brndnmtthws/conky v1.24.1 on GitHub

Conky v1.24.1

This patch release focuses on stability fixes after v1.24.0, including safer X11 mouse-event propagation, an APCUPSD NIS parser hardening fix, HTTP backend thread-safety fixes, and several corrections to Linux, exec, layout, and network text objects.

Full Changelog: v1.24.0...v1.24.1

Breaking Changes

None.

Highlights Since v1.24.0

Security

Hardened APCUPSD NIS response parsing so malformed or tampered length prefixes cannot be passed to recv() as oversized reads. This fixes GHSA-4577-mm6h-jxmx for users of ${apcupsd ...} and related APCUPSD objects.

X11 and Mouse Events

Fixed cursor event stealing in X11 mouse-event handling, including Openbox and Fluxbox compatibility.
Avoided capturing root-window input unless lua_mouse_hook needs it, reducing interference with the window manager.
Restored and tightened root enter/leave handling and event propagation edge cases for XI2 events.
Fixed solid background painting when an alpha own_window_colour is requested but no ARGB visual is available.
Fixed BUILD_LUA_CAIRO_XLIB configuration so Lua Cairo Xlib support is exposed correctly.

Runtime and Output Stability

Serialized HTTP page publication between the draw thread and libmicrohttpd worker threads, preventing heap corruption and hangs during concurrent requests or config reloads.
Discarded stderr from ${exec} commands so noisy commands do not flood the terminal or system journal.
Made execbar, execgauge, and execgraph silently return 0.0 while their callback has not produced output yet, matching the plain exec-family behavior.

Linux, Layout, and Text Objects

Fixed ${top cpu} in one-shot runs by taking a priming CPU sample before the only rendered frame.
Fixed offline Linux CPU cores reporting stale usage or shifting other cores into the wrong slots.
Removed a no-op 100 ms sleep from Linux CPU updates.
Fixed $distribution parsing for unquoted /etc/os-release values and /proc/version fallback quirks.
Fixed net-stat bar parsing so interface names and bar dimensions work in either order.
Fixed window sizing for graph/bar/gauge lines that combine tall elements with ${voffset}.

brndnmtthws/conky v1.24.1
on GitHub