This release fixes 6 recently reported security vulnerabilities in various extensions. The CVE numbers are: CVE-2022-46340, CVE-2022-46341, CVE-2022-46342, CVE-2022-46343, CVE-2022-46344, and CVE-2022-4283
For details on the these issues please see the security advisory here: https://lists.x.org/archives/xorg-announce/2022-December/003302.html Peter Hutterer (8): Xtest: disallow GenericEvents in XTestSwapFakeInput Xi: disallow passive grabs with a detail > 255 Xext: free the XvRTVideoNotify when turning off from the same client Xext: free the screen saver resource when replacing it Xi: return an error from XI property changes if verification failed Xi: avoid integer truncation in length check of ProcXIChangeProperty xkb: reset the radio_groups pointer to NULL after freeing it Bump to version 22.1.6 git tag: xwayland-22.1.6 https://xorg.freedesktop.org/archive/individual/xserver/xwayland-22.1.6.tar.xz SHA256: 9e4243f03d00fd12435aee39db4ce1071fc4786ffc52547e8a07a65ab55b0e7c xwayland-22.1.6.tar.xz SHA512: a78f44f14a6c1e25afbf245c5c757a253f0607afdc80c8b852cf6f810247566d1cc17b63d4442a21d8e69bdb696faf1014438ad98a977fbed9a11b9c5b85e0a4 xwayland-22.1.6.tar.xz PGP: https://xorg.freedesktop.org/archive/individual/xserver/xwayland-22.1.6.tar.xz.sig
signature.asc
Description: PGP signature