[bug#74248,0/3] Update xorg-server and xwayland for CVE-2024-9632.

Message ID	cover.1731011374.git.kaelyn.alexi@protonmail.com
Headers	show Return-Path: <guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org> Subject: [bug#74248] [PATCH 0/3] Update xorg-server and xwayland for CVE-2024-9632. Resent-From: Kaelyn Takata <kaelyn.alexi@protonmail.com> Original-Sender: "Debbugs-submit" <debbugs-submit-bounces@debbugs.gnu.org> Resent-CC: guix-patches@gnu.org Resent-Date: Thu, 07 Nov 2024 21:34:02 +0000 Resent-Message-ID: <handler.74248.B.173101519920586@debbugs.gnu.org> Resent-Sender: help-debbugs@gnu.org To: 74248@debbugs.gnu.org Cc: Kaelyn Takata <kaelyn.alexi@protonmail.com> Date: Thu, 07 Nov 2024 21:33:03 +0000 Message-ID: <cover.1731011374.git.kaelyn.alexi@protonmail.com> Feedback-ID: 34709329:user:proton MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Received-SPF: pass client-ip=185.70.43.22; envelope-from=kaelyn.alexi@protonmail.com; helo=mail-4322.protonmail.ch X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action Precedence: list Reply-to: Kaelyn Takata <kaelyn.alexi@protonmail.com> From: Kaelyn Takata via Guix-patches via <guix-patches@gnu.org> Errors-To: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org Sender: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org X-getmail-retrieved-from-mailbox: Patches
Series	Update xorg-server and xwayland for CVE-2024-9632. \| expand [bug#74248,0/3] Update xorg-server and xwayland for CVE-2024-9632. [bug#74248,1/3] gnu: xorg-server: Update to 21.1.14. [security fixes] [bug#74248,2/3] gnu: Add xorgproto-next. [bug#74248,3/3] gnu: xorg-server-xwayland: Update to 24.1.4 [security fixes].

Message ID

cover.1731011374.git.kaelyn.alexi@protonmail.com

Headers

Subject: [bug#74248] [PATCH 0/3] Update xorg-server and xwayland for
 CVE-2024-9632.
Resent-From: Kaelyn Takata <kaelyn.alexi@protonmail.com>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces@debbugs.gnu.org>
Resent-CC: guix-patches@gnu.org
Resent-Date: Thu, 07 Nov 2024 21:34:02 +0000
Resent-Message-ID: <handler.74248.B.173101519920586@debbugs.gnu.org>
Resent-Sender: help-debbugs@gnu.org
To: 74248@debbugs.gnu.org
Cc: Kaelyn Takata <kaelyn.alexi@protonmail.com>
Date: Thu, 07 Nov 2024 21:33:03 +0000
Message-ID: <cover.1731011374.git.kaelyn.alexi@protonmail.com>
Feedback-ID: 34709329:user:proton
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
Received-SPF: pass client-ip=185.70.43.22;
 envelope-from=kaelyn.alexi@protonmail.com; helo=mail-4322.protonmail.ch
X-Spam_score_int: -20
X-Spam_score: -2.1
X-Spam_bar: --
X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1,
 DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001,
 RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001,
 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001,
 RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001,
 SPF_HELO_PASS=-0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no
X-Spam_action: no action
X-BeenThere: debbugs-submit@debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
X-BeenThere: guix-patches@gnu.org
List-Id: <guix-patches.gnu.org>
List-Unsubscribe: <https://lists.gnu.org/mailman/options/guix-patches>,
 <mailto:guix-patches-request@gnu.org?subject=unsubscribe>
List-Archive: <https://lists.gnu.org/archive/html/guix-patches>
List-Post: <mailto:guix-patches@gnu.org>
List-Help: <mailto:guix-patches-request@gnu.org?subject=help>
List-Subscribe: <https://lists.gnu.org/mailman/listinfo/guix-patches>,
 <mailto:guix-patches-request@gnu.org?subject=subscribe>
Reply-to: Kaelyn Takata <kaelyn.alexi@protonmail.com>
X-ACL-Warn: ,  Kaelyn Takata via Guix-patches <guix-patches@gnu.org>
From: Kaelyn Takata via Guix-patches via <guix-patches@gnu.org>
Errors-To: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org
Sender: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org
X-getmail-retrieved-from-mailbox: Patches

Series

Update xorg-server and xwayland for CVE-2024-9632. | expand

Message

Kaelyn Takata Nov. 7, 2024, 9:33 p.m. UTC

This patch series updates xorg-server and xorg-server-xwayland to their latest
versions to fix CVE-2024-9632, which Red Hat has rated "7.8 High" according to
https://nvd.nist.gov/vuln/detail/CVE-2024-9632.

The updated Xwayland depends on a newer version of presentproto than is
available in the current xorgproto package, so I added xorgproto-next to
satisfy Xwayland's dependency while avoiding triggering 10761 additional
package rebuilds.

Kaelyn Takata (3):
  gnu: xorg-server: Update to 21.1.14. [security fixes]
  gnu: Add xorgproto-next.
  gnu: xorg-server-xwayland: Update to 24.1.4 [security fixes].

 gnu/packages/xorg.scm | 35 ++++++++++++++++++++++++++++-------
 1 file changed, 28 insertions(+), 7 deletions(-)


base-commit: 2a6d96425eea57dc6dd48a2bec16743046e32e06
--
2.46.0