Skip to content

Commit

Permalink
x11-servers/xorg-server: update to 21.1.8
Browse files Browse the repository at this point in the history
This fixes:

* ZDI-CAN-19866/CVE-2023-1393: X.Org Server Overlay Window
  Use-After-Free  Local Privilege Escalation Vulnerability

  If a client explicitly destroys the compositor overlay window (aka
  COW), the Xserver would leave a dangling pointer to that window in the
  CompScreen structure, which will trigger a use-after-free later.

PR:		270540
Approved by:	x11 (maintainer)
MFH:		2023Q2
Security:	96d84238-b500-490b-b6aa-2b77090a0410
  • Loading branch information
DimitryAndric committed Apr 4, 2023
1 parent 12b470f commit 0449a84
Show file tree
Hide file tree
Showing 2 changed files with 4 additions and 4 deletions.
2 changes: 1 addition & 1 deletion x11-servers/xorg-server/Makefile
@@ -1,5 +1,5 @@
PORTNAME= xorg
PORTVERSION= 21.1.7
PORTVERSION= 21.1.8
PORTREVISION= 0
PORTEPOCH= 1
CATEGORIES= x11-servers
Expand Down
6 changes: 3 additions & 3 deletions x11-servers/xorg-server/distinfo
@@ -1,3 +1,3 @@
TIMESTAMP = 1679834173
SHA256 (xorg-server-21.1.7.tar.xz) = d9c60b2dd0ec52326ca6ab20db0e490b1ff4f566f59ca742d6532e92795877bb
SIZE (xorg-server-21.1.7.tar.xz) = 4933292
TIMESTAMP = 1680345640
SHA256 (xorg-server-21.1.8.tar.xz) = 38aadb735650c8024ee25211c190bf8aad844c5f59632761ab1ef4c4d5aeb152
SIZE (xorg-server-21.1.8.tar.xz) = 4980208

0 comments on commit 0449a84

Please sign in to comment.