CVE-2025-49175: Out-of-bounds access in X Rendering extension
(Animated cursors)
CVE-2025-49176: Integer overflow in Big Requests Extension
CVE-2025-49177: Data leak in XFIXES Extension 6
(XFixesSetClientDisconnectMode)
CVE-2025-49178: Unprocessed client request via bytes to ignore
CVE-2025-49179: Integer overflow in X Record extension
CVE-2025-49180: Integer overflow in RandR extension
(RRChangeProviderProperty)
Also reduce the diffs between the generated xtermcfg.h when using
configure and the one we provide for the BSD makefile. The file after
this diff matches the result of configure with :
configure --enable-backarrow-is-erase \
--enable-delete-is-del --enable-initial-erase \
--disable-tek4014 --with-terminal-id=vt100 \
--enable-broken-st --disable-exec-selection \
--disable-sixel-graphics --enable-initial-erase \
--disable-paste64 --disable-readline-mouse \
--disable-screen-dumps \
--disable-tcap-fkeys --disable-tcap-query \
--with-utmp-setgid
u_printf_length() was moved from u_printf.cpp to avoid a problem with
unused c++ sections with ld.bfd.
Since then, upstream changed u_printf.cpp to u_printf.c and this problem
no longer exists.
matches how meson links libgbm.so, though there the resulting
library did not have NEEDED entries for libm and libpthread
patch from jca@, tb@ confirms this unbreaks webkitgtk4 ports build
CVE-2025-26594: Use-after-free of the root cursor
CVE-2025-26595: Buffer overflow in XkbVModMaskText()
CVE-2025-26596: Heap overflow in XkbWriteKeySyms()
CVE-2025-26597: Buffer overflow in XkbChangeTypesOfKey()
CVE-2025-26598: Out-of-bounds write in CreatePointerBarrierClient()
CVE-2025-26599: Use of uninitialized pointer in compRedirectWindow()
CVE-2025-26600: Use-after-free in PlayReleasedEvents()
CVE-2025-26601: Use-after-free in SyncInitTrigger()
5a9c052ba78e5d1b0020b8f8320d211d2205a958 amd: Include missing llvm IR header Module.h
fa9cd89a85b904615ebc11da609445b5b751e68d Update lp_bld_misc.cpp to support llvm-19+.
a8eed9cca26b1c4b6526be7d042adec6703a30ae gallium: Don't pass avx512er and avx512pf features on LLVM 19
ok jsg@
