Skip to content

Changelog libx11 (2:1.6.9-2ubuntu1.2)

2021

libx11 (2:1.6.9-2ubuntu1.2) focal-security; urgency=medium

   * SECURITY UPDATE: extra X protocol requests via unchecked string lengths
     - debian/patches/CVE-2021-31535.patch: reject strings longer than
       USHRT_MAX before sending them on the wire in src/Font.c,
       src/FontInfo.c, src/FontNames.c, src/GetColor.c, src/LoadFont.c,
       src/LookupCol.c, src/ParseCol.c, src/QuExt.c, src/SetFPath.c,
       src/SetHints.c, src/StNColor.c, src/StName.c .
     - CVE-2021-31535

2020

libx11 (2:1.6.9-2ubuntu1.1) focal-security; urgency=medium

   * SECURITY UPDATE: integer overflow and heap overflow in XIM client
     - debian/patches/CVE-2020-14344-1.patch: fix signed length values in
       modules/im/ximcp/imRmAttr.c.
     - debian/patches/CVE-2020-14344-2.patch: fix integer overflows in
       modules/im/ximcp/imRmAttr.c.
     - debian/patches/CVE-2020-14344-3.patch: fix more unchecked lengths in
       modules/im/ximcp/imRmAttr.c.
     - debian/patches/CVE-2020-14344-4.patch: zero out buffers in functions
       in modules/im/ximcp/imDefIc.c, modules/im/ximcp/imDefIm.c.
     - debian/patches/CVE-2020-14344-5.patch: change the data_len parameter
       to CARD16 in modules/im/ximcp/imRmAttr.c.
     - debian/patches/CVE-2020-14344-6.patch: fix size calculation in
       modules/im/ximcp/imRmAttr.c.
     - debian/patches/CVE-2020-14344-7.patch: fix input clients connecting
       to server in modules/im/ximcp/imRmAttr.c.
     - CVE-2020-14344
   * SECURITY UPDATE: integer overflow and double free in locale handling
     - debian/patches/CVE-2020-14363.patch: fix an integer overflow in
       modules/om/generic/omGeneric.c.
     - CVE-2020-14363

libx11 (2:1.6.9-2ubuntu1) focal; urgency=medium

   * control: Bump build-dep on x11proto-dev to make sure we have all
     the new keysyms.

libx11 (2:1.6.9-2) unstable; urgency=medium

   * control: Depend on x11proto-dev instead of the old protos, bump the
     version.
   * control: libx11-dev Replaces old x11proto-dev. (Closes: #952589)

libx11 (2:1.6.9-1) unstable; urgency=medium

   * New upstream release.
   * control: Use debhelper-compat, bump to 12.
   * signing-key.asc: Add Adam Jackson's key.
   * rules: Remove .la files before install.
   * rules: Use -a instead of -s for dh_makeshlibs.
   * watch: Update upstream url.
   * control: Bump policy to 4.5.0.

2019

libx11 (2:1.6.8-1) unstable; urgency=medium

   [ Timo Aaltonen ]
   * New upstream release.
   * patches: Refreshed.
 
   [ Helmut Grohne ]
   * Move documentation dependencies to Build-Depends-Indep. (Closes: #928878)

2018

libx11 (2:1.6.7-1) unstable; urgency=medium

   * New upstream release.
     - fix video freezing in firefox with amdgpu
   * upstream: Add key from Matt Turner.

libx11 (2:1.6.6-1) unstable; urgency=medium

   * New upstream release.
     - Fixes CVE-2018-14598, CVE-2018-14599 and CVE-2018-14600.
   * Move libx11-doc from Recommends to Suggests (Closes: #648443).
   * Add debian/README.source
   * Set source format to 1.0.
   * Bump standards version to 4.2.0.

libx11 (2:1.6.5-1) unstable; urgency=medium

   * Add Matt Turner's key to d/u/signing-key.asc
   * New upstream release.
   * Update VCS metadata for move to salsa.

2017

libx11 (2:1.6.4-3) unstable; urgency=high

   [ Emilio Pozuelo Monfort ]
   * debian/libx11-6.symbols: use arch-bits=64 rather than listing all
     64-bits architectures, which is not future-proof.
 
   [ Julien Cristau ]
   * Fix two regressions introduced in 2:1.6.4-1:
     + Fix wrong Xfree in XListFonts failure path
     + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8 (closes: #847345)
   * Build-depend on dpkg-dev 1.18.0 for arch-bits support in dpkg-gensymbols.

2016

libx11 (2:1.6.4-2) unstable; urgency=medium

   * Fix arch:all-only build.

libx11 (2:1.6.4-1) unstable; urgency=medium

   [ Andreas Boll ]
   * New upstream release.
     - Fixes CVE-2016-7942 and CVE-2016-7943 (Closes: #840439).
   * Bump libxcb1-dev build-dep to 1.11.1 per configure.ac.
   * Update a bunch of URLs in packaging to https.
 
   [ Julien Cristau ]
   * Update d/upstream/signing-key.asc with Matthieu Herrb's key.
 
