid GlyphSet parameter)'.
(Details: serial 8980 error_code 178 request_code 153 minor_code 24)
Submitted by: marius
Add my patch for buffer overflow in the Render extension's TriFan/TriStrip requests.
Security: CVE-2006-1526
Bugzilla: https://bugs.freedesktop.org/show_bug.cgi?id=6642
Complete removal of cfb from sunffb driver as was done post release in X.org CVS to avoid failure to load this driver because of unresolved symbols.
Digged up and tested by: Matthias Muthmann
PR: sparc64/94886
Obtained from: X.org CVS
Upgrade to X.Org 6.9.0 release. Remove separate mtree file for X_WINDOW_SYSTEM=XOrg case. Both X11 distributions now use the one from /etc/mtree again.
Do not put Apple Cinema Display to sleep right after DDC probe. No revision bump as this probably affects relatively small amount of users.
PR: ports/88623
Reported, fix found by: John O'Brien
Obtained from: X.Org CVS
If port belongs to X11 distribution different than ${X_WINDOW_SYSTEM} one, point to The X Window System and Virtual Consoles chapter of FAQ.
Add SHA256.
Fix the fix for CAN-2005-2495. Among other, this shoud fix problems with wine - thanks to Robert Backhaus (robbak at gmail.com) for testing.
Obtained from: Xorg CVS
Fix a use-after-free in the cursor code that's easily triggered with -AJ malloc opts and running current gdm.
Approved by: portmgr (marcus)
Obtained from: X.Org CVS
Grab a patch for keyboard on sparc64 from Xorg CVS. This makes 'kbd' driver work properly this time on FreeBSD/sparc64 so stop using workaround that defaults to old 'keyboard' one and remove erroneous patch by me.
Pointed out by: Matthias Muthmann (mmuthmann at gmx.net)
Tested by: Matthias Muthmann (Ultra10/type5c), me (Ultra5/type5)
Obtained from: Xorg CVS