UbuntuUpdates.org

Package "xwayland"

Name: xwayland

Description:

X server for running X clients under Wayland
Latest version: 2:22.1.1-1ubuntu0.15
Release: jammy (22.04)
Level: updates
Repository: main
Homepage: https://www.x.org/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "xwayland"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "xwayland" in Jammy

Repository Area Version
base main 2:22.1.1-1
security main 2:22.1.1-1ubuntu0.14

Changelog

Version: 2:22.1.1-1ubuntu0.15 2025-01-22 01:06:54 UTC

  xwayland (2:22.1.1-1ubuntu0.15) jammy; urgency=medium

  * Backport patch to fix busy-loop on inactive VT (LP: #2043517)

 -- Alessandro Astone <email address hidden> Fri, 22 Nov 2024 17:09:02 +0100
Source diff to previous version
2043517 gnome-shell on non-active VT busy-loops through libwayland-server.so (sometimes)

Version: 2:22.1.1-1ubuntu0.14 2024-10-30 13:06:59 UTC

  xwayland (2:22.1.1-1ubuntu0.14) jammy-security; urgency=medium

  * SECURITY UPDATE: Heap-based buffer overflow in _XkbSetCompatMap
    - debian/patches/CVE-2024-9632.patch: properly update size in
      xkb/xkb.c.
    - CVE-2024-9632

 -- Marc Deslauriers <email address hidden> Fri, 11 Oct 2024 10:40:32 -0400
Source diff to previous version
CVE-2024-9632 A flaw was found in the X.org server. Due to improperly tracked alloca ...

Version: 2:22.1.1-1ubuntu0.13 2024-04-10 02:06:46 UTC

  xwayland (2:22.1.1-1ubuntu0.13) jammy-security; urgency=medium

  * SECURITY REGRESSION: Avoid possible double-free
    - debian/patches/CVE-2024-31083-regression.patch:
      fix a regression caused for a double-free at the last
      changes fixed by CVE-2024-31083 (LP: #2060354)

 -- Leonidas Da Silva Barbosa <email address hidden> Mon, 08 Apr 2024 22:13:22 -0300
Source diff to previous version
CVE-2024-31083 User-after-free in ProcRenderAddGlyphs

Version: 2:22.1.1-1ubuntu0.12 2024-04-04 22:06:50 UTC

  xwayland (2:22.1.1-1ubuntu0.12) jammy-security; urgency=medium

  * SECURITY UPDATE: Heap buffer over read
    - debian/patches/CVE-2024-31080.patch: fixes byte
      swapping in replies in Xi/xiselectev.c.
    - CVE-2024-31080
  * SECURITY UPDATE: Heap buffer over read
    - debian/patches/CVE-2024-31081.patch: fixes byte
      swapping in replies in Xi/xipassivegrab.c.
    - CVE-2024-31081
  * SECURITY UPDATE: User-after-free
    - debian/patches/CVE-2024-31083.patch: fix recounting of glyphs
      during ProcRenderAddGlyphs in render/glyph.c.
    - CVE-2024-31083

 -- Leonidas Da Silva Barbosa <email address hidden> Tue, 02 Apr 2024 14:08:05 -0300
Source diff to previous version
CVE-2024-31080 A heap-based buffer over-read vulnerability was found in the X.org ser ...
CVE-2024-31081 A heap-based buffer over-read vulnerability was found in the X.org ser ...
CVE-2024-31083 User-after-free in ProcRenderAddGlyphs

Version: 2:22.1.1-1ubuntu0.11 2024-01-30 15:08:42 UTC

  xwayland (2:22.1.1-1ubuntu0.11) jammy-security; urgency=medium

  * SECURITY REGRESSION: memory leak due to incomplete fix (LP: #2051536)
    - debian/patches/CVE-2024-21886-3.patch: fix use after free in input
      device shutdown in dix/devices.c.

 -- Marc Deslauriers <email address hidden> Mon, 29 Jan 2024 07:51:17 -0500
CVE-2024-21886 Heap buffer overflow in DisableDevice


About   -   Send Feedback to @ubuntu_updates