   [ Emilio Pozuelo Monfort ]
   * Cherry-pick upstream commit 20a3f99 to plug a memory leak in the
     security fix.
   * Bump debhelper compat to 10.
   * Switch from old debhelper to dh.
   * Drop workaround for old tarballs not shipping some files.
   * Switch to -dbgsym packages.
   * Bump Standards-Version to 3.9.8, no changes.
   * Drop libtool and automake build dependencies, debhelper takes
     care of that for us now.

2015

libx11 (2:1.6.3-1) unstable; urgency=medium

   * New upstream release.
   * Drop 006_tailor_pt_BR.UTF-8_Compose.diff, no longer necessary.
   * Rediff 003_recognize_glibc_2.3.2_locale_names.diff.
   * Let uscan verify tarball signatures.

2014

libx11 (2:1.6.2-3) unstable; urgency=medium

   [ Julien Cristau ]
   * libx11-6.symbols: yet another 64bit arch (ppc64el).  Closes: #749728.

libx11 (2:1.6.2-2) unstable; urgency=low

   [ Julien Cristau ]
   * Yet more 64 bit archs in symbols file: mips64{,el} (closes: #722088).
   * Remove Cyril Brulebois from Uploaders.
   * Bump debhelper compat level from 5 to 7.
   * Switch from xsfbs.mk to standard quilt patching.
 
   [ Colin Watson ]
   * Declare libx11-xcb-dev Multi-Arch: same (closes: #727231).

2013

libx11 (2:1.6.2-1) unstable; urgency=low

   [ Julien Cristau ]
   * So apparently the 64-bit powerpc port is called ppc64 (closes: #613820).
 
   [ Maarten Lankhorst ]
   * New upstream release.

libx11 (2:1.6.1-1) unstable; urgency=low

   [ Julien Cristau ]
   * New upstream release
   * libx11-6.symbols: add powerpc64 to the list of 64bit archs (closes: #613820)
 
   [ Wookey ]
   * Update symbols file for arm64

libx11 (2:1.6.0-1) unstable; urgency=low

   * Bump libx11-dev's x11proto-core-dev dependency to 7.0.17 for _X_NORETURN
     (closes: #649866).
   * New upstream release
     - Fix unbounded recursion when reading resource files (closes: #145048)
     - XmbLookupString man page no longer warns (closes: #300819)
     - Fix build with automake 1.13 (closes: #710467)
   * Update 003_recognize_glibc_2.3.2_locale_names.diff.
   * Update 006_tailor_pt_BR.UTF-8_Compose.diff.
   * Refresh 008_remove_ko_Compose.diff.
   * Update 009_remove_th_Compose.diff.
   * Refresh 015_russian_locale_alias.diff.
   * Bump shlibs and symbols for _XEatDataWords.
   * Add new locales to configure.ac so they can get installed.
   * Disable silent rules.
   * Use dpkg-buildflags.

2012

libx11 (2:1.5.0-1) unstable; urgency=low

   * New upstream release. Visible changes:
     - Add APL support, yay!
     - A few duplicated Compose sequences were tweaked or removed. Affected
       characters are: Ã / µ / Ñ / ñ / ¹ / ² / ³ / Ó / ó / Ǻ / ǻ.
   * Drop patch, fixed upstream:
     - 001-configure-check-if-issetugid-is-declared.diff

libx11 (2:1.4.99.901-2) unstable; urgency=low

   * Add AC_CHECK_DECL(issetugid) to fix FTBFS on kfreebsd (closes: #669670).

libx11 (2:1.4.99.901-1) unstable; urgency=low

   * New upstream release candidate (1.5 RC1)
     - XQueryColors: split a request into multiple requests if necessary
       (closes: #278984)
     - Revert "xcb: Add TCP fallback" (closes: #659558)
   * Don't require (fake)root for debian/rules clean.
   * Drop xorg-sgml-doctools dependency from libx11-doc, the css is now
     included in the html files directly.  Also add Breaks in addition to the
     Replaces on old libx11-dev.
   * Add build-indep and build-arch targets, don't build specs in build-arch.
   * Rediff 006_tailor_pt_BR.UTF-8_Compose.diff and
     015_russian_locale_alias.diff.
   * Upload to unstable.

2011

libx11 (2:1.4.99.1-1) experimental; urgency=low

   [ Julien Cristau ]
   * Move xorg-sgml-doctools dependency from -dev to -doc.
   * Move libx11-doc from section libdevel to doc (closes: #648706).
 
   [ Cyril Brulebois ]
   * New upstream release candidate:
     - Bug fixes, specs clean-up, new compose sequences.
     - Add GetRequestSized.
   * Bump xorg-sgml-doctools build-dep.
   * Refresh patch:
     - 006_tailor_pt_BR.UTF-8_Compose.diff
   * Add symbol:
     - _XGetRequest@Base
   * Bump shlibs accordingly, for the udeb.

libx11 (2:1.4.4-4) unstable; urgency=low

   * debian/rules: since the documentation is moved to libx11-doc, the
     exception handling for libx11-xcb-dev needs to also look at libx11-doc,
     not libx11-dev.

libx11 (2:1.4.4-3) unstable; urgency=low

   * Split documentation out from libx11-dev into a separate libx11-doc
     package, so that libx11-dev can be multiarch co-installable.

libx11 (2:1.4.4-2) unstable; urgency=low

   [ Colin Watson ]
   * Fix cross-compilation breakage due to a typo in the multiarch patch
     (closes: #642402)

libx11 (2:1.4.4-1) unstable; urgency=low

   * New upstream release.
   * Drop xorg.css from libx11-dev, depend on xorg-sgml-doctools instead.

libx11 (2:1.4.3-3) unstable; urgency=low

   [ Julien Cristau ]
   * Add lintian override for the libx11-private dep in libx11-6.symbols.
 
