This release contains the fixes for the issues reported in today's security 
advisory:

https://lists.x.org/archives/xorg-announce/2026-June/003702.html

  - Font Alias Stack-based Buffer Overflow
  - XSYNC Use-After-Free in miSyncDestroyFence()
  - XKB Key Types Stack-based Buffer Overflow
  - XKB SetMap Request Stack-based Buffer Overflow
  - XSYNC Use-After-Free in FreeCounter()
  - XSYNC Use-After-Free in SyncChangeCounter()
  - GLX ChangeDrawableAttributes Out-Of-Bounds Read/Write
  - CreateSaverWindow Use-After-Free Information Disclosure

Additionally, it contains a number of other various fixes from the stable
xwayland-24.1 branch.

Mikhail Dmitrichenko (2):
      xkb: fix incorrect size check when growing doodads in a section
      xkb: fix potential buff overflow in XkbVModIndexText for XkbCFile format

Peter Hutterer (15):
      Xi: add missing gesture grab type checks in ProcXIPassiveUngrabDevice
      xkb: Fix out-of-bounds array access in _CheckSetShapes()
      xkb: Fix off-by-one in color index validation in _CheckSetGeom()
      xkb: Fix off-by-one and NULL dereferences in _CheckSetOverlay()
      xkb: Add bounds check for action data in CheckKeyActions()
      present: actually return the created notifies
      glx: reject negative size in FeedbackBuffer and SelectBuffer requests
      sync: fix deletion of counters and fences
      sync: restart trigger list iteration in SyncChangeCounter after 
TriggerFired
      xkb: reject key types with num_levels exceeding XkbMaxShiftLevel
      xkb: clamp nMaps to mapWidths buffer size in CheckKeyTypes
      glx: fix reversed length check in ChangeDrawableAttributes
      saver: re-fetch screen private after CheckScreenPrivate in 
CreateSaverWindow
      dix: increase XLFDMAXFONTNAMELEN to match libXfont2's MAXFONTNAMELEN
      Bump version to 24.1.11

git tag: xwayland-24.1.12

https://xorg.freedesktop.org/archive/individual/xserver/xwayland-24.1.12.tar.xz
SHA256: 6df02c511b92c1b9848734d9d1b03a4c24f8375ba3cada44e9684a21b5f78e21  
xwayland-24.1.12.tar.xz
SHA512: 
b4ee41761c2caa7332573be07d9143b60015bb4a7910c90b6ae079dde0a1bf6b0b4773ff4e6fba48279cdee83b4de5eb4a19b9369b5753e4147b94fa2deece96
  xwayland-24.1.12.tar.xz
PGP:  
https://xorg.freedesktop.org/archive/individual/xserver/xwayland-24.1.12.tar.xz.sig

Attachment: signature.asc
Description: PGP signature

Reply via email to