Changelog for libX11-data-1.8.1-1.2.noarch.rpm :

* Thu Jun 09 2022 Stefan Dirsch - Update to version 1.8.1 This release fixes the --enable-thread-safety-constructor option to the configure script to work as intended. In the previous release, the changes for this option may not have been enabled when the option was not specified or when the --enable option was specified. While we have enabled it by default, believing that doing so will reduce the number of bugs users encounter running libX11 clients, in some cases it may expose bugs in which clients had previously gotten away with calling libX11 functions while a libX11 lock is already held, and thus now deadlock, as discussed in https://gitlab.freedesktop.org/xorg/lib/libx11/-/issues/157 .
* Fri Apr 29 2022 Stefan Dirsch - Update to version 1.8
* The highlight of this release is that we now try to initialize thread safety ourselves, rather than hope the application does it. This should resolve a number of long-standing bugs with the libxcb integration, since the socket handoff mechanism essentially has to be thread-safe.
* Sun Apr 03 2022 Stefan Dirsch - Update to version 1.7.4
* Don\'t try to destroy NULL condition variables
* Thu Mar 31 2022 Stefan Dirsch - Update to version 1.7.4
* bugfix release- supersedes p_khmer-compose.diff
* Fri Dec 10 2021 Stefan Dirsch - Update to version 1.7.3.1
* This release of libX11 corrects a packaging problem in 1.7.3 which caused the m4 files needed for autoreconf to not be included in the tarballs.
* As a bonus, this release also includes one tiny typo fix in the XIM specs.
* Tue Dec 07 2021 Stefan Dirsch - Update to version 1.7.3
* This release includes a number of bug fixes and adds support for the _EVDEVK keysyms added in xorgproto 2021.2.
* Mon Nov 15 2021 Stefan Dirsch - u_no-longer-crash-in-XVisualIDFromVisual.patch
* no longer crash in XVisualIDFromVisual() [boo#1191517]
* Sun Jun 06 2021 Stefan Dirsch - Update to version 1.7.2
* bug fix release, correcting a regression introduced by and improving the checks from the fix for CVE-2021-31535.- supersedes U_Check-for-NULL-strings-before-getting-their-lengths.patch
* Mon May 31 2021 Stefan Dirsch - U_Check-for-NULL-strings-before-getting-their-lengths.patch
* regression in libX11 1.7.1 (boo#1186643) fixes segfaults for xforms applications like fdesign
* Tue May 18 2021 Stefan Dirsch - Update to version 1.7.1
* security update for CVE-2021-31535 (bsc#1182506)- supersedes U_CVE-2021-31535.patch
* Mon May 17 2021 Stefan Dirsch - U_CVE-2021-31535.patch
* adds missing request length checks in libX11 (CVE-2021-31535, bsc#1182506)
* Sat Nov 21 2020 Stefan Dirsch - Update to version 1.7.0
* libX11 version 1.7.0 includes a new API, hence the change from the 1.6 series to 1.7: XSetIOErrorExitHandler which provides a mechanism for applications to recover from I/O error conditions instead of being forced to exit. Thanks to Carlos Garnacho for this.
* This release includes a bunch of bug fixes, some which have been pending for over three years: + A bunch of nls cleanups to remove obsolete entries and clean up formatting of the ist. Thanks to Benno Schulenberg for these. + Warning fixes and other cleanups across a huge swath of the library. Thanks to Alan Coopersmith for these. + Memory allocation bugs, including leaks and use after free in the locale code. Thanks to Krzesimir Nowak, Jacek Caban and Vittorio Zecca for these. + Thread safety fixes in the locale code. Thanks to Jacek Caban for these. + poll_for_response race condition fix. Thanks to Frediano Ziglio for the bulk of this effort, and to Peter Hutterer for careful review and improvements.
* Version 1.7.0 includes a couple of new locales: ia and ie locales. Thanks to Carmina16 for these.
