id	summary	reporter	owner	description	type	status	priority	milestone	component	version	severity	resolution	keywords	cc
8957	xorg-server 1.19.3	Pierre Labastie	bdubbs@…	"new point version:
{{{
A collection of stability fixes here across glamor, Xwayland, input,
and Prime support. Also a security fix for CVE-2017-2624, a timing
attack which can brute-force MIT-MAGIC-COOKIE authentication. Everybody
is encouraged to upgrade. Thanks to all who contributed fixes!

Adam Jackson (5):
      xserver 1.19.2
      Revert ""xserver 1.19.2""
      os: Squash missing declaration warning for timingsafe_memcmp
      xserver 1.19.2
      xserver 1.19.2, no, really

Chris Wilson (3):
      xfree86: Take the input lock for xf86RecolorCursor
      xfree86: Take input lock for xf86TransparentCursor
      xfree86: Take input_lock() for xf86ScreenCheckHWCursor

Matthieu Herrb (4):
      Use timingsafe_memcmp() to compare MIT-MAGIC-COOKIES CVE-2017-2624
      Use arc4random_buf(3) if available to generate cookies.
      auth: remove AuthToIDFunc and associated functions. Not used anymore.
      Brown bag commit to fix 957e8d (arc4random_buf() support)

Michel Dänzer (3):
      prime: Sync shared pixmap from root window instead of screen pixmap
      present: Allow flipping with PRIME slave outputs
      damage: Validate source pictures bound to windows before unwrapping

Olivier Fourdan (5):
      xwayland: Apply output rotation for screen size
      xwayland: CRTC should support all rotations
      glamor: Two pass won't work on memory pixmaps
      xwayland: Make sure we have a focus window
      xwayland: do not set checkRepeat on master kbd

Peter Hutterer (1):
      os: log a bug whenever WriteToClient is called from the input thread

Svitozar Cherepii (1):
      xwayland: Add hack for FWXGA resolution #99574
}}}"	enhancement	closed	normal	8.1	BOOK	SVN	medium	fixed