This release contains the fix for CVE-2023-5367 in today's security advisory: https://lists.x.org/archives/xorg-announce/2023-October/003430.html Xwayland does not support multiple protocol screens (Zaphod) and is thus not affected by CVE-2023-5380.
Additionally, there is a change in the default behaviour of Xwayland: Since version 23.2.0 Xwayland (via liboeffis) automatically tries to connect to the XDG Desktop Portal's RemoteDesktop interface to obtain the EI socket. That socket is used to send XTest events to the compositor. However, the connection to the session-wide Portal is unsuitable when Xwayland is running in a nested compositor. Xwayland cannot tell whether it's running on a nested compositor and to keep backwards compatibility with Xwayland prior to 23.2.0, Xwayland must now be started with "-enable-ei-portal" to connect to the portal. Compositors (who typically spawn Xwayland rootless) must now pass this option to get the same behaviour as 23.2.x. Finally, Xwayland now uses libbsd-overlay instead of libbsd. Jeffy Chen (1): glamor: xv: Fix invalid accessing of plane attributes for NV12 José Expósito (1): xwayland/glamor/gbm: Set GBM_BO_USE_LINEAR if only LINEAR modifier is supported Konstantin (1): glamor: fixes GL_INVALID_ENUM errors on ES if there is no quads Michel Dänzer (1): xwayland/present: Handle NULL window_priv in xwl_present_cleanup Olivier Fourdan (3): xwayland: Add an option to enable EI portal support xwayland: Give up on EI on setup failure xwayland: Cancel the EI disconnect timer when freed Peter Hutterer (2): Xi/randr: fix handling of PropModeAppend/Prepend Bump version to 23.2.2 Sam James (1): Switch to libbsd-overlay git tag: xwayland-23.2.2 https://xorg.freedesktop.org/archive/individual/xserver/xwayland-23.2.2.tar.xz SHA256: 9f7c0938d2a41e941ffa04f99c35e5db2bcd3eec034afe8d35d5c810a22eb0a8 xwayland-23.2.2.tar.xz SHA512: f5b319fdace7d7c078544730ecd26afeb63b1a0c779fb097455147945df85af32d9e91501ebdb70209d48e8a3ead3b23be31e9d5118358ac17e699abb4b6ac07 xwayland-23.2.2.tar.xz PGP: https://xorg.freedesktop.org/archive/individual/xserver/xwayland-23.2.2.tar.xz.sig
signature.asc
Description: PGP signature