Mirror of git.yoctoproject.org/poky https://git.enea.com/cgit/linux/poky.git/atom?h=yocto-4.0.29 2025-03-27T15:16:30+00:00 2025-03-27T15:16:30+00:00 Yogita Urade yogita.urade@windriver.com 2025-03-21T12:55:51+00:00 urn:sha1:5076bd268c7a47969d2d62f979656d635cfe9f0f In X.Org X server 20.11 through 21.1.16, when a client application uses easystroke for mouse gestures, the main thread modifies various data structures used by the input thread without acquiring a lock, aka a race condition. In particular, AttachDevice in dix/devices.c does not acquire an input lock. Reference: https://nvd.nist.gov/vuln/detail/CVE-2022-49737 Upstream patch: https://gitlab.freedesktop.org/xorg/xserver/-/commit/dc7cb45482cea6ccec22d117ca0b489500b4d0a0 (From OE-Core rev: c6a8ad45174a416c4129deb210eab9b7721ce01d) Signed-off-by: Yogita Urade <yogita.urade@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> 2025-03-04T16:46:02+00:00 Vijay Anusuri vanusuri@mvista.com 2025-02-27T12:32:06+00:00 urn:sha1:181051aa56c04703a78ecf7769d04eab3ca7d25e Upstream-Status: Backport from https://gitlab.freedesktop.org/xorg/xserver/-/commit/16a1242d & https://gitlab.freedesktop.org/xorg/xserver/-/commit/f52cea2f & https://gitlab.freedesktop.org/xorg/xserver/-/commit/8cbc90c8 & https://gitlab.freedesktop.org/xorg/xserver/-/commit/c2857989 (From OE-Core rev: edc4a85c1aa5a137d4f5d8fbc74135c6805511db) Signed-off-by: Vijay Anusuri <vanusuri@mvista.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> 2025-03-04T16:46:02+00:00 Vijay Anusuri vanusuri@mvista.com 2025-02-27T12:32:05+00:00 urn:sha1:7c9d09d47c628f9fec00edae5100bc459ce7949f Upstream-Status: Backport from https://gitlab.freedesktop.org/xorg/xserver/-/commit/6e0f332b (From OE-Core rev: 4227ae54a29ca8b454e56ffd27de2bbce00b6b89) Signed-off-by: Vijay Anusuri <vanusuri@mvista.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> 2025-03-04T16:46:02+00:00 Vijay Anusuri vanusuri@mvista.com 2025-02-27T12:32:04+00:00 urn:sha1:b4512e569158c91bf609017b1a37f57a7658ebd2 Upstream-Status: Backport from https://gitlab.freedesktop.org/xorg/xserver/-/commit/c1ff84be & https://gitlab.freedesktop.org/xorg/xserver/-/commit/b07192a8 (From OE-Core rev: c013fec3e5dd86544366308f53a031b080b140c6) Signed-off-by: Vijay Anusuri <vanusuri@mvista.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> 2025-03-04T16:46:02+00:00 Vijay Anusuri vanusuri@mvista.com 2025-02-27T12:32:03+00:00 urn:sha1:a67118698633e4410548c42728a30999f657bba6 Upstream-Status: Backport from https://gitlab.freedesktop.org/xorg/xserver/-/commit/bba9df1a (From OE-Core rev: 645ad1bcf8675873a7ab4778ffd2dd59dbb7b037) Signed-off-by: Vijay Anusuri <vanusuri@mvista.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> 2025-03-04T16:46:02+00:00 Vijay Anusuri vanusuri@mvista.com 2025-02-27T12:32:02+00:00 urn:sha1:8e5a4d12ba688f54dd62d382876bd280ce7414c2 Upstream-Status: Backport from https://gitlab.freedesktop.org/xorg/xserver/-/commit/0e4ed949 (From OE-Core rev: 9d095e34da2adde63358a878cfac45ea28727bdf) Signed-off-by: Vijay Anusuri <vanusuri@mvista.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> 2025-03-04T16:46:02+00:00 Vijay Anusuri vanusuri@mvista.com 2025-02-27T12:32:01+00:00 urn:sha1:ed888d5c115dd59ebf6acd386971eb57e729c98e Upstream-Status: Backport from https://gitlab.freedesktop.org/xorg/xserver/-/commit/80d69f01 (From OE-Core rev: d510d87d9bb3e3489a4482dd0ce66e4bc7622ca0) Signed-off-by: Vijay Anusuri <vanusuri@mvista.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> 2025-03-04T16:46:02+00:00 Vijay Anusuri vanusuri@mvista.com 2025-02-27T12:32:00+00:00 urn:sha1:ee975a71000cdd1ca517f589ac9152e7fea7b275 Upstream-Status: Backport from https://gitlab.freedesktop.org/xorg/xserver/-/commit/11fcda87 (From OE-Core rev: 78d718f0a683f9fb81aa24b39f148d2acf2e1fc6) Signed-off-by: Vijay Anusuri <vanusuri@mvista.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> 2025-03-04T16:46:02+00:00 Vijay Anusuri vanusuri@mvista.com 2025-02-27T12:31:59+00:00 urn:sha1:7a3fba1587550ac21b81879b2a541d2694507a38 Upstream-Status: Backport from https://gitlab.freedesktop.org/xorg/xserver/-/commit/01642f26 & https://gitlab.freedesktop.org/xorg/xserver/-/commit/b0a09ba6 (From OE-Core rev: f45b068860b1be1b3dadd58f8f787953a2951405) Signed-off-by: Vijay Anusuri <vanusuri@mvista.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> 2024-12-20T14:01:45+00:00 Yogita Urade yogita.urade@windriver.com 2024-12-12T10:30:36+00:00 urn:sha1:5ea79cac19c212dc2ac85216003cf6224a071f2f A flaw was found in the X.org server. Due to improperly tracked allocation size in _XkbSetCompatMap, a local attacker may be able to trigger a buffer overflow condition via a specially crafted payload, leading to denial of service or local privilege escalation in distributions where the X.org server is run with root privileges. Reference: https://nvd.nist.gov/vuln/detail/CVE-2024-9632 Upstream patch: https://gitlab.freedesktop.org/xorg/xserver/-/commit/ba1d14f8eff2a123bd7ff4d48c02e1d5131358e0 (From OE-Core rev: 95027410dba7a2a7e9b93f76279272f22445399b) Signed-off-by: Yogita Urade <yogita.urade@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>