[Midnightbsd-cvs] [MidnightBSD/mports] f3d0f5: x11-servers/xorg-server: update to 21.1.24 (securi...

[Lucas Holt]

  Branch: refs/heads/master
  Home:   https://github.com/MidnightBSD/mports
  Commit: f3d0f5763dd00053c61bab08187e8b40e1783aa8
      https://github.com/MidnightBSD/mports/commit/f3d0f5763dd00053c61bab08187e8b40e1783aa8
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-07-08 (Wed, 08 Jul 2026)

  Changed paths:
    M x11-servers/xorg-server/Makefile
    M x11-servers/xorg-server/distinfo

  Log Message:
  -----------
  x11-servers/xorg-server: update to 21.1.24 (security) (#624)

Updates `x11-servers/xorg-server` from 21.1.23 to 21.1.24 to address the
X.Org security advisory of 2026-07-08.

## CVEs fixed
- **CVE-2026-55999** — `glamor_font_get()` font atlas heap buffer
overflow (per-glyph metrics can exceed maxbounds-derived slot). Fix adds
a per-glyph bounds check in `glamor/glamor_font.c`.
- **CVE-2026-56000** — GLX `contextTags` use-after-free in
`CommonMakeCurrent()`. Fix frees the old tag before the realloc that
could move the array (`glx/vndcmds.c`).

Both fixes verified present in the 21.1.24 source.

## Changes
- `PORTVERSION` 21.1.23 → 21.1.24
- Regenerated `distinfo`

## Notes
- All existing MidnightBSD patches still apply cleanly.
- Built and staged (`bmake` + `fake`) on amd64 with the default `xorg`
flavor; plist unchanged.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

## Summary by Sourcery

Update the xorg-server port to release 21.1.24 to incorporate the latest
upstream security fixes.

Bug Fixes:
- Pull in upstream fixes for CVEs in glamor font handling and GLX
context tag management via the 21.1.24 release.

Build:
- Bump the xorg-server port version and refresh distinfo for the 21.1.24
distfile.

Signed-off-by: Lucas Holt <luke at foolishgames.com>



To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/mports/settings/notifications