diff mbox series

[master,walnascar,scarthgap] xserver-xorg: upgrade 21.1.6 -> 21.1.18

Message ID 20250701103252.6703-1-vanusuri@mvista.com
State Accepted
Headers show
Series [master,walnascar,scarthgap] xserver-xorg: upgrade 21.1.6 -> 21.1.18 | expand

Commit Message

Vijay Anusuri July 1, 2025, 10:32 a.m. UTC
From: Vijay Anusuri <vanusuri@mvista.com>

xorg-server 21.1.17
This release contains the fixes for the issues reported in today's security
advisory: https://lists.x.org/archives/xorg/2025-June/062055.html

   * CVE-2025-49175
   * CVE-2025-49176
   * CVE-2025-49177
   * CVE-2025-49178
   * CVE-2025-49179
   * CVE-2025-49180

Additionally, this release includes a fix for CVE-2022-49737 which was
issued after the fix was merged back in 2022 and several other various fixes.

Ref: https://lists.x.org/archives/xorg-announce/2025-June/003609.html

xorg-server 21.1.18
This release contains an additional fix for CVE-2025-49176 from June 17
security advisory: https://lists.x.org/archives/xorg/2025-June/062055.html

Ref: https://lists.x.org/archives/xorg-announce/2025-June/003612.html

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
---
 .../{xserver-xorg_21.1.16.bb => xserver-xorg_21.1.18.bb}        | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename meta/recipes-graphics/xorg-xserver/{xserver-xorg_21.1.16.bb => xserver-xorg_21.1.18.bb} (92%)

Comments

Vijay Anusuri July 21, 2025, 7:15 a.m. UTC | #1
Hi Team,

Any update on this ?

Thanks & Regards,
Vijay

On Tue, Jul 1, 2025 at 4:03 PM <vanusuri@mvista.com> wrote:

> From: Vijay Anusuri <vanusuri@mvista.com>
>
> xorg-server 21.1.17
> This release contains the fixes for the issues reported in today's security
> advisory: https://lists.x.org/archives/xorg/2025-June/062055.html
>
>    * CVE-2025-49175
>    * CVE-2025-49176
>    * CVE-2025-49177
>    * CVE-2025-49178
>    * CVE-2025-49179
>    * CVE-2025-49180
>
> Additionally, this release includes a fix for CVE-2022-49737 which was
> issued after the fix was merged back in 2022 and several other various
> fixes.
>
> Ref: https://lists.x.org/archives/xorg-announce/2025-June/003609.html
>
> xorg-server 21.1.18
> This release contains an additional fix for CVE-2025-49176 from June 17
> security advisory: https://lists.x.org/archives/xorg/2025-June/062055.html
>
> Ref: https://lists.x.org/archives/xorg-announce/2025-June/003612.html
>
> Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
> ---
>  .../{xserver-xorg_21.1.16.bb => xserver-xorg_21.1.18.bb}        | 2 +-
>  1 file changed, 1 insertion(+), 1 deletion(-)
>  rename meta/recipes-graphics/xorg-xserver/{xserver-xorg_21.1.16.bb =>
> xserver-xorg_21.1.18.bb} (92%)
>
> diff --git a/meta/recipes-graphics/xorg-xserver/xserver-xorg_21.1.16.bb
> b/meta/recipes-graphics/xorg-xserver/xserver-xorg_21.1.18.bb
> similarity index 92%
> rename from meta/recipes-graphics/xorg-xserver/xserver-xorg_21.1.16.bb
> rename to meta/recipes-graphics/xorg-xserver/xserver-xorg_21.1.18.bb
> index 38c81f2372..14c45be432 100644
> --- a/meta/recipes-graphics/xorg-xserver/xserver-xorg_21.1.16.bb
> +++ b/meta/recipes-graphics/xorg-xserver/xserver-xorg_21.1.18.bb
> @@ -3,7 +3,7 @@ require xserver-xorg.inc
>  SRC_URI +=
> "file://0001-xf86pciBus.c-use-Intel-ddx-only-for-pre-gen4-hardwar.patch \
>             file://0001-Avoid-duplicate-definitions-of-IOPortBase.patch \
>             "
> -SRC_URI[sha256sum] =
> "b14a116d2d805debc5b5b2aac505a279e69b217dae2fae2dfcb62400471a9970"
> +SRC_URI[sha256sum] =
> "c878d1930d87725d4a5bf498c24f4be8130d5b2646a9fd0f2994deff90116352"
>
>  # These extensions are now integrated into the server, so declare the
> migration
>  # path for in-place upgrades.
> --
> 2.25.1
>
>
Steve Sakoman July 21, 2025, 3:15 p.m. UTC | #2
On Mon, Jul 21, 2025 at 12:16 AM Vijay Anusuri <vanusuri@mvista.com> wrote:
>
> Hi Team,
>
> Any update on this ?