   [ Cyril Brulebois ]
   * Fix the FTBFS on s390x (Closes: #635692): Add s390x to the list of
     64-bit architectures in the symbols file. Thanks, Aurélien Jarno!

libx11 (2:1.4.3-2) unstable; urgency=low

   * Team upload.
 
   [ Steve Langasek ]
   * Build for multiarch.
 
   [ Julien Cristau ]
   * Bump Standards-Version to 3.9.2.
   * Properly clean up libtool m4 files.

libx11 (2:1.4.3-1) unstable; urgency=low

   * New upstream release:
     - Add Sinhala support.
     - Add Docbook external references support.
   * Bump x11proto-core-dev build-dep to make defining XK_SINHALA useful.
   * Bump xutils-dev build-dep for newer macros.

libx11 (2:1.4.2-1) unstable; urgency=low

   [ Timo Aaltonen ]
   * New upstream release. (closes: #463159)
 
   [ Cyril Brulebois ]
   * Bump x11proto-xf86bigfont-dev build-dep.

libx11 (2:1.4.1-5) unstable; urgency=low

   * Mark x11-data Multi-Arch: foreign.

libx11 (2:1.4.1-4) unstable; urgency=low

   * Bump Standards-Version to 3.9.1.
   * specs were converted from groff to xml, so we can ship the html version
     now.
   * Drop Build-Dependencies on groff/ghostscript/... since the docs were
     converted to xml.

libx11 (2:1.4.1-3) unstable; urgency=low

   * Remove David Nusinow and Brice Goglin from Uploaders.  Thanks for all your
     work!
   * Drop Conflicts on sarge-era xlibs-data, Replaces on sarge-era libx11-6,
     Pre-Depends on x11-common (needed for upgrades from sarge), and Conflicts
     against pre-XCB libx11-6.
   * Wrap debian/control Depends fields.
   * Upload to unstable.

libx11 (2:1.4.1-2) experimental; urgency=low

   * Make libx11-data break earlier versions of libx11-6, since those rely
     on XKeysymDB, resulting in a non-functional keyboard and plenty of
     such messages: “Internal error: Could not resolve keysym *”.

libx11 (2:1.4.1-1) experimental; urgency=low

   [ Julien Cristau ]
   * New upstream release.
     - lots of fixes for multithreaded apps
     - X11 users can now compose anarchism (closes: #555938)
 
   [ Robert Hooker ]
   * New upstream release.
   * Don't install unshipped XKeysymDB.
   * Bump xutils-dev build-dep to 1:7.5+5 for util-macros 1.11 requirement.
 
   [ Cyril Brulebois ]
   * New new (new) upstream release.
   * As a temporary measure, add 020_keep_xorg_css.diff to avoid having to
     depend on xorg-sgml-doctools just for xorg.css.
   * Refresh all patches.
   * Some functions got hidden by upstream in aebbf36238, since “none of
     the functions in Xprivate.h should have any callers outside of Xlib,
     by definition”. As a consequence, drop the following symbols from
     libx11-6.symbols:
     - _XIDHandler@Base
     - _XSetPrivSyncFunction@Base
     - _XSetSeqSyncFunction@Base
   * Drop obsolete --enable-man-pages=3 from configure flags.
   * Pass --with-xmlto and --without-fop for the documentation generation.
   * Add xmlto, xorg-sgml-doctools, w3m build-dep accordingly.
   * Remove *.xml before running dh_install, there's no point in shipping
     those files.
   * Update debian/copyright from upstream COPYING.

2010

libx11 (2:1.3.3-3) unstable; urgency=low

   [ Julien Cristau ]
   * Drop manpage from libx11-6-udeb.
   * Don't install X11 locale data in the udeb.  The installer uses only gtk
     apps so this is useless (and big).
 
   [ Cyril Brulebois ]
   * Cherry-pick patch from upstream to run user's synchandlers as well as
     any internal synchandlers: 75ea8c3793. This fixes xnee issues when
     RECORD extension is enabled (Closes: #536491; LP: #378648).
   * Merge xsfbs/debian-unstable to fix double autoreconf runs.

libx11 (2:1.3.3-2) unstable; urgency=low

   [ Julien Cristau ]
   * Update debian/copyright from upstream COPYING.
   * Remove myself from Uploaders
 
   [ Brice Goglin ]
   * Remove Jamey Sharp and Josh Triplett from Uploaders, closes: #568274.
 
