This release contains the fixes for the issues reported in today's security advisory:
https://lists.x.org/archives/xorg-announce/2026-June/003702.html - Font Alias Stack-based Buffer Overflow - XSYNC Use-After-Free in miSyncDestroyFence() - XKB Key Types Stack-based Buffer Overflow - XKB SetMap Request Stack-based Buffer Overflow - XSYNC Use-After-Free in FreeCounter() - XSYNC Use-After-Free in SyncChangeCounter() - GLX ChangeDrawableAttributes Out-Of-Bounds Read/Write - CreateSaverWindow Use-After-Free Information Disclosure Additionally, it contains a number of other various fixes from the stable xwayland-24.1 branch. Mikhail Dmitrichenko (2): xkb: fix incorrect size check when growing doodads in a section xkb: fix potential buff overflow in XkbVModIndexText for XkbCFile format Peter Hutterer (15): Xi: add missing gesture grab type checks in ProcXIPassiveUngrabDevice xkb: Fix out-of-bounds array access in _CheckSetShapes() xkb: Fix off-by-one in color index validation in _CheckSetGeom() xkb: Fix off-by-one and NULL dereferences in _CheckSetOverlay() xkb: Add bounds check for action data in CheckKeyActions() present: actually return the created notifies glx: reject negative size in FeedbackBuffer and SelectBuffer requests sync: fix deletion of counters and fences sync: restart trigger list iteration in SyncChangeCounter after TriggerFired xkb: reject key types with num_levels exceeding XkbMaxShiftLevel xkb: clamp nMaps to mapWidths buffer size in CheckKeyTypes glx: fix reversed length check in ChangeDrawableAttributes saver: re-fetch screen private after CheckScreenPrivate in CreateSaverWindow dix: increase XLFDMAXFONTNAMELEN to match libXfont2's MAXFONTNAMELEN Bump version to 24.1.11 git tag: xwayland-24.1.12 https://xorg.freedesktop.org/archive/individual/xserver/xwayland-24.1.12.tar.xz SHA256: 6df02c511b92c1b9848734d9d1b03a4c24f8375ba3cada44e9684a21b5f78e21 xwayland-24.1.12.tar.xz SHA512: b4ee41761c2caa7332573be07d9143b60015bb4a7910c90b6ae079dde0a1bf6b0b4773ff4e6fba48279cdee83b4de5eb4a19b9369b5753e4147b94fa2deece96 xwayland-24.1.12.tar.xz PGP: https://xorg.freedesktop.org/archive/individual/xserver/xwayland-24.1.12.tar.xz.sig
signature.asc
Description: PGP signature