I'll let Richard comment on the status for master branch.

I obviously can't take it for stable branches until it is accepted in master.

A couple of comments though:

1. a typo in the short log, 21.1.6 should be 21.1.16
2. Sending a patch targeted for master and stable branches greatly
increases the odds that it will get overlooked for the stable
branches.

I use patchworks to track stable branch patches.  When the patch is
accepted in master it gets marked as Accepted.  Unless it is top of
mind for me I am unlikely to notice this change and take the patch for
the stable branches.

Best to send the patch for master first and then send separately for
each stable branch when it has been accepted in master.  This makes
tracking things in patchworks much more reliable!

Steve

>
> Thanks & Regards,
> Vijay
>
> On Tue, Jul 1, 2025 at 4:03 PM <vanusuri@mvista.com> wrote:
>>
>> From: Vijay Anusuri <vanusuri@mvista.com>
>>
>> xorg-server 21.1.17
>> This release contains the fixes for the issues reported in today's security
>> advisory: https://lists.x.org/archives/xorg/2025-June/062055.html
>>
>>    * CVE-2025-49175
>>    * CVE-2025-49176
>>    * CVE-2025-49177
>>    * CVE-2025-49178
>>    * CVE-2025-49179
>>    * CVE-2025-49180
>>
>> Additionally, this release includes a fix for CVE-2022-49737 which was
>> issued after the fix was merged back in 2022 and several other various fixes.
>>
>> Ref: https://lists.x.org/archives/xorg-announce/2025-June/003609.html
>>
>> xorg-server 21.1.18
>> This release contains an additional fix for CVE-2025-49176 from June 17
>> security advisory: https://lists.x.org/archives/xorg/2025-June/062055.html
>>
>> Ref: https://lists.x.org/archives/xorg-announce/2025-June/003612.html
>>
>> Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
>> ---
>>  .../{xserver-xorg_21.1.16.bb => xserver-xorg_21.1.18.bb}        | 2 +-
>>  1 file changed, 1 insertion(+), 1 deletion(-)
>>  rename meta/recipes-graphics/xorg-xserver/{xserver-xorg_21.1.16.bb => xserver-xorg_21.1.18.bb} (92%)
>>
>> diff --git a/meta/recipes-graphics/xorg-xserver/xserver-xorg_21.1.16.bb b/meta/recipes-graphics/xorg-xserver/xserver-xorg_21.1.18.bb
>> similarity index 92%
>> rename from meta/recipes-graphics/xorg-xserver/xserver-xorg_21.1.16.bb
>> rename to meta/recipes-graphics/xorg-xserver/xserver-xorg_21.1.18.bb
>> index 38c81f2372..14c45be432 100644
>> --- a/meta/recipes-graphics/xorg-xserver/xserver-xorg_21.1.16.bb
>> +++ b/meta/recipes-graphics/xorg-xserver/xserver-xorg_21.1.18.bb
>> @@ -3,7 +3,7 @@ require xserver-xorg.inc
>>  SRC_URI += "file://0001-xf86pciBus.c-use-Intel-ddx-only-for-pre-gen4-hardwar.patch \
>>             file://0001-Avoid-duplicate-definitions-of-IOPortBase.patch \
>>             "
>> -SRC_URI[sha256sum] = "b14a116d2d805debc5b5b2aac505a279e69b217dae2fae2dfcb62400471a9970"
>> +SRC_URI[sha256sum] = "c878d1930d87725d4a5bf498c24f4be8130d5b2646a9fd0f2994deff90116352"
>>
>>  # These extensions are now integrated into the server, so declare the migration
>>  # path for in-place upgrades.
>> --
>> 2.25.1
>>
Khem Raj July 22, 2025, 1:51 a.m. UTC | #3
On 7/21/25 8:15 AM, Steve Sakoman via lists.openembedded.org wrote:
> On Mon, Jul 21, 2025 at 12:16 AM Vijay Anusuri <vanusuri@mvista.com> wrote:
>>
>> Hi Team,
>>
>> Any update on this ?