   [ Cyril Brulebois ]
   * Add udeb needed for the graphical installer: libx11-6-udeb.
   * Bump the B-D on libxcb1-dev to ensure libx11-6-udeb gets a dependency
     on libxcb1-udeb.
   * Bump Standards-Version from 3.8.3 to 3.8.4 (no changes needed).
   * Add myself to Uploaders.

libx11 (2:1.3.3-1) unstable; urgency=low

   * xtrans has been fixed to not make us export a weak in6addr_any.  Adjust
     libx11-6.symbols accordingly (closes: #560648).
   * Rename the build directory to not include DEB_BUILD_GNU_TYPE for no
     good reason.  Thanks, Colin Watson!
   * Update symbols file for sparc64 (closes: #560400).  Thanks, Aurélien
     Jarno!
   * New upstream release
     + fix XCopyGC argument order in manpage (LP: #408337)
   * Bump xutils-dev build-dep for new util-macros.
   * Install the Compose man page in libx11-data.
   * Rediff patches 003_recognize_glibc_2.3.2_locale_names.diff,
     007_iso8859-15_Compose_fix.diff, 008_remove_ko_Compose.diff,
     009_remove_th_Compose.diff, 015_russian_locale_alias.diff.
   * libx11-6.symbols: add xlocaledir, made non-static in 1.3.3.

2009

libx11 (2:1.3.2-1) unstable; urgency=low

   [ Julien Cristau ]
   * libx11-6.symbols: _XkbReadBufferCopy32, _XkbReadCopyData32 and
     _XkbWriteCopyData32 are only present on 64-bit architectures.
   * Unmark the following symbols as private, they're being used:
     - _XRegisterFilterByMask
     - _XRegisterFilterByType
     - _XUnregisterFilter
     - _XInitKeysymDB
     - _Xevent_to_mask
   * Build the Xlib specs and install them in libx11-dev.
   * Upload to unstable.
 
   [ Timo Aaltonen ]
   * New upstream release.
   * Bump the build-dep on xutils-dev (>= 1:7.5~1).

libx11 (2:1.3-1) experimental; urgency=low

   * libx11-6.symbols: mark some more stuff as private.
   * libx11-6.symbols: add kfreebsd-amd64 tag for 64-bit symbols.
   * Run dpkg-gensymbols with -c4 to catch mismatches between the symbols file
     and the library.
   * New upstream release.
   * Cherry-pick patch from upstream git to avoid an error in configure due to
     underquoting.
   * Fix 006_tailor_pt_BR.UTF-8_Compose.diff to apply on new upstream.
   * Bump Standards-Version to 3.8.3.

libx11 (2:1.2.99.901-1) experimental; urgency=low

   [ Brice Goglin ]
   * Bump Standards-Version to 3.8.2.
 
   [ Julien Cristau ]
   * Drop 002_arm_abi_brain_damage.diff, the old ABI arm port is gone.
   * Use a glob in libx11-6.install and libx11-xcb1.install.
   * Add tentative symbols file for libX11.so.6.  Many private symbols still
     included.
   * Build-depend on dpkg 1.15.3, to get support for tags in the symbols file.
   * New upstream release candidate
     + add {left,right}wards arrow to en_US.UTF-8 compose table
       (closes: #532117).  Thanks, Filippo Giunchedi!

libx11 (2:1.2.2-1) unstable; urgency=low

   [ Julien Cristau ]
   * Move dbg packages to new debug section.
   * Kill preinst which handled upgrades from early Ubuntu versions (before
     breezy).  This is long obsolete.
 
   [ Brice Goglin ]
   * New upstream release.
     + Fix fi_FI.UTF-8, closes: #519474.
     + Fix thai XIM filtering keys when NumLock/CapsLock is on, closes: #443800.
   * Add myself to Uploaders.

libx11 (2:1.2.1-1) unstable; urgency=low

   * New upstream release.
     + fixes fi_FI.UTF-8 locale (closes: #519474)
     + adds sr_RS locale (closes: #507940)
     + adds hu_HU.utf8 locale alias (closes: #407573)
     + Compose entries for some standard mathematical operators
       (closes: #411734)
   * Patch 012_ru_RU_UTF-8_XLC_LOCALE.diff removed, applied upstream.
   * Update patches 003_recognize_glibc_2.3.2_locale_names.diff,
     006_tailor_pt_BR.UTF-8_Compose.diff and 015_russian_locale_alias.diff.
   * 003_recognize_glibc_2.3.2_locale_names.diff: don't comment out the
     microsoft-cp* entries from compose.dir (closes: #511354).  Thanks, Sergei
     Golovan!
   * 003_recognize_glibc_2.3.2_locale_names.diff: don't comment out the eo_XX
     entries from compose.dir and locale.dir (closes: #479058).  Thanks, Luiz
     Portella!
   * 009_remove_th_Compose.diff: new patch, comment out the th_TH.UTF-8 entry
     from compose.dir, to allow Thai XIM as default for X apps
     (closes: #520509).  Thanks, Theppitak Karoonboonyanan!

libx11 (2:1.2-1) unstable; urgency=low

   * New upstream release.
   * Remove obsolete ld.so.conf handling from libx11-6 postinst.
   * Run autoreconf on build; add build-deps on automake, libtool, xutils-dev.
   * Handle parallel builds.
   * Refresh patches 003_recognize_glibc_2.3.2_locale_names.diff and
     012_ru_RU_UTF-8_XLC_LOCALE.diff.
   * Use a wildcard for usr/share/X11/locale instead of listing every single
     file.

