From 460d0ebf95e0197d36a5b5812aa01d3dbffbeca9 Mon Sep 17 00:00:00 2001 From: Bernd Kuhls Date: Tue, 14 Apr 2026 18:34:24 +0200 Subject: [PATCH] package/x11r7/xwayland: security bump version to 24.1.10 https://lists.x.org/archives/xorg-announce/2026-April/003679.html Updated license hash due to upstream commits: https://gitlab.freedesktop.org/xorg/xserver/-/commit/e5c6a5ab905e0158ec22877b4117f10bef6e4140 https://gitlab.freedesktop.org/xorg/xserver/-/commit/89f82cce4a4ca480501c130231968a72cafa952d Fixes the following CVEs: * CVE-2026-33999: XKB Integer Underflow in XkbSetCompatMap() * CVE-2026-34000: XKB Out-of-bounds Read in CheckSetGeom() * CVE-2026-34001: XSYNC Use-after-free in miSyncTriggerFence() * CVE-2026-34002: XKB Out-of-bounds read in CheckModifierMap() * CVE-2026-34003: XKB Buffer overflow in CheckKeyTypes() Signed-off-by: Bernd Kuhls Signed-off-by: Julien Olivain (cherry picked from commit 40f8603e6a3c1c027ee80073a25a5853e03eb822) Signed-off-by: Thomas Perale --- package/x11r7/xwayland/xwayland.hash | 8 ++++---- package/x11r7/xwayland/xwayland.mk | 2 +- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/package/x11r7/xwayland/xwayland.hash b/package/x11r7/xwayland/xwayland.hash index 0d1df29b43..ba84d20b9f 100644 --- a/package/x11r7/xwayland/xwayland.hash +++ b/package/x11r7/xwayland/xwayland.hash @@ -1,6 +1,6 @@ -# From https://lists.x.org/archives/xorg/2025-October/062148.html -sha256 f297af27a84508db9b80d1cbbcc69c3801da38eb64c72f3b5b50f582459afdd0 xwayland-24.1.9.tar.xz -sha512 7438a572651dc77c1fd749879abccdc9a245c7b75143668d5561a8e99d41063f042a8eb3f9b931a2a12be1fc3cb9d197eee6794d0702a19e56c20f55acb35a26 xwayland-24.1.9.tar.xz +# From https://lists.x.org/archives/xorg-announce/2026-April/003679.html +sha256 459762be8ea046c94386687d77a87add6073868bee14f02913eafebb945b7aa0 xwayland-24.1.10.tar.xz +sha512 bceba1db7f4d7ac92d2b2a3c8f6f7ab0cc093f396fe89406f8dba25e32ffc3edfa552df246cbfb3b0708c1d28b3e179694d11870b063d5b8f9ab2db9fb861a8f xwayland-24.1.10.tar.xz # Locally calculated -sha256 abbb7969df55e399e91104ded4d0a20a1b67de7c01138e63d61b7ed4f81fec0d COPYING +sha256 c9f90a6669109aad6c9a7c3b46cc2c574221a73b792afa419336816b49da5c11 COPYING diff --git a/package/x11r7/xwayland/xwayland.mk b/package/x11r7/xwayland/xwayland.mk index 98bc74200a..8fa5260f47 100644 --- a/package/x11r7/xwayland/xwayland.mk +++ b/package/x11r7/xwayland/xwayland.mk @@ -4,7 +4,7 @@ # ################################################################################ -XWAYLAND_VERSION = 24.1.9 +XWAYLAND_VERSION = 24.1.10 XWAYLAND_SOURCE = xwayland-$(XWAYLAND_VERSION).tar.xz XWAYLAND_SITE = https://xorg.freedesktop.org/archive/individual/xserver XWAYLAND_LICENSE = MIT