Date: Sun, 26 Feb 2023 16:14:43 +0000 From: "Robert Eckardt" <rol@robert-eckardt.de> To: questions@freebsd.org Subject: Re: (268963) Security patches for xorg-server-21.1.4_1,1 Message-ID: <702b7e2155d9ae3c626d84db7dce7856@robert-eckardt.de> In-Reply-To: <Y/rR0/RVCvvJDHmJ@aurora.gregv.net> References: <Y/rR0/RVCvvJDHmJ@aurora.gregv.net> <536b404411ef399b151b84b46a74dd31@robert-eckardt.de> <667f6be1-62d9-6f1e-c5fd-13e3385622b2@freebsd.org>
next in thread | previous in thread | raw e-mail | index | archive | help
Hi folks, thanks a lot. For the records: Eventually, I downloaded xorg-server-21.1.7 (fetch https://xorg.freedeskt= op.org/releases/individual/xserver/xorg-server-21.1.7.tar.xz) and changed= Makefile and distinfo of the 21.1.4 port accordingly. I checked only for FLAVOR=3Dxvfb, although it also builds xorg-server wit= hout errors when you forget the FLAVOR. And luckily the port built and reinstalled xorg-vfbserver without problem= s. diff -rC2 xorg-server-21.1.4/Makefile xorg-server/Makefile *** xorg-server-21.1.4/Makefile Sun Feb 26 11:34:01 2023 --- xorg-server/Makefile Sun Feb 26 11:36:49 2023 *************** *** 1,4 **** PORTNAME=3D xorg ! PORTVERSION=3D 21.1.4 PORTREVISION=3D 1 PORTEPOCH=3D 1 --- 1,4 ---- PORTNAME=3D xorg ! PORTVERSION=3D 21.1.7 PORTREVISION=3D 1 PORTEPOCH=3D 1 diff -rC2 xorg-server-21.1.4/distinfo xorg-server/distinfo *** xorg-server-21.1.4/distinfo Wed Jun 29 15:44:41 2022 --- xorg-server/distinfo Sun Feb 26 11:38:12 2023 *************** *** 1,3 **** TIMESTAMP =3D 1659367891 ! SHA256 (xorg-server-21.1.4.tar.xz) =3D 5cc4be8ee47edb58d4a90e603a59d56b= 40291ad38371b0bd2471fc3cbee1c587 ! SIZE (xorg-server-21.1.4.tar.xz) =3D 4940176 --- 1,3 ---- TIMESTAMP =3D 1659367891 ! SHA256 (xorg-server-21.1.7.tar.xz) =3D d9c60b2dd0ec52326ca6ab20db0e490b= 1ff4f566f59ca742d6532e92795877bb ! SIZE (xorg-server-21.1.7.tar.xz) =3D 4933292 26. Februar 2023 04:28, "Greg Veldman" <freebsd@gregv.net> schrieb: > On Sat, Feb 25, 2023 at 06:15:03PM +0000, Graham Perrin wrote: >=20 >>=20On 25/02/2023 14:13, Robert Eckardt wrote: >>=20 >>=20Hi all, >>=20 >>=20does someone know, when an update for xorg-server-21.1.4_1,1 will be >> available? ??? >>=20 >>=20I can't guess when a commit will be made. >>=20 >>=20In the meantime, please know that the Ports Security Team is aware o= f >> the security aspect. >>=20 >>=20<https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D268963>; >=20 >=20If it helps at all, I've been running xorg-server 21.1.7 built > from the patch in that PR for over a week on my desktop machine > with no issues. FreeBSD 12.3 amd64, built on the same machine > I'm running it on. >=20 >=20If you're willing to take my word that I didn't do anything > nefarious to it, I've also put up a binary package of that > build that anyone is free to use. >=20 >=20https://www.gregv.net/xorg-server-21.1.7,1.pkg >=20 >=20SHA256 sum: > 353311aabccc9379af4d90e8ff445f8ba7444078cf8bb7bf4ea2f43b04351187 > xorg-server-21.1.7,1.pkg >=20 >=20-- > Greg Veldman > freebsd@gregv.net
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?702b7e2155d9ae3c626d84db7dce7856>