This release contains an additional fix for CVE-2025-49176 from June 17
security advisory: https://lists.x.org/archives/xorg/2025-June/062055.html
Thanks to Peter Harris for pointing this out.
Olivier Fourdan (2):
os: Check for integer overflow on BigRequest length
Bump version to 24.1.8
git tag: xwayland-24.1.8
https://xorg.freedesktop.org/archive/individual/xserver/xwayland-24.1.8.tar.xz
SHA256: c8908d57c8ed9ceb8293c16ba7ad5af522efaf1ba7e51f9e4cf3c0774d199907
xwayland-24.1.8.tar.xz
SHA512:
417498baa87e6bfc11a778d31788a2b2d381efa08f2ac8308cfd8b1828ea62ba1da43542f798f124c25b51e8229ad1bdffc252462c0abf51be8fa0337f26d7e2
xwayland-24.1.8.tar.xz
PGP:
https://xorg.freedesktop.org/archive/individual/xserver/xwayland-24.1.8.tar.xz.sig
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_0x14706DBE1E4B4540.asc
Type: application/pgp-keys
Size: 2988 bytes
Desc: OpenPGP public key
URL:
<https://lists.x.org/archives/xorg-announce/attachments/20250618/26cac7e7/attachment-0001.key>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature.asc
Type: application/pgp-signature
Size: 203 bytes
Desc: OpenPGP digital signature
URL:
<https://lists.x.org/archives/xorg-announce/attachments/20250618/26cac7e7/attachment-0001.sig>