linux/poky.git/meta/recipes-graphics/xorg-xserver, branch scarthgap

xserver-xorg: fix CVE-2025-62229 CVE-2025-62230 CVE-2025-62231

2025-11-26T15:50:35+00:00

>From https://lists.x.org/archives/xorg-announce/2025-October/003635.html: 1) CVE-2025-62229: Use-after-free in XPresentNotify structures creation Using the X11 Present extension, when processing and adding the notifications after presenting a pixmap, if an error occurs, a dangling pointer may be left in the error code path of the function causing a use-after-free when eventually destroying the notification structures later. Introduced in: Xorg 1.15 Fixed in: xorg-server-21.1.19 and xwayland-24.1.9 Fix: https://gitlab.freedesktop.org/xorg/xserver/-/commit/5a4286b1 Found by: Jan-Niklas Sohn working with Trend Micro Zero Day Initiative. 2) CVE-2025-62230: Use-after-free in Xkb client resource removal When removing the Xkb resources for a client, the function XkbRemoveResourceClient() will free the XkbInterest data associated with the device, but not the resource associated with it. As a result, when the client terminates, the resource delete function triggers a use-after-free. Introduced in: X11R6 Fixed in: xorg-server-21.1.19 and xwayland-24.1.9 Fix: https://gitlab.freedesktop.org/xorg/xserver/-/commit/99790a2c https://gitlab.freedesktop.org/xorg/xserver/-/commit/10c94238 Found by: Jan-Niklas Sohn working with Trend Micro Zero Day Initiative. 3) CVE-2025-62231: Value overflow in Xkb extension XkbSetCompatMap() The XkbCompatMap structure stores some of its values using an unsigned short, but fails to check whether the sum of the input data might overflow the maximum unsigned short value. Introduced in: X11R6 Fixed in: xorg-server-21.1.19 and xwayland-24.1.9 Fix: https://gitlab.freedesktop.org/xorg/xserver/-/commit/475d9f49 Found by: Jan-Niklas Sohn working with Trend Micro Zero Day Initiative. (From OE-Core rev: 50b9c34ba932761fab9035a54e58466d72b097bf) (From OE-Core rev: f5a10c4950ccb5570c72eb0a09618b7b3523bc39) Signed-off-by: Ross Burton Signed-off-by: Mathieu Dubois-Briand Signed-off-by: Richard Purdie Signed-off-by: Yogita Urade Signed-off-by: Steve Sakoman

xserver-xorg: remove redundant patch

2025-11-26T15:50:35+00:00

The underlying issue with -fno-common was resolved upstream in xserver 21.1.0 onwards[1]. [1] xserver 0148a15da ("compiler.h: don't define inb/outb and friends on mips") (From OE-Core rev: 74b77ee90efd50a703af76769fac66a0f7c394ca) (From OE-Core rev: f1b064e684cebc3e0c6ca36eb585e26b8da5583b) Signed-off-by: Ross Burton Signed-off-by: Mathieu Dubois-Briand Signed-off-by: Richard Purdie Signed-off-by: Yogita Urade Signed-off-by: Steve Sakoman

xserver-xorg: upgrade 21.1.6 -> 21.1.18

2025-07-29T14:59:53+00:00

xorg-server 21.1.17 This release contains the fixes for the issues reported in today's security advisory: https://lists.x.org/archives/xorg/2025-June/062055.html * CVE-2025-49175 * CVE-2025-49176 * CVE-2025-49177 * CVE-2025-49178 * CVE-2025-49179 * CVE-2025-49180 Additionally, this release includes a fix for CVE-2022-49737 which was issued after the fix was merged back in 2022 and several other various fixes. Ref: https://lists.x.org/archives/xorg-announce/2025-June/003609.html xorg-server 21.1.18 This release contains an additional fix for CVE-2025-49176 from June 17 security advisory: https://lists.x.org/archives/xorg/2025-June/062055.html Ref: https://lists.x.org/archives/xorg-announce/2025-June/003612.html (From OE-Core rev: 2ab7c45631f78ac8f6d19889fa8526d062329992) Signed-off-by: Vijay Anusuri Signed-off-by: Richard Purdie (cherry picked from commit a59b385184fb3a548dc27310fd04d64351d8dfba) Signed-off-by: Steve Sakoman