2008

libx11 (2:1.1.99.2-1) experimental; urgency=low

   * New upstream release.
   * Use new xcb socket handoff mechanism, update (build-)dependencies.
   * Refresh patches.
   * Build-dep on x11proto-core-dev >= 7.0.13.

libx11 (2:1.1.5-2) unstable; urgency=medium

   * Cherry-picked from upstream git: Fix an XCB leak when the client has a
     non-fatal error handler.

libx11 (2:1.1.5-1) unstable; urgency=low

   [ Brice Goglin ]
   * Add upstream URL to debian/copyright.
   * Add a link to www.X.org and a reference to the upstream module
     in the long description.
 
   [ Timo Aaltonen ]
   * New upstream release.
     + adds missing <cedilla> Compose sequences (closes: #394068)
 
   [ Julien Cristau ]
   * 014_add_Khmer_digraphs.diff: remove, applied upstream
   * 006_tailor_pt_BR.UTF-8_Compose.diff: update

libx11 (2:1.1.4-2) unstable; urgency=low

   * Drop Pre-Depends on x11-common from libx11-6, libx11-data and libx11-xcb1.
   * Pull from upstream libX11-1.1-branch
     + fixes Compose sequences for finnish keyboards (closes: #467142)
     + interrobang has been added to the en_US.UTF-8 Compose file
       (closes: #300160)
   * Update patch 006_tailor_pt_BR.UTF-8_Compose.diff, refresh others.
   * Drop the NEWS entry about sun java.  sun-java6 is now fixed, and libxcb
     doesn't abort() anymore on the locking error.
   * (Finally) upload Xlib/XCB to unstable.

libx11 (2:1.1.4-1) experimental; urgency=low

   [ Timo Aaltonen ]
   * control: libx11-data Replaces old versions of libx11-6 to enable
     upgrades from Ubuntu 6.06.
 
   [ Julien Cristau ]
   * New upstream release
     + fixes XIM hang when switching input contexts (closes: #437437)
   * Update patch stack:
     + 003_recognize_glibc_2.3.2_locale_names.diff: fixup; drop the hunk
       under #ifdef WIN32, as I don't care enough to fix it
     + 004_en_US.UTF-8_Compose_fix_Unicode_plane_1.diff: remove, applied
       upstream
     + 005_Compose_fix_latin1_UTF8.diff: remove, applied upstream
     + 006_tailor_pt_BR.UTF-8_Compose.diff: fixup
     + 007_iso8859-15_Compose_fix.diff: refresh
     + 008_remove_ko_Compose.diff: refresh
     + 009_iso8859-15_Compose_Eurosign.diff: remove, applied upstream
     + 012_ru_RU_UTF-8_XLC_LOCALE.diff: refresh
     + 014_add_Khmer_digraphs.diff: fixup
     + 015_russian_locale_alias.diff: refresh
   * Bump Standards-Version to 3.7.3 (no changes).
   * Drop XS- prefix from Vcs-* control fields.
   * Fix malformed trailer line in libx11-6.NEWS (thanks, lintian).

2007

libx11 (2:1.1.3-1) experimental; urgency=low

   [ Julien Cristau ]
   * New upstream release.
     + Fix locking in _XimGetWindowEventmask (closes: #427296).
     + fix XGetMotionEvents arguments order (closes: #431421).
     + XGetCommand(3) clarified (closes: #133348).
     + XrmCombineDatabase(3) fixed (closes: #393434).
   * Install the upstream NEWS file in libx11-6 in addition to the git
     changelog.
   * Use binary:Version instead of Source-Version in debian/control.
 
   [ Josh Triplett ]
   * Expand the description of the problem with Sun Java in libx11-6.NEWS.

libx11 (2:1.1.2-1) experimental; urgency=low

   [ Brice Goglin ]
   * Drop -DLIBXCURSOR from CFLAGS since upstream default is now correct
     (closes: #392618).
   * Add en_DK.ISO-8859-15 to 003_recognize_glibc_2.3.2_locale_names.diff
     Thanks Kaare Hviid. (closes: #419192).
 
   [ Julien Cristau ]
   * Add XS-Vcs-Git and XS-Vcs-Browser in debian/control.
   * New upstream release:
     + typo in XRecolorCursor.man fixed, closes: #225839;
     + XRegisterIMInstantiateCallback manpage fixed, closes: #232133;
     + XGetVisualInfo manpage fixed, closes: 399094;
     + greek Compose file updated, patch 016_greek_polytonic_Compose.diff
       dropped;
     + file descriptor leak in modules/im/ximcp/imLcPrs.c:parseline() fixed,
       patch 021_compose_fclose.diff dropped;
     + fix for CVE-2007-1667 included, patch 022_CVE-2007-1667.diff dropped.
   * Add a watch file.
   * Don't run dh_install with --list-missing in binary-indep, there are too
     many false positives for it to be useful.
   * Document workarounds for sun-java5-bin and sun-java6-bin in libx11-6.NEWS.
   * Strip all packages, not just the shared libs.

libx11 (2:1.1.1-1) experimental; urgency=low

   [ Michel Dänzer ]
   * libx11-dev Depends: libxcb-xlib0-dev, because x11.pc references xcb-xlib
     (closes: #410117).
 