* There are also numerous compose entries added, including: + |^ or ^| for ↑, |v or v| for ↓, ~~ for ≈. Thanks to Antti Savolainen for this. + Allowing use of \'v\' for caron, in addition to \'c\', so things like vC for Č, vc for č. Thanks to Benno Schulenberg for this. + Compose sequences LT, lt for \'<\', and GT, gt for \'>\' for keyboards where those are difficult to access. Thanks to Jonathan Belsewir for this.- refreshed patches en-locales.diff, p_khmer-compose.diff and p_xlib_skip_ext_env.diff
* Tue Aug 25 2020 Stefan Dirsch - Update to version 1.6.12
* Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]
* Sat Aug 15 2020 Tobias Klausmann - Update to version 1.6.11: A collection of random and security fixes.- Remove patches included in this release: + U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch + U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch + U_003-FixMoreUncheckedLengths.patch + U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch + U_005-ZeroOutBuffersInFunctions.patch + U_006-Fix-size-calculation-in-_XimAttributeToValue.patch- Adapt patch p_xlib_skip_ext_env.diff to work with the new version
* Tue Aug 04 2020 tiwaiAATTsuse.de- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
* Regression fix in previous XIM client head overflow fixes (CVE-2020-14344, bsc#1174628)
* Fri Jul 31 2020 Stefan Dirsch - U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch, U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch, U_003-FixMoreUncheckedLengths.patch, U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch, U_005-ZeroOutBuffersInFunctions.patch,
* XIM client heap overflows (CVE-2020-14344, bsc#1174628)
* Sun Oct 20 2019 Stefan Brüns - Add conflicts for old xorgproto-devel, X11/extensions/XKBgeom.h was moved to libX11-devel.
* Wed Oct 09 2019 Stefan Dirsch - Update to version 1.6.9
* A collection of build and documentation fixes, one preparatory change for a new xorgproto release, and a fix for a deadlock bug in _XReply.
* Mon Jun 17 2019 Stefan Dirsch - Update to version 1.6.8
* bug fixes
* Wed Oct 10 2018 sndirschAATTsuse.com- Update to version 1.6.7
* XcmsLookupColor: fully initialize XColor structs passed to _XColor_to_XcmsRGB
* poll_for_response: Call poll_for_event again if xcb_poll_for_reply fails
* poll_for_event: Allow using xcb_poll_for_queued_event
* Mon Aug 27 2018 tchvatalAATTsuse.com- Format spec with spec-cleaner- Use %autopatch to not bother with one-by-one patch application- Remove autoreconf as we no longer patch any of the buildsystem- Explicitly disable silent rules during configuration
* Wed Aug 22 2018 tobias.johannes.klausmannAATTmni.thm.de- Update to version 1.6.6: + Make Xkb{Get,Set}NamedIndicator spec & manpages match code + Clarify state parameter to XkbSetNamedDeviceIndicator + Improve table formatting in XkbChangeControls & XkbKeyNumGroups man pages + If XGetImage fails to create image, don\'t dereference it to bounds check + Use size_t for buffer sizes in SetHints.c + Change fall through comment in lcDB.c to match gcc\'s requirements + _XDefaultError: set XlibDisplayIOError flag before calling exit + Fix possible memory leak in cmsProp.c:140 + Don\'t rebuild ks_tables.h if nothing changed. + Remove statement with no effect. + Use flexible array member instead of fake size. + Valgrind fix for XStoreColor and XStoreColors. + XkbOpenDisplay.3: fix typo + Validation of server response in XListHosts. + Fixed off-by-one writes (CVE-2018-14599). + Fixed out of boundary write (CVE-2018-14600). + Fixed crash on invalid reply (CVE-2018-14598). + fix shadow warning + _XIOError(dpy); will never return so remore dead + remove argument check for free() adjust one inden + fix shadow char_size + fix more shadow warning + no need to check argument for _XkbFree() + remove stray extern + no need to check args for Xfree() + fix memleak in error path + fix memleak in error path + no need to check XFree arguments + mark _XDefaultIOError as no_return + Fixes: warning: variable \'req\' set but not,used + add _X_UNUSED to avoid unused variable warnings + remove empty line + silence gcc warning assignment discards \'const\' qualifier from pointer target type- Packaging changes: + Remove upstreamed u_Use-flexible-array-member-instead-of-fake-size.patch + Remove upstreamed u_off-by-one-write-in-XListExtensions.patch + Remove upstreamed u_out-of-boundary-write-in-XListExtensions.patch + Remove upstreamed u_crash-on-invalid-reply-in-XListExtensions.patch
* Mon Aug 20 2018 sndirschAATTsuse.com- u_off-by-one-write-in-XListExtensions.patch
* fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)- u_out-of-boundary-write-in-XListExtensions.patch
* fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)- u_crash-on-invalid-reply-in-XListExtensions.patch
* crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)
* Thu Mar 15 2018 msrbAATTsuse.com- u_Use-flexible-array-member-instead-of-fake-size.patch
* Fixes build error with gcc8. (bnc#1084639)