hmmm, its same patch which is intended for all three branches. Master 
branch maintainers might miss this patch accidentally since it has 
release branch names in them and stable maintainers are not same, 
atleast it has happened to me for meta-openembedded.

> 
> I'll let Richard comment on the status for master branch.
> 
> I obviously can't take it for stable branches until it is accepted in master.
> 
> A couple of comments though:
> 
> 1. a typo in the short log, 21.1.6 should be 21.1.16
> 2. Sending a patch targeted for master and stable branches greatly
> increases the odds that it will get overlooked for the stable
> branches.
> 
> I use patchworks to track stable branch patches.  When the patch is
> accepted in master it gets marked as Accepted.  Unless it is top of
> mind for me I am unlikely to notice this change and take the patch for
> the stable branches.
> 
> Best to send the patch for master first and then send separately for
> each stable branch when it has been accepted in master.  This makes
> tracking things in patchworks much more reliable!
> 
> Steve
> 
>>
>> Thanks & Regards,
>> Vijay
>>
>> On Tue, Jul 1, 2025 at 4:03 PM <vanusuri@mvista.com> wrote:
>>>
>>> From: Vijay Anusuri <vanusuri@mvista.com>
>>>
>>> xorg-server 21.1.17
>>> This release contains the fixes for the issues reported in today's security
>>> advisory: https://lists.x.org/archives/xorg/2025-June/062055.html
>>>
>>>     * CVE-2025-49175
>>>     * CVE-2025-49176
>>>     * CVE-2025-49177
>>>     * CVE-2025-49178
>>>     * CVE-2025-49179
>>>     * CVE-2025-49180
>>>
>>> Additionally, this release includes a fix for CVE-2022-49737 which was
>>> issued after the fix was merged back in 2022 and several other various fixes.
>>>
>>> Ref: https://lists.x.org/archives/xorg-announce/2025-June/003609.html
>>>
>>> xorg-server 21.1.18
>>> This release contains an additional fix for CVE-2025-49176 from June 17
>>> security advisory: https://lists.x.org/archives/xorg/2025-June/062055.html
>>>
>>> Ref: https://lists.x.org/archives/xorg-announce/2025-June/003612.html
>>>
>>> Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
>>> ---
>>>   .../{xserver-xorg_21.1.16.bb => xserver-xorg_21.1.18.bb}        | 2 +-
>>>   1 file changed, 1 insertion(+), 1 deletion(-)
>>>   rename meta/recipes-graphics/xorg-xserver/{xserver-xorg_21.1.16.bb => xserver-xorg_21.1.18.bb} (92%)
>>>
>>> diff --git a/meta/recipes-graphics/xorg-xserver/xserver-xorg_21.1.16.bb b/meta/recipes-graphics/xorg-xserver/xserver-xorg_21.1.18.bb
>>> similarity index 92%
>>> rename from meta/recipes-graphics/xorg-xserver/xserver-xorg_21.1.16.bb
>>> rename to meta/recipes-graphics/xorg-xserver/xserver-xorg_21.1.18.bb
>>> index 38c81f2372..14c45be432 100644
>>> --- a/meta/recipes-graphics/xorg-xserver/xserver-xorg_21.1.16.bb
>>> +++ b/meta/recipes-graphics/xorg-xserver/xserver-xorg_21.1.18.bb
>>> @@ -3,7 +3,7 @@ require xserver-xorg.inc
>>>   SRC_URI += "file://0001-xf86pciBus.c-use-Intel-ddx-only-for-pre-gen4-hardwar.patch \
>>>              file://0001-Avoid-duplicate-definitions-of-IOPortBase.patch \
>>>              "
>>> -SRC_URI[sha256sum] = "b14a116d2d805debc5b5b2aac505a279e69b217dae2fae2dfcb62400471a9970"
>>> +SRC_URI[sha256sum] = "c878d1930d87725d4a5bf498c24f4be8130d5b2646a9fd0f2994deff90116352"
>>>
>>>   # These extensions are now integrated into the server, so declare the migration
>>>   # path for in-place upgrades.
>>> --
>>> 2.25.1
>>>
>>>
>>>
>>> -=-=-=-=-=-=-=-=-=-=-=-
>>> Links: You receive all messages sent to this group.
>>> View/Reply Online (#220700): https://lists.openembedded.org/g/openembedded-core/message/220700
>>> Mute This Topic: https://lists.openembedded.org/mt/113925021/1997914
>>> Group Owner: openembedded-core+owner@lists.openembedded.org
>>> Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [raj.khem@gmail.com]
>>> -=-=-=-=-=-=-=-=-=-=-=-
>>>
Richard Purdie July 22, 2025, 7:17 a.m. UTC | #4
On Mon, 2025-07-21 at 12:45 +0530, Vijay Anusuri wrote:
> Any update on this ?

