UbuntuUpdates.org

Package "xserver-xephyr"

Name: xserver-xephyr

Description:

nested X server

Latest version: 2:21.1.12-1ubuntu1.8
Release: noble (24.04)
Level: updates
Repository: main
Head package: xorg-server
Homepage: https://www.x.org/

Links


Download "xserver-xephyr"


Other versions of "xserver-xephyr" in Noble

Repository Area Version
base main 2:21.1.12-1ubuntu1
security main 2:21.1.12-1ubuntu1.5
proposed main 2:21.1.12-1ubuntu1.9

Changelog

Version: 2:21.1.12-1ubuntu1.8 2026-09-23 22:07:31 UTC

xorg-server (2:21.1.12-1ubuntu1.8) noble; urgency=medium

  * Update boot_display patch for some failures observed (LP: #2136140)

 -- Mario Limonciello Mon, 29 Jun 2026 12:33:30 -0500

Source diff to previous version

Version: 2:21.1.12-1ubuntu1.6 2026-06-09 12:07:57 UTC

  xorg-server (2:21.1.12-1ubuntu1.6) noble; urgency=medium

  * Fix dirty updates for sw rotation (LP: #2146867)

 -- ChunAn Wu <email address hidden> Tue, 31 Mar 2026 07:50:29 +0000

Source diff to previous version
2146867 [SRU] Fixing screen rotation failure when using FBC

Version: 2:21.1.12-1ubuntu1.5 2025-10-31 04:07:17 UTC

  xorg-server (2:21.1.12-1ubuntu1.5) noble-security; urgency=medium

  * SECURITY UPDATE: Use-after-free in XPresentNotify structures creation
    - debian/patches/CVE-2025-62229.patch: fix use-after-free in
      present/present_notify.c.
    - CVE-2025-62229
  * SECURITY UPDATE: Use-after-free in Xkb client resource removal
    - debian/patches/CVE-2025-62230-1.patch: make the RT_XKBCLIENT resource
      private in xkb/xkb.c, include/xkbsrv.h.
    - debian/patches/CVE-2025-62230-2.patch: free the XKB resource when
      freeing XkbInterest in xkb/xkbEvents.c.
    - CVE-2025-62230
  * SECURITY UPDATE: Value overflow in Xkb extension XkbSetCompatMap()
    - debian/patches/CVE-2025-62231.patch: prevent overflow in xkb/xkb.c.
    - CVE-2025-62231

 -- Marc Deslauriers <email address hidden> Thu, 23 Oct 2025 13:29:50 -0400

Source diff to previous version
CVE-2025-62229 A flaw was found in the X.Org X server and Xwayland when processing X1 ...
CVE-2025-62230 A flaw was discovered in the X.Org X server\u2019s X Keyboard (Xkb) ex ...
CVE-2025-62231 A flaw was identified in the X.Org X server\u2019s X Keyboard (Xkb) ex ...

Version: 2:21.1.12-1ubuntu1.4 2025-06-17 21:07:37 UTC

  xorg-server (2:21.1.12-1ubuntu1.4) noble-security; urgency=medium

  * SECURITY UPDATE: Out-of-bounds access in X Rendering extension
    - debian/patches/CVE-2025-49175.patch: avoid 0 or less animated cursors
      in render/animcur.c, render/render.c.
    - CVE-2025-49175
  * SECURITY UPDATE: Integer overflow in Big Requests Extension
    - debian/patches/CVE-2025-49176.patch: do not overflow the integer size
      with BigRequest in dix/dispatch.c, os/io.c.
    - CVE-2025-49176
  * SECURITY UPDATE: Data leak in XFIXES Extension 6
    - debian/patches/CVE-2025-49177.patch: check request length for
      SetClientDisconnectMode in xfixes/disconnect.c.
    - CVE-2025-49177
  * SECURITY UPDATE: Unprocessed client request via bytes to ignore
    - debian/patches/CVE-2025-49178.patch: account for bytes to ignore when
      sharing input buffer in os/io.c.
    - CVE-2025-49178
  * SECURITY UPDATE: Integer overflow in X Record extension
    - debian/patches/CVE-2025-49179.patch: check for overflow in
      RecordSanityCheckRegisterClients() in record/record.c.
    - CVE-2025-49179
  * SECURITY UPDATE: Integer overflow in RandR extension
    - debian/patches/CVE-2025-49180-1.patch: check for overflow in
      RRChangeProviderProperty() in randr/rrproviderproperty.c.
    - debian/patches/CVE-2025-49180-2.patch: check for RandR provider
      functions in hw/xfree86/modes/xf86RandR12.c.
    - CVE-2025-49180

 -- Marc Deslauriers <email address hidden> Tue, 10 Jun 2025 14:21:45 -0400

Source diff to previous version
CVE-2025-49175 A flaw was found in the X Rendering extension's handling of animated c ...
CVE-2025-49176 A flaw was found in the Big Requests extension. The request length is ...
CVE-2025-49177 A flaw was found in the XFIXES extension. The XFixesSetClientDisconnec ...
CVE-2025-49178 A flaw was found in the X server's request handling. Non-zero 'bytes t ...
CVE-2025-49179 A flaw was found in the X Record extension. The RecordSanityCheckRegis ...
CVE-2025-49180 A flaw was found in the RandR extension, where the RRChangeProviderPro ...

Version: 2:21.1.12-1ubuntu1.3 2025-04-01 11:07:26 UTC

  xorg-server (2:21.1.12-1ubuntu1.3) noble; urgency=medium

  * If a client application has not called DRI2ScreenInit(),
    DRI2Authenticate() and DRI2CreateDrawable2() cause the X server to
    crash. This patch adds some sanity checks to ensure the X server
    stays running. (LP: #1861609)
    - d/p/lp1861609-dri2-Protect-against-dri2ClientPrivate-assertio.patch

 -- Matthew Ruffell <email address hidden> Tue, 04 Mar 2025 17:58:03 +1300

1861609 Xorg crashes with assertion failure at dixGetPrivateAddr: Assertion `key-\u003einitialized' failed



About   -   Send Feedback to @ubuntu_updates