A variety of security and bug fixes, new and better documentation, etc. Some stuff changed: 500 files changed, 30763 insertions(+), 2252 deletions(-) A few people contributed: Alan Coopersmith <alan.coopersmith at sun.com> Daniel Stone <daniel at fooishbar.org> David Baron <dbaron at dbaron.org> Dennis Arellano <Dennis.Arellano at Sun.COM> Jamey Sharp <jamey at minilop.net> Jan Willem Stumpel <jstumpel at planet.nl> Jeremy C. Reed <reed at glacier.reedmedia.net> Josh Triplett <josh at freedesktop.org> Julien Cristau <jcristau at debian.org> Magnus Kessler <Magnus.Kessler at gmx.net> Matthias Hopf <mhopf at suse.de> Matthieu Herrb <matthieu.herrb at laas.fr> Tilman Sauerbeck <tilman at code-monkey.de> (This has been a test of the emergency understatement system.) git-tag: libX11-1.1.2 http://xorg.freedesktop.org/releases/individual/lib/libX11-1.1.2.tar.bz2 MD5: 710bf38a9477a5a1b235bc94f1d0593c SHA1: 7190d36389eb7903831cd9541d919f55ac5098e9 http://xorg.freedesktop.org/releases/individual/lib/libX11-1.1.2.tar.gz MD5: 7c593e00648a6d0278360146d410ac3f SHA1: a1faf35b49f33e4f4671b1018bfbf0bdfd38f65c Version 1.1.2 - 2007-06-03 * Security fixes: * Fix CVE-2007-1667: Multiple integer overflows in the XGetPixel() and XInitImage() functions. * Bug #9279: Fixed a file descriptor leak. * Xlib/XCB: Ensure _XReadEvents reads at least one new event and blocks for exactly one event. Large performance improvement for XIfEvent and similar. * Hold XCB's Xlib lock even when only the user lock (XLockDisplay) is held. An Xlib client can query Display state, such as with NextRequest, while it holds only the Xlib user lock (between XLockDisplay and XUnlockDisplay), so XCB requests in other threads should be blocked when the Xlib user lock is held. We acquire the lock even when XInitThreads was not called, so that pure XCB code can use multiple threads even in an otherwise single-threaded Xlib application. * Allow re-entrant Xlib calls from _XIOError. Some libraries try to clean up X resources from atexit handlers, _fini, or C++ destructors. To make these work, downgrade the Display lock to a user lock (as in XLockDisplay) before calling exit(3). This blocks Xlib calls from threads other than the one calling exit(3) while still allowing the exit handlers to call Xlib. * Xlib/XCB: Avoid re-crashing after _XIOError. * Xlib/XCB: Only remove pending_requests when there are provably no more responses. * For NetBSD, define XTHREADLIB and XTHREAD_CFLAGS. * Bug #7703: Fixed XSetSizeHints() et al wrt use of uninitialized data. Now only those fields of the respective hint struct are set that are actually valid in the input data. * Bug #10292: Fixed a memory leak related to XOpenDisplay() in the XCB code. * Bug #7713: Initialize all of the event's fields before sending it. * Bug #10562: Define _GNU_SOURCE on glibc systems. * Use unistd.h to get getresuid() and friends, now that we have _GNU_SOURCE defined. * Switched function definitions from K&R to ANSI style. * Many constness fixes. * Fixed a few warnings. * Fix 64bit issues with reallocation. * Manpage fixes: * Add man pages for XKB APIs. (Volunteer needed to convert prototypes in man pages to ANSI C style...) * Protect C comments and #defines in XKB man pages from being mangled by cpp * Fix typo in nroff macro in XkbAddGeomOverlayKey.man * Bug #9695: Fixed a few argument types in the XOpenIM manpage. * Markup tweak for XOpenIM. * Bug #9696: refer to XDefineCursor() instead of XDefineCusor(). * Bug #9697: Fixed documentation of XVisualInfo struct. The "depth" member was said to be unsigned int, but it's signed. * nls fixes: * Update el_GR.UTF-8/Compose.pre to match changes in xkeyboard-config cvs. * For nls/*.pre, allow people to comment lines by starting them with '##'. * Build system fixes: * Add autogen.sh to EXTRA_DIST. * Makefile.am: make ChangeLog hook safer * Don't distribute the configure-generated XlibConf.h in tarballs. --Jamey Sharp and Josh Triplett -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: Digital signature Url : http://lists.freedesktop.org/archives/xorg-announce/attachments/20070604/03baad07/attachment.pgp