Below is a recent extract from the XFree86 change log for the 4.2 branch. The full change log can be found in the XFree86 source tree (xc/programs/Xserver/hw/xfree86/CHANGELOG).
XFree86 development code can be accessed directly from the CVS repository. Information about this can be found on our CVS page.
XFree86 4.2.1.3 (XX Xxxxxxxx 200X)
XFree86 4.2.1.2 (29 February 2004)
723. Some more font path checks.
722. Fix font alias overrun.
721. Fix problems with earlier fix (713 below) to intermittent XDarwin
crash when changing cursors with dual processors (Torrey T. Lyons).
XFree86 4.2.1.1 (18 October 2002)
720. Fix black cursor images on Mac OS X 10.2.2 (Joseph Maurer).
719. Fix XDarwin rootless crash when window resizing with complex bit
gravity (Greg Parker).
718. Xdm patches: realloc usage, zero malloc()ated memory, enable
/dev/urandom on NetBSD 1.4 and later (#5345, Mike A. Harris,
#5401, Matthias Scheler)
717. [SECURITY] Implement LocalClientCred() to return the credentials
of local clients connected through Unix domain sockets on systems
that have the required support (for now recent Linux, FreeBSD >= 4.6,
OpenBSD >= 3.0 are implemented), and use that in ShmAttach() to grant
access to the client. When client credentials are not available,
require world accessibility. (Matthieu Herrb).
716. BIOSDisplay was always getting forced to R128_BIOS_DISPLAY_FP on cards
that might have a FP attached. This was wrong if a CRT is being used
instead, and caused both sets of DPMS routines to get used, which
resulted in a SEGV on CloseDisplay(), as well as making DPMS not
work for a CRT (Stuart Anderson).
XFree86 4.2.1 (03 September 2002)
715. [SECURITY] Fix an Xlib problem that made it possible to load arbitrary
code into privileged clients.
714. Fix i810_free_page() and i830_free_page() for DRI kernel modules so
that later 2.4.x kernels are supported.
XFree86 4.2.0.1 (21 August 2002)
713. Fix intermittent XDarwin crash when changing cursors on dual processor
machines (Torrey T. Lyons).
712. Fix Finder warnings about XDarwin plist format on Jaguar
(Torrey T. Lyons).
711. Fix XDarwin build issues on Jaguar (Sean Fagan).
710. When using the vesa driver and the DisplaySize option the server
would crash with a floating point exception due to a divide by zero
in miscreeninit() (#5298, Mike A. Harris).
709. Updated patch from head to fix problem described in #5244
(freed memory being deref'd in xaw) (jik@kamens.brookline.ma.us)
708. The function MoveLine in lib/Xaw/TextAction.c sometimes attempts to
read uninitialized memory when hit ctrl-N in a Text widget to move to
the next line (#5245, Johnathan Kamens).
707. Close XDarwin rootless windows properly for Jaguar compatibility
(Greg Parker).
706. Build libXt as a flat namespace image on Darwin (Torrey T. Lyons).
705. Install the bitmap file xc/programs/bitmap/Stipple as Stippler on file
systems that are not case sensitive (Torrey T. Lyons).
704. Build with libcurses on Darwin for forward compatibility
(Jordan Hubbard).
703. [SECURITY] MIT-SHM update: try to avoid using SHM segments that the
client user doesn't have sufficient privileges to access
(Roberto Zunino, Matthieu Herrb).
702. Fix a problem related to reserving the overlay key in the default
colormap in 24+8 mode. This caused some clients using the 8-bit
visuals to fail (David Dawes).
701. [SECURITY] Zlib error handling fix (Mark Adler).
700. Put back XDarwin's byte-ordering fix for reading keymappings on
Darwin x86 that was inadvertently dropped (Rob Braun).
699. Fix for `hostname` issue on Linux (Marc La France).
698. Fix startx script for ksh (Philip B. Bruce).
697. Fix Emulate3Buttons for wsmouse protocol on NetBSD and OpenBSD
(Matthieu Herrb).
696. Temporary workaround for IA-64 (Marc La France).
695. Fix SIGSEGV when printing modes that have no flags (Marc La France).
694. Fix an unresolved symbol in libGLU.so that shows up when building it
with gcc-3 (David Dawes).
693. Fix incorrect symbol prefixing with Xlib's i18n modules on Solaris,
and fix invalid code caused by a memcpy() macro being split by a
directive (Keith Packard, David Dawes, #5150, Sami Farin).
