[ANNOUNCE] xwayland 22.1.6

Peter Hutterer peter.hutterer at who-t.net
Wed Dec 14 03:11:33 UTC 2022

This release fixes 6 recently reported security vulnerabilities in
various extensions. The CVE numbers are:
CVE-2022-46340, CVE-2022-46341, CVE-2022-46342, CVE-2022-46343,
CVE-2022-46344, and CVE-2022-4283

For details on the these issues please see the security advisory here:

Peter Hutterer (8):
      Xtest: disallow GenericEvents in XTestSwapFakeInput
      Xi: disallow passive grabs with a detail > 255
      Xext: free the XvRTVideoNotify when turning off from the same client
      Xext: free the screen saver resource when replacing it
      Xi: return an error from XI property changes if verification failed
      Xi: avoid integer truncation in length check of ProcXIChangeProperty
      xkb: reset the radio_groups pointer to NULL after freeing it
      Bump to version 22.1.6

git tag: xwayland-22.1.6

SHA256: 9e4243f03d00fd12435aee39db4ce1071fc4786ffc52547e8a07a65ab55b0e7c  xwayland-22.1.6.tar.xz
SHA512: a78f44f14a6c1e25afbf245c5c757a253f0607afdc80c8b852cf6f810247566d1cc17b63d4442a21d8e69bdb696faf1014438ad98a977fbed9a11b9c5b85e0a4  xwayland-22.1.6.tar.xz
PGP:  https://xorg.freedesktop.org/archive/individual/xserver/xwayland-22.1.6.tar.xz.sig

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 195 bytes
Desc: not available
URL: <https://lists.x.org/archives/xorg-announce/attachments/20221214/90be19e7/attachment.sig>

More information about the xorg-announce mailing list