   [ Julien Cristau ]
   * New upstream release.
   * Install upstream ChangeLog.
   * libx11-dev doesn't seem to need to depend on libxext-dev
     (closes: #366676).
   * Use dh_installman in debian/rules to replace ".so" links with symlinks.

2006

libx11 (2:1.1-2) experimental; urgency=low

   [ Josh Triplett ]
   * Include some upstream post-1.1 fixes in debian/patches:
     * "Bug #9153: Fix access to freed memory."
     * "Bug #9154: Always process an event for _XReadEvents, even if an error
        occurs"; fixes an assertion failure, first observed with xcompmgr.
     * "Debian bug #354315: Clarify return value in XGetWindowAttributes man
        page" (closes: 354315)
   * Fix override discrepancies: library packages go in libs, -dbg and -dev
     packages go in libdevel.  Fix for both the libx11 packages and the new
     libx11-xcb packages.

libx11 (2:1.1-1) experimental; urgency=low

   [ Josh Triplett, Jamey Sharp ]
   * New upstream version.
   * Add ourselves to Uploaders.
   * Forward-port patches:
     * 001_no_xkb_in_pc_file.diff: update
     * 003_recognize_glibc_2.3.2_locale_names.diff: update
     * 004_en_US.UTF-8_Compose_fix_Unicode_plane_1.diff: update
     * 005_Compose_fix_latin1_UTF8.diff: update
     * 010_manpage_suffixes.diff: delete, applied upstream
     * 012_ru_RU_UTF-8_XLC_LOCALE.diff: update
     * 014_add_Khmer_digraphs.diff: update
     * 015_russian_locale_alias.diff: update
     * 016_greek_polytonic_Compose.diff: update
     * 019_new_autoconf.diff: delete, applied upstream
     * 020_CVE-2006-5397.diff: delete, applied upstream
   * Stop registering /usr/X11R6/lib in /etc/ld.so.conf in the postinst;
     instead, deregister it if no libraries remain in it.  Remove deregistration
     in postrm, and remove now-unnecessary postrm.
   * Add Build-Depends on libxcb1-dev >= 0.9.92 and libxcb-xlib0-dev >= 0.9.92.
   * Remove Build-Depends not needed with Xlib/XCB: bigreqsproto, xcmiscproto,
     libxau-dev, and libxdmcp-dev.
   * libx11-dev has some unnecessary Depends, but other packages currently rely
     on them, so removal will wait until a later version.
   * Add library, -dev, and -dbg packages for new library libX11-xcb.  Modify
     rules to handle these new packages.
   * libX11-xcb Conflicts: libx11-6 (<< 2:1.1), since it requires a version with
     Xlib/XCB.
   * Add a NEWS.Debian to libx11-6, with Xlib/XCB information.
   * Add XS-Vcs-Git field.
   * Remove old upstream CVS information from package descriptions.
   * Reword package descriptions to stop calling Xlib "the" client interface.

libx11 (2:1.0.3-7) unstable; urgency=high

   * Grab patch from upstream git to fix CVE-2007-1667 (the patch included in
     2:1.0.3-6 was incomplete).  This closes: #414045.

libx11 (2:1.0.3-6) unstable; urgency=high

   * Add patch by Daniel Kobras <kobras@debian.org> to add more input
     validation to XInitImage(), to fix security issues (closes: #414045).

libx11 (2:1.0.3-5) unstable; urgency=high

   * Remove /usr/X11R6/lib from /etc/ld.so.conf in postinst if it's no longer
     needed, instead of adding it there.
   * Add patch 021_compose_fclose.diff to fix file descriptor leak when a
     Compose file uses the "include" directive.  Urgency high because this bug
     can have security implications.
   * Add myself to Uploaders, and remove Fabio and Branden with their
     permission.

libx11 (2:1.0.3-4) unstable; urgency=low

   * Some patches got lost in the upgrade from 1.0.0 (2:1.0.0-9) to 1.0.3:
     - 015_russian_locale_alias.diff.  Closes: #368655.
       This aligns with the glibc russian definition of ru_RU.KOI8-R in
       /usr/share/locale/locale.alias.  Note that this only applies to
       Debian's glibc, see bug #62586 and glibc 2.2.5-4. Because of the
       constraint implosed by glibc in /usr/share/i18n/locales/ru_RU,
       we cannot likewise change ru and ru_RU away from ISO8859-5.
       They really should be using ru_RU.UTF-8 anyway.
     - 016_greek_polytonic_Compose.diff. Closes: #386471.
     - 017_FTBFS_makekeys.diff can be left out since it is applied in 1.0.3.

libx11 (2:1.0.3-3) unstable; urgency=high

   [ Julien Cristau ]
   * Urgency high for security bugfix (CVE-2006-5397).
   * Add patch 020_CVE-2006-5397 to fix double fopen() of compose file
   (closes: #398460).  Thanks to Stefan Fritsch for the report.