692. Don't try to print mode names when NULL (David Dawes).
691. Revert the ATI driver's composite sync default to off (Marc La France).
XFree86 4.2.0 (18 January 2002)
690. Workaround for hardware bug that prevents older ATI 3D Rage adapters from
being assigned to XF86Config device sections (Marc La France).
XFree86 4.1.99.7 (17 January 2002)
689. Fix bug introduced in snapshot 4.1.99.5 causing XDarwin's PseudoramiX
extension to always be disabled (Torrey T. Lyons).
688. Disable the pipe check for stdout/stderr that was added in the previous
snapshot because it looks like it might cause too many problems
(David Dawes).
687. Update the Arabic (ar) XKB keyboard map (#5145, Arabeyes team).
686. Update the Russian (ru) XKB keyboard map, adding two new variants
("typewriter" and "phonetic") (#5143, Ivan Pascal).
685. Remove the lt_a and lt_p XKB keyboard maps (#5139, Nerijus Baliunas).
684. Disable the DRI and print a warning message for Radeon 8500 cards
until they are supported (Kevin Martin).
683. Properly detect when no BIOS is present on Radeon cards (#4978,
Charles Hannum, Kevin Martin).
682. Delay before restoring VGA registers for Radeons to "fix" VT switch
problems (Kevin Martin).
681. Add new PCI IDs from ATI (Kevin Martin).
680. Update the Xinstall.sh script to create version compatibility links for
shared freetype libraries when needed (David Dawes).
679. Update Freetype2 shared library versions to match the versions libtool
generates (Keith Packard).
678. Doc updates (lots of people, includes #5142, 5144)
XFree86 4.1.99.6 (14 January 2002)
677. Change the default verbosity level for stderr from 1 to 0 (David Dawes).
676. Set the X server's stderr to non-blocking for non-root users
(David Dawes).
675. Don't allow the X server to start when stdout or stderr is a pipe for
non-root users (David Dawes).
674. Add OpenGL man pages.
673. Avoid duplicate symbol problem with xkbevd on some platform (#A.769,
Nicholas Leippe).
672. Updated Ukranian XKB symbols file (#A.764, Andriy Rysin).
671. Fix ELF loader for ARM architecture (#5138, Phil Blundell and
Adam C. Powell IV).
670. Fix a race condition in the Linux kernel DRM code (#5136,
Arjan van de Ven).
669. Fix DGA support in the s3virge driver (#5135, Kevin Brosius).
668. Add XvBskew, XvRskew to adjust skew values for centering of an
Xvideo window for the trident driver (Alan Hourihane).
667. Fix loader for Motorola 68k machines (Alan Hourihane).
666. Fix very high resolution modes (e.g. 1600x1200@16bpp) in the
Trident driver (Alan Hourihane).
665. -
664. Quick hack to allow GLX to be included in non-XFree86 servers
(Marc La France).
663. More ROP_NEEDS_SOURCE fixes for Savage chipsets (Egbert Eich).
662. Improvements to the SiS driver which should fix a lot of the 630
issues (Thomas Winischhofer).
661. In XDarwin IOKit mode, ignore screens sized 1x1 (Torrey T. Lyons).
660. Some missing QNX fixes (#5121, Frank Liu).
659. Update XDarwin man page and usage message for XFree86 4.2.0. Add
XFree86 man page to XDarwin distribution (Torrey T. Lyons).
658. Add bn_BD.UTF-8 to locale.dir (Taneem Ahmed).
657. Fix luit not dropping priviledges when run with the -c flag (#5134,
Juliusz Chroboczek).
656. Fix unresolved symbol and loader symbol registration problems in the
i810 driver that were introduced with the i830 support (David Dawes,
Abraham vd Merwe).
655. Fix sparklies problem for other Trident *BladeXP chipsets
(Alan Hourihane).
654. In XDarwin IOKit mode, ignore screens that can not provide the requested
size, depth, or refresh rate instead of generating a fatal error
(Torrey T. Lyons).
XFree86 4.1.99.5 (7 January 2002)
653. Fix some typos in the DRI README (#A.757, Andreas Mohr).
652. xon.sh path setting from 3.3.6 (#A.756, Marc Herbert).
651. Fix a problem with the Radeon driver that was causing the sync polarity