From 0136eba1108ff87cee9c8e6173bec422ee23ba82 Mon Sep 17 00:00:00 2001 From: Bernd Kuhls Date: Tue, 14 Apr 2026 18:34:23 +0200 Subject: [PATCH] package/x11r7/xserver_xorg-server: security bump version to 21.1.22 https://lists.x.org/archives/xorg-announce/2026-April/003678.html Updated license hash due to upstream commits: https://gitlab.freedesktop.org/xorg/xserver/-/commit/3069f64d691db5396706c1ec1182bd8db52ffb22 https://gitlab.freedesktop.org/xorg/xserver/-/commit/dd924b160c9b434ff7687d1e1d2a9058cdefb6b8 Fixes the following CVEs: * CVE-2026-33999: XKB Integer Underflow in XkbSetCompatMap() * CVE-2026-34000: XKB Out-of-bounds Read in CheckSetGeom() * CVE-2026-34001: XSYNC Use-after-free in miSyncTriggerFence() * CVE-2026-34002: XKB Out-of-bounds read in CheckModifierMap() * CVE-2026-34003: XKB Buffer overflow in CheckKeyTypes() Signed-off-by: Bernd Kuhls Signed-off-by: Julien Olivain --- .../x11r7/xserver_xorg-server/xserver_xorg-server.hash | 8 ++++---- package/x11r7/xserver_xorg-server/xserver_xorg-server.mk | 2 +- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/package/x11r7/xserver_xorg-server/xserver_xorg-server.hash b/package/x11r7/xserver_xorg-server/xserver_xorg-server.hash index ceca9c215b..b7adf1559d 100644 --- a/package/x11r7/xserver_xorg-server/xserver_xorg-server.hash +++ b/package/x11r7/xserver_xorg-server/xserver_xorg-server.hash @@ -1,5 +1,5 @@ -# From https://lists.x.org/archives/xorg-announce/2025-November/003643.html -sha256 c0cbe5545b3f645bae6024b830d1d1154a956350683a4e52b2fff5b0fa1ab519 xorg-server-21.1.21.tar.xz -sha512 bb2eb4e6756eb9e38b61bd47c017da44bcf5f45f2b7a906b4bb3a56b3d791cec64abb9bf37b224efe1e4fab9cc296f3672c9b2f8e00e1cdfc54337bef63cd16c xorg-server-21.1.21.tar.xz +# From https://lists.x.org/archives/xorg-announce/2026-April/003678.html +sha256 1a242c8917c49ba29ccc1f6021613d8a2b9805dd0d271a66ae9d09f4b0bb06b3 xorg-server-21.1.22.tar.xz +sha512 6cb37ff971e10eb4a7dfcb3e8071afd769c7632d50e4ad8bc948b810dc4847e152b8a05ec135f55e0695b35908abd07e7728ef85dd3135456fd532e919f440f4 xorg-server-21.1.22.tar.xz # Locally calculated -sha256 abbb7969df55e399e91104ded4d0a20a1b67de7c01138e63d61b7ed4f81fec0d COPYING +sha256 c9f90a6669109aad6c9a7c3b46cc2c574221a73b792afa419336816b49da5c11 COPYING diff --git a/package/x11r7/xserver_xorg-server/xserver_xorg-server.mk b/package/x11r7/xserver_xorg-server/xserver_xorg-server.mk index 0dc3a4a5c6..d1e7267c27 100644 --- a/package/x11r7/xserver_xorg-server/xserver_xorg-server.mk +++ b/package/x11r7/xserver_xorg-server/xserver_xorg-server.mk @@ -4,7 +4,7 @@ # ################################################################################ -XSERVER_XORG_SERVER_VERSION = 21.1.21 +XSERVER_XORG_SERVER_VERSION = 21.1.22 XSERVER_XORG_SERVER_SOURCE = xorg-server-$(XSERVER_XORG_SERVER_VERSION).tar.xz XSERVER_XORG_SERVER_SITE = https://xorg.freedesktop.org/archive/individual/xserver XSERVER_XORG_SERVER_LICENSE = MIT