libx11 (2:1.0.3-2) unstable; urgency=low

   [ Denis Barbier ]
   * Drop --enable-loadable-i18n from confflags, it does not work with 1.0.3.
     Closes: #392567  Thanks Jérôme Marant

libx11 (2:1.0.3-1) unstable; urgency=low

   [ David Nusinow ]
   * New upstream release
   * Dump obsolete patch 10 for manpage fix and 13 for setuid fix
   * Run dh_install with --list-missing
   * Remove obsolete patch 011
   * Bump debhelper compat to 5
   * Upstream fix allows building in gnu environments. Thanks Samuel
     Thibault, Robert Millan, and Michael Banck. Closes: #358708
   * Add 019_new_autoconf.diff to allow us to not break the server in
     horrendous ways using newer versions of autoconf. Thanks to Jamey Sharp
     for pointing this patch out in upstream HEAD.
   * Add 010_manpage_suffixes.diff to dynamically generate the internal manpage
     section using __libmansuffix__ the same way the actual file suffix is
     generated, so that they match and lintian becomes useful again here
   * Add pre-depends on x11-common for the -dev package
 
   [ Denis Barbier ]
   * Sync patches:
     - 003_recognize_glibc_2.3.2_locale_names.diff
     - 005_Compose_fix_latin1_UTF8.diff
     - 006_tailor_pt_BR.UTF-8_Compose.diff
     - 014_add_Khmer_digraphs.diff
   * Add 014_add_Khmer_digraphs.diff.  Khmer keyboards have to generate
     several characters with a single keystroke, so define them in
     en_US.UTF-8/Compose.  They will be added later to all UTF-8 files.
     Thanks Paul Wise.  (closes: #355957)
   * Add support for Khmer locale in 003_recognize_glibc_2.3.2_locale_names.diff
 
   [ Andres Salomon ]
   * Test for obj-$(DEB_BUILD_GNU_TYPE) before creating it during build;
     idempotency fix.
 
   [ Drew Parsons ]
   * dbg package has priority extra.

libx11 (2:1.0.0-9) unstable; urgency=low

   * Add 015_russian_locale_alias.diff.  Locale alias for russian was incorrect,
     it should be ru_RU.KOI8-R as in glibc locale.alias.  Thanks Andrei Lahun.
     (closes: #368655)
   * Add 016_greek_polytonic_Compose.diff.  Add compose sequences with the
     right breathing signs U0313/U0314 to el_GR.UTF-8/Compose.
     Thanks Jan Willem Stumpel.  (closes: #386471)
   * Add 017_FTBFS_makekeys.diff.  Fix a FTBFS when compiling with
     x11proto-core-dev >= 7.0.3, backported from upstream.
     Thanks Goswin von Brederlow.  (closes: #387133)

libx11 (2:1.0.0-8) unstable; urgency=low

   * Add 18_nonlinux.diff to fix building in gnu environments. Thanks Samuel
     Thibault, Robert Millan, and Michael Banck. Closes: #358708

libx11 (2:1.0.0-7) unstable; urgency=high

   * Security update. Fix for setuid privledge escalation vulernabilities.
     See http://lists.freedesktop.org/archives/xorg/2006-June/016146.html for
     the full advisory.
   * Bump standards version to 3.7.2.0

libx11 (2:1.0.0-6) unstable; urgency=low

   * Remove libx11-dev's dependencies on libxi-dev and libxkbfile-dev. Add a
     dependency on x11proto-input-dev instead. This should break some circular
     dependencies. Thanks go yet again to Kurt Roeckx.

libx11 (2:1.0.0-5) unstable; urgency=low

   * Upload to unstable

libx11 (2:1.0.0-4) experimental; urgency=low

   [ David Nusinow ]
   * Remove libx11-dev versioned dependency on libxext-dev. This was preventing
     bootstrapping of libxext. Thanks Eugene Konev.
 
   [ Denis Barbier ]
   * Add Build-Depends: x11proto-input-dev, quilt.  Thanks Kurt Roeckx.
     (Closes: #356918).

libx11 (2:1.0.0-3) experimental; urgency=low

   [ David Nusinow ]
   * Stop using the xsfbs autoreconf script. The main beneft of using quilt in
     keeping the patches separate is for submitting things upstream and porting
     our changes between upstream releases. Keeping the automatically generated
     build system stuff in patches also doesn't fall under this use category.
   * Make libx11-6 conflict with xlibs-data. Thanks Kurt Roeckx.
     (closes: #356415)

libx11 (2:1.0.0-2) experimental; urgency=low

   [ David Nusinow ]
   * Properly install all the contents of /usr/lib/X11/locale. Thanks Zephenia
     E. Hull.
   * Provide versioned build-depends on the X libs. Thanks Kurt Roeckx.
     (closes: #354161)
   * Provide libx11-dev dependencies on libxdmcp-dev.
     Thanks Kurt Roeckx. (closes: #354167)
   * Add a bunch of depends to libx11-dev from the monolith. Thanks Eugene
     Konev for the pointer.
   * Add 001_no_xkb_in_pc_file.diff because we don't need x11proto-input-dev.
     Thanks Eugene Konev.
 
