Thank you for your contribution to Debian.
Accepted:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Wed, 26 Feb 2025 10:22:59 +0100
Source: xwayland
Architecture: source
Version: 2:24.1.6-1
Distribution: unstable
Urgency: medium
Maintainer: Debian X Strike Force <debian-x@lists.debian.org>
Changed-By: Emilio Pozuelo Monfort <po...@debian.org>
Closes: 1098907
Changes:
xwayland (2:24.1.6-1) unstable; urgency=medium
.
* New upstream release. Fixes:
- CVE-2025-26594: use-after-free of the root cursor
- CVE-2025-26595: buffer overflow in XkbVModMaskText
- CVE-2025-26596: heap overflow in XkbWriteKeySyms
- CVE-2025-26597: buffer overflow in XkbChangeTypesOfKey
- CVE-2025-26598: out-of-bounds write in CreatePointerBarrierClient
- CVE-2025-26599: use of uninitialized pointer in compRedirectWindow
- CVE-2025-26600: use-after-free in PlayReleasedEvents
- CVE-2025-26601: use-after-free in SyncInitTrigger
(Closes: #1098907).
Checksums-Sha1:
b50ad66e2119298104e4caa0f368159871c61b57 2278 xwayland_24.1.6-1.dsc
8425074a39f44831dae96a9db41ad31f824c2eca 1302600 xwayland_24.1.6.orig.tar.xz
b98edc196a9e053e6797e1b837c33cd06b606458 34952 xwayland_24.1.6-1.debian.tar.xz
f9146c1c337734b7af0a7cee41e8ba703a000a85 9216
xwayland_24.1.6-1_source.buildinfo
Checksums-Sha256:
25f96591e3c3fe674ab830ef0557141658fb14cf91f56defb33ac3420435e368 2278
xwayland_24.1.6-1.dsc
737e612ca36bbdf415a911644eb7592cf9389846847b47fa46dc705bd754d2d7 1302600
xwayland_24.1.6.orig.tar.xz
fcfc0c634b7aaaa059c2e9337da2330c6b5c20b084009494d144c34bac9715ef 34952
xwayland_24.1.6-1.debian.tar.xz
f2077a6cb89fbdd88cdc922eade5eccb9df07092b368fe1280ad0f3a7fdc0600 9216
xwayland_24.1.6-1_source.buildinfo
Files:
d2be53f92046e2123f816573e3325e80 2278 x11 optional xwayland_24.1.6-1.dsc
78067c218323fe2a496ca5f2145fe7ab 1302600 x11 optional
xwayland_24.1.6.orig.tar.xz
4f98a58befad72ddbaba428972feca2b 34952 x11 optional
xwayland_24.1.6-1.debian.tar.xz
08d02b2306ff001c9c68639c01dad006 9216 x11 optional
xwayland_24.1.6-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=RbOs
-----END PGP SIGNATURE-----
pgpZ2NrCgJYVT.pgp
Description: PGP signature
