Hi Achill That's right, I also just saw that.
This is because of [1], therefore unrelated to the security fixes. It is weird because the release process first tries to build from the tarball, yet it did not raise that issue. Looking into it… Cheers Olivier [1] https://gitlab.freedesktop.org/xorg/xserver/-/merge_requests/1636 On Tue, Oct 28, 2025 at 3:28 PM Achill Gilgenast <[email protected]> wrote: > > Hi, I wanted to remind you that the release tarball didn't include > test/scripts/xephyr-glamor-gles2-piglit.sh from > https://gitlab.freedesktop.org/xorg/xserver/-/commit/95b8991181b22031f67384403bc166c8749e7a16#23806d3e653431dc570a6d51547e6b234b4e291b > and therefore meson setup fails. > > Thanks! > > On Tue Oct 28, 2025 at 2:43 PM CET, Olivier Fourdan wrote: > > This release contains the fixes for the issues reported in today's security > > advisory: > > https://lists.x.org/archives/xorg-announce/2025-October/003635.html > > > > * CVE-2025-62229 > > * CVE-2025-62230 > > * CVE-2025-62231 > > > > Additionally, it contains a number of additional fixes: > > > > Adam Jackson (1): > > glamor: Lift the GLX EGL backend from Xwayland > > > > Alan Coopersmith (25): > > panoramix: avoid null dereference in PanoramiXMaybeAddDepth() > > panoramix: avoid null dereference in PanoramiXConsolidate() > > os: Use EVP APIs when building with OpenSSL 3 > > xfree86: fix meson build on 64-bit Solaris/SPARC systems > > xfree86: add missing headers to build sun_init.c on Solaris/SPARC > > xfree86: Fix -Wdiscarded-qualifiers warnings in SPARC Sbus probe code > > Xext/shm: avoid null dereference in ShmInitScreenPriv() > > Xext/sync: avoid null dereference if SysCounterGetPrivate() returns > > NULL > > Xext/sync: avoid null dereference in init_system_idle_counter() > > Xext/sync: Avoid dereference of invalid pointer if malloc() failed > > Xext/vidmode: avoid null dereference if VidModeCreateMode() > > allocation fails > > Xext/xres: avoid null dereference in ProcXResQueryClients() > > Xext/xselinux: add fast path to ProcSELinuxListSelections() > > Xext/xselinux: avoid memory leak in SELinuxAtomToSID() > > Xext/xtest: avoid null dereference in ProcXTestFakeInput() > > Xi: avoid null dereference if wOtherInputMasks() returns NULL > > Xi: set value for led_values in CopySwapKbdFeedback() > > Xi: handle allocation failure in ProcXGetDeviceDontPropagateList() > > Xi: handle allocation failure in ProcXListInputDevices() > > Xi: handle allocation failure in add_master_func() > > dix: handle allocation failure in DeviceFocusEvent() > > dix: avoid null dereference if wOtherInputMasks() returns NULL > > dix: assert that size of buffers to swap is a multiple of the swap > > size > > dix: handle allocation failure in ChangeWindowDeviceCursor() > > dix: avoid memory leak in ProcListProperties() > > > > Balló György (2): > > glamor: Don't require EXT_gpu_shader4 unconditionally > > glamor: Fallback to software rendering on GLSL link failure > > > > Dave Airlie (1): > > glamor: handle EXT_gpu_shader4 in dual source blend paths > > > > Icenowy Zheng (1): > > glamor: Fix dual blend on GLES3 > > > > Jeffy Chen (1): > > glamor: xv: Fix invalid accessing of plane attributes for NV12 > > > > Konstantin (17): > > meson: add glamor gles2 tests > > glamor: transpose gradients transparently > > glamor: fix XVideo run with GLES > > glamor: fixes GL_INVALID_ENUM errors on ES if there is no quads > > glamor: add gl_PointSize for ES shaders > > glamor_egl: add helper functions for contexts > > glamor_egl: add RenderingAPI option > > xorg.conf.man: document new RenderingAPI option > > glamor_egl: add info message about context API > > glamor_egl: add support of GlxVendorLibrary option > > glamor: xv: do not force a version on XV shaders > > glamor: xv: reuse ports and shaders when possible > > glamor: xv: prepare to one-plane formats > > glamor: xv: enable UYVY acceleration > > glamor: check BPP by render_format. > > glamor: xv: fix UYVY alignment > > Fix autotools build for Glamor GLX provider > > > > Konstantin Pugin (4): > > glamor: accelerate incomplete textures for GL ES > > glamor: support GLES3 shaders > > glamor: add glvnd_vendor private > > xorg: initialize glamor provider > > > > Lucas Stach (2): > > glamor_egl: handle fd export failure in glamor_egl_fds_from_pixmap > > glamor_egl: properly get FDs from multiplanar GBM BOs > > > > Michel Dänzer (1): > > xwayland/glamor: Handle depth 15 in gbm_format_for_depth > > > > Mikhail Dmitrichenko (2): > > os: avoid potential out-of-bounds access at logVHdrMessageVerb > > dix: avoid null ptr deref at doListFontsWithInfo > > > > Nicolas Dufresne (1): > > glamor: xv: Rewrite UYVY shader to match NV12/I420 CSC > > > > Olivier Fourdan (6): > > .gitlab-ci: Use meson instead of ninja for running the tests > > present: Fix use-after-free in present_create_notifies() > > xkb: Make the RT_XKBCLIENT resource private > > xkb: Free the XKB resource when freeing XkbInterest > > xkb: Prevent overflow in XkbSetCompatMap() > > xserver 21.1.19 > > > > Pierre-Eric Pelloux-Prayer (3): > > glamor: return the result of gbm_format_for_depth > > glamor: use gbm_format_for_depth instead of open-coding it > > glamor: reject configs using unsupported rgbBits size > > > > Vasily Khoruzhick (1): > > glamor: use dual source blend on GL 2.1 with ARB_ES2_compatibility > > > > Yuriy Vasilev (3): > > glamor: fix CbCr format handling > > glamor: xv: add rgba32 format > > glamor: xv: add rgb565 > > > > git tag: xorg-server-21.1.19 > > > > https://xorg.freedesktop.org/archive/individual/xserver/xorg-server-21.1.19.tar.gz > > SHA256: d99934e82dc8f0f4b4ffca1831e49a3ed5c0ab20488b3c31757443ac71af9f32 > > xorg-server-21.1.19.tar.gz > > SHA512: > > 9477fe1a764691a1a15b8c43977e276070def8e6f0ccee81a8829b62ed068f1e238996b2c86fe7a2012f80a61fa442740d09cfcc288318d9933885c2cc416d14 > > xorg-server-21.1.19.tar.gz > > PGP: > > https://xorg.freedesktop.org/archive/individual/xserver/xorg-server-21.1.19.tar.gz.sig > > > > https://xorg.freedesktop.org/archive/individual/xserver/xorg-server-21.1.19.tar.xz > > SHA256: ca6b38181685d7d7c935d0597cfe35ee8df4d0fbf8ac63301541e037e8b08f07 > > xorg-server-21.1.19.tar.xz > > SHA512: > > f3b10c8c3aac849c889e0cd58f82c25b371d28702a93ad0bbb83a46c73d8079eec306f22e7441a1a2b53b6e29cb279d6203f03a2f0a80c9f39b1d134768806b6 > > xorg-server-21.1.19.tar.xz > > PGP: > > https://xorg.freedesktop.org/archive/individual/xserver/xorg-server-21.1.19.tar.xz.sig >
