December 2022 - Xquartz-dev - lists.macosforge.org

XQuartz 2.8.5_beta12
by Jeremy Huddleston Sequoia 12 Jan '23

12 Jan '23

XQuartz 2.8.5_beta2 is available at https://www.xquartz.org/releases/XQuartz-2.8.5_beta2.html This serves mainly as a release for possible future triage. The primary difference between this and beta1 is that in beta1, COMPOSITE is disabled at build time. With beta2, we now build XQuartz with COMPOSITE but disable it at runtime. It *should* be functionally equivalent, but I wanted to have a release with just this change. Beta3 should have a bit more changes, and if there is fallout, it will be useful to have this beta2 to rule out this change as a cause. Thanks, Jeremy

2 2

XQuartz 2.8.5_beta1
by Jeremy Huddleston Sequoia 24 Dec '22

24 Dec '22

XQuartz 2.8.5_beta1 is available at https://www.xquartz.org/releases/XQuartz-2.8.5_beta1.html This updates many of the client libraries and tools to their latest upstream versions and should serve as a baseline for some server changes that I'm hoping on making over the next few weeks to hopefully address some longstanding crashes.

1 0

XQuartz 2.8.4
by Jeremy Huddleston Sequoia 24 Dec '22

24 Dec '22

XQuartz 2.8.4 is now available at https://www.xquartz.org/releases/XQuartz-2.8.4.html This release picks up a few changes to the X11 servers for various CVEs announced about a week and a half ago. I'm including the X.org advisory for the vulnerabilities here as well. --Jeremy

1 0

XQuartz 2.8.3
by Jeremy Huddleston Sequoia 09 Dec '22

09 Dec '22

Hi folks, XQuartz 2.8.3 has been released. This release addresses a few vulnerabilities that have been announced upstream over the past few months. If you want more details on the vulnerabilities, I suggest you research the linked advisories and reach out to upstream maintainers. • Updated server to 21.1.4 to address CVE-2022-2319 and CVE-2022-2320 • Updated pixman to 0.42.2 to address CVE-2022-44638 • Updated xterm to 376b to address CVE-2022-45063 This release additionally contains fixes for the following bugs: • Fixed a crash when editing the Applications menu (#267) • Fixed a performance issue impacting gtk3 apps (quartz-wm:!2) • Re-added support for system-wide app preferences (#274) • Updated libXft to latest version to address an issue with text in Motif apps(#301) • Updated installer package to support downgrading XQuartz.zpp (#300) See https://www.xquartz.org/releases/XQuartz-2.8.3.html for more details.

2 1