For some reason I didn't have the email at all. I did pull it out of
lore, testingit and it is now applied.

Cheers,

Richard
Vijay Anusuri July 22, 2025, 12:27 p.m. UTC | #5
Hi Richard,

Thank you for accepting the patch.

Hi Steve,

Thanks for your suggestion. Hereafter I will send patches separately.

Thanks,
Vijay




On Tue, Jul 22, 2025 at 12:47 PM Richard Purdie <
richard.purdie@linuxfoundation.org> wrote:

> On Mon, 2025-07-21 at 12:45 +0530, Vijay Anusuri wrote:
> > Any update on this ?
>
> For some reason I didn't have the email at all. I did pull it out of
> lore, testingit and it is now applied.
>
> Cheers,
>
> Richard
>
diff mbox series

Patch

diff --git a/meta/recipes-graphics/xorg-xserver/xserver-xorg_21.1.16.bb b/meta/recipes-graphics/xorg-xserver/xserver-xorg_21.1.18.bb
similarity index 92%
rename from meta/recipes-graphics/xorg-xserver/xserver-xorg_21.1.16.bb
rename to meta/recipes-graphics/xorg-xserver/xserver-xorg_21.1.18.bb
index 38c81f2372..14c45be432 100644
--- a/meta/recipes-graphics/xorg-xserver/xserver-xorg_21.1.16.bb
+++ b/meta/recipes-graphics/xorg-xserver/xserver-xorg_21.1.18.bb
@@ -3,7 +3,7 @@  require xserver-xorg.inc
 SRC_URI += "file://0001-xf86pciBus.c-use-Intel-ddx-only-for-pre-gen4-hardwar.patch \
            file://0001-Avoid-duplicate-definitions-of-IOPortBase.patch \
            "
-SRC_URI[sha256sum] = "b14a116d2d805debc5b5b2aac505a279e69b217dae2fae2dfcb62400471a9970"
+SRC_URI[sha256sum] = "c878d1930d87725d4a5bf498c24f4be8130d5b2646a9fd0f2994deff90116352"
 
 # These extensions are now integrated into the server, so declare the migration
 # path for in-place upgrades.