   [ Eugene Konev ]
   * Move locale data in separate libx11-data package. Make libx11-6 depend
     on it.
   * libx11-6.install.in? Huh? Replaced with libx11-6.install
   * Add real binary-indep.
   * Add patches from 6.9:
     - 002_arm_abi_brain_damage.diff
     - 003_recognize_glibc_2.3.2_locale_names.diff
     - 004_en_US.UTF-8_Compose_fix_Unicode_plane_1.diff
     - 005_Compose_fix_latin1_UTF8.diff
     - 006_tailor_pt_BR.UTF-8_Compose.diff
     - 007_iso8859-15_Compose_fix.diff
     - 008_remove_ko_Compose.diff
     - 009_iso8859-15_Compose_Eurosign.diff
     - 012_ru_RU_UTF-8_XLC_LOCALE.diff
   * Adjust Pre-depends for libx11-6. Remove depends on x11-common from
     libx11-dbg and libx11-dev as they depend on libx11-6 anyway.
   * Run dh_install with --fail-missing if there is checkinstall in
     DEB_BUILD_OPTIONS
   * Resurrect libx11-6.post{inst,rm}.in. Add genscripts to build target's
     dependencies.
   * Fix libx11-6.preinst.in to include shelllib and define appropriate vars.
   * Grab fixes for manpages section from Xorg CVS
     - 010_manpages_fix.diff
   * Grab ubuntu patch to support XLOCALELIBDIR separate from XLOCALEDIR
     - 011_stolen_from_ubuntu_xlocalelibdir.diff
   * Add --enable-loadable-i18n to confflags.
   * Use new xsfbs-autoreconf.mk to do autoreconfing.

2005

libx11 (2:1.0.0-1) experimental; urgency=low

   * First upload to Debian
   * Remove versioned build-dep on x11proto-core-dev, since the first package
     we'll be uploading will be versioned properly for us
   * Remove patch dir as the patch has been incorporated by upstream

libx11 (1:6.2.1+cvs.20050722-8) breezy; urgency=low

   * Fix non-UTF-8 locales by fixing generation of compose.dir, locale.alias,
     and locale.dir in nls/ (closes: Ubuntu#13724).

libx11 (1:6.2.1+cvs.20050722-7) breezy; urgency=low

   * Move man pages back to section 3 (closes: Ubuntu#16290).

libx11 (1:6.2.1+cvs.20050722-6) breezy; urgency=low

   * Add libx11-dev Build-Depends on x11proto-kb-dev, so we get XKBstr.h, which
     makes XKBlib.h usable.
   * Add foo_t and TRANS_CLIENT defines to Xtrans users; thanks Isaac Richards
     for the catch (closes: Ubuntu#12052).

libx11 (1:6.2.1+cvs.20050722-5) breezy; urgency=low

   * Add x-common Pre-Depends to libx11-6, as we ship stuff in
     /usr/lib/X11.

libx11 (1:6.2.1+cvs.20050722-4) breezy; urgency=low

   * Fix search path for libXcursor.
   * Add :s to compose.dir to get composition working in apps which use the
     default X input method (closes: Ubuntu#12184).

libx11 (1:6.2.1+cvs.20050722-3) breezy; urgency=low

   * Make ErrDes.c and StrKeysym.c look for XKEYSYMDB and XERRORDB, not
     KEYSYMDB and ERRORDB, with the pleasant side-effect that they look
     directly in /usr/share/X11, not /usr/lib/X11, so we can throw the cheesy
     symlinks away.  This fixes some corner cases in hoary upgrades.

libx11 (1:6.2.1+cvs.20050722-2) breezy; urgency=low

   * Move locale data back to /usr/share and libraries to /usr/lib.  XlcDL.c
     and lcFile.c hacked to accommodate this, as well as configure.ac.  This
     fixes all the locale problems, AFAICT. (closes: Ubuntu#12142)

libx11 (1:6.2.1+cvs.20050722-1) breezy; urgency=low

   * Fix locales harder: add the old loadable locale modules back.
   * Although architecture-independent locale data has been moved to
     /usr/lib/X11/locale because of limitations in the path-parsing code.
     Argh!
   * Bump Build-Depends on x11proto-core-dev to today's CVS; -D_XOPEN_SOURCE
     begone!

libx11 (1:6.2.1+cvs.20050711-1) breezy; urgency=low

   * New CVS snapshot, incorporating patch #086 from the monolith.

libx11 (1:6.2.1+cvs.20050615-5) breezy; urgency=low

   * Bump libx11-6 -> xlibs-data Conflicts/Replaces to -34; Tollef's -33 did
     not change this.

libx11 (1:6.2.1+cvs.20050615-4) breezy; urgency=low

   * Make Build-Depends and Depends on x11proto-core-dev explicitly >=
     6.8.99.8-1 (hi LaMont!).
   * Add symlinks to X{Error,KeySym}DB from /usr/{X11R6/,}lib/X11.  Bump
     Conflicts on xlibs-data up to -33.  Add symlinks to locale data in
     /usr/{X11R6,}lib/X11 (closes: Ubuntu#12081).

libx11 (1:6.2.1+cvs.20050615-3) breezy; urgency=low

   * Add missing build-depends on:
     - pkg-config, x11proto-kb-dev, x11proto-input-dev

libx11 (1:6.2.1+cvs.20050615-2) breezy; urgency=low

   * Move Build-Depends-Indep to Build-Depends to fix FTBFSs.

libx11 (1:6.2.1+cvs.20050615-1) breezy; urgency=low

   * First libx11 release.
     + XCB support removed for now.