xserver-xorg: mark CVEs fixed in 21.1.16 as fixed

2025-03-26T15:48:51+00:00

These are tracked as versionless redhat CVEs in NVD DB. (From OE-Core rev: 84b1631bcbead1409ff44a1ed430244784c382be) Signed-off-by: Peter Marko Signed-off-by: Steve Sakoman

xserver-xorg: upgrade 21.1.15 -> 21.1.16

2025-03-15T13:40:08+00:00

Includes security fix * CVE-2025-26594 * CVE-2025-26595 * CVE-2025-26596 * CVE-2025-26597 * CVE-2025-26598 * CVE-2025-26599 * CVE-2025-26600 * CVE-2025-26601 Ref: https://lists.x.org/archives/xorg-announce/2025-February/003584.html https://lists.x.org/archives/xorg-announce/2025-February/003585.html (From OE-Core rev: 60d1d54a1c23f007434a1f2c1940fd8ccabe656f) Signed-off-by: Vijay Anusuri Signed-off-by: Richard Purdie (cherry picked from commit b5491688a045e52b2a1a00d04b746ed6af456784) Signed-off-by: Steve Sakoman

xserver-xf86-config: remove obsolete configuration files

2025-03-15T13:40:08+00:00

For reasons we have explicit xorg.conf files for a number of the qemu machines, but not all of them. These mainly disabled screen blanking (which is now down with a separate fragment) but also explictly set the device driver to fbdev which meant they didn't use the modesettings driver as they should (with the virtio framebuffer from qemu). This is the root cause of why the xserver 21.1.16 upgrade doesn't work on a number of machines: the /sys probing changed and the fbdev driver now refuses to use the PCI framebuffer device as there are better drivers, but we've explictly told xorg to use the wrong driver. For more details, see https://gitlab.freedesktop.org/xorg/xserver/-/issues/1798. (From OE-Core rev: ccbb0f5491e13d61015872fba93417b91c3213a2) Signed-off-by: Ross Burton Signed-off-by: Richard Purdie (cherry picked from commit 8c8039bf4c2d011e3d12c970ce45036b184902a9) Signed-off-by: Steve Sakoman

xserver-xf86-config: add a configuration fragment to disable screen blanking

2025-03-15T13:40:08+00:00

Add a configuration fragment that disables screen blanking, and add it to all qemu machines. (From OE-Core rev: bb16526a4a0c39b6c156edbf68c7377bfdfa0bd1) Signed-off-by: Ross Burton Signed-off-by: Richard Purdie (cherry picked from commit 780a5ccaa51d5aed18200883a686387e70847e4b) Signed-off-by: Steve Sakoman

xserver-xorg: upgrade 21.1.14 -> 21.1.15

2025-03-15T13:40:08+00:00

(From OE-Core rev: 1fdd0a6824f34ce18c4adac8f0014935896b3e21) Signed-off-by: Wang Mingyu Signed-off-by: Mathieu Dubois-Briand Signed-off-by: Richard Purdie (cherry picked from commit ba94110d70ebfb1b4798ecf05389f7ea602b1f55) Signed-off-by: Steve Sakoman

xserver-xorg: upgrade 21.1.13 -> 21.1.14

2024-11-09T13:53:57+00:00

Includes security fix CVE-2024-9632 Ref: https://lists.x.org/archives/xorg/2024-October/061765.html (From OE-Core rev: 79fed0fa3e25e29ed15c2e80c736a44535556a67) Signed-off-by: Vijay Anusuri Signed-off-by: Richard Purdie (cherry picked from commit 957ba32bc6fdffd3a796a04ba222fae6cd673f7e) Signed-off-by: Steve Sakoman

xserver-xorg: fix CVE-2023-5574 status

2024-09-09T13:08:10+00:00

If XvFB is enabled, the CVE_STATUS for CVE-2023-5574 should be 'unpatched' rather than the empty string. Otherwise SDPX checker complains: xserver-xorg-2_21.1.13-r0 do_create_spdx: Unknown CVE status (From OE-Core rev: 9965028d74b3c480f7556d299d616999822b79bf) Signed-off-by: Dmitry Baryshkov Signed-off-by: Richard Purdie (cherry picked from commit 0ec5dcbdd7c922df25ce90b04902d9c7c749a8c0) Signed-off-by: Steve Sakoman