This release fixes 6 recently reported security vulnerabilities in various extensions. The CVE numbers are: CVE-2022-46340, CVE-2022-46341, CVE-2022-46342, CVE-2022-46343, CVE-2022-46344, and CVE-2022-4283
For details on the these issues please see the security advisory here: https://lists.x.org/archives/xorg-announce/2022-December/003302.html Jeremy Huddleston Sequoia (3): xquartz: Remove unused macro (X11LIBDIR) xquartz: Move default applications list outside of the main executable meson: Don't build COMPOSITE for XQuartz Peter Hutterer (8): Xtest: disallow GenericEvents in XTestSwapFakeInput Xi: disallow passive grabs with a detail > 255 Xext: free the XvRTVideoNotify when turning off from the same client Xext: free the screen saver resource when replacing it Xi: return an error from XI property changes if verification failed Xi: avoid integer truncation in length check of ProcXIChangeProperty xkb: reset the radio_groups pointer to NULL after freeing it xserver 21.1.5 git tag: xorg-server-21.1.5 https://xorg.freedesktop.org/archive/individual/xserver/xorg-server-21.1.5.tar.gz SHA256: 5e391867bfe44ce766a8c748e7563dc9678c229af72b5f94e221a92b1b04b7a1 xorg-server-21.1.5.tar.gz SHA512: e564e27e9cd6a535ff6cc673443c17bb8878e9ea7b4faba86e593fab514c504f995a7475a73682c4009e3973157e3efb81e89d8455d15819b617a54c93adf599 xorg-server-21.1.5.tar.gz PGP: https://xorg.freedesktop.org/archive/individual/xserver/xorg-server-21.1.5.tar.gz.sig https://xorg.freedesktop.org/archive/individual/xserver/xorg-server-21.1.5.tar.xz SHA256: 05b0c8301cee7c5a78083df421ba3a071891553541a417b3d85adf5cf20f8720 xorg-server-21.1.5.tar.xz SHA512: a39c6ba36f94241d330b679a9a6fe2c5fda73fc3f5a9308a7a9cfd0d58503e407291759c9e553455c07cf5a3862952ae3904334eeca29c97ff5af7cffd2e6953 xorg-server-21.1.5.tar.xz PGP: https://xorg.freedesktop.org/archive/individual/xserver/xorg-server-21.1.5.tar.xz.sig
signature.asc
Description: PGP signature