xwayland (2:24.1.13-1) unstable; urgency=medium

  * Team upload.
  * New upstream release.
    -  CVE-2026-55999: glamor Font Atlas Heap Buffer Overflow
    -  CVE-2026-56000: GLX contextTags Use-After-Free in CommonMakeCurrent
  * Drop quilt build-dep, we're using source format 3.0.
  * Update watch file to version 5.

 -- Emilio Pozuelo Monfort <pochu@debian.org>  Wed, 05 Aug 2026 12:20:57 +0200

xwayland (2:24.1.12-1) unstable; urgency=medium

  * New upstream release. (Closes: #1138680)

 -- Timo Aaltonen <tjaalton@debian.org>  Tue, 02 Jun 2026 11:58:56 +0300

xwayland (2:24.1.11-1) unstable; urgency=medium

  * New upstream release.

 -- Timo Aaltonen <tjaalton@debian.org>  Tue, 28 Apr 2026 09:11:08 +0300

xwayland (2:24.1.10-1) unstable; urgency=medium

  * New upstream release.
    - CVE-2026-33999: XKB Integer Underflow in XkbSetCompatMap()
    - CVE-2026-34000: XKB Out-of-bounds Read in CheckSetGeom()
    - CVE-2026-34001: XSYNC Use-after-free in miSyncTriggerFence()
    - CVE-2026-34002: XKB Out-of-bounds read in CheckModifierMap()
    - CVE-2026-34003: XKB Buffer overflow in CheckKeyTypes()
  * control: Bump build-depends on x11proto-dev.

 -- Timo Aaltonen <tjaalton@debian.org>  Tue, 14 Apr 2026 17:16:12 +0300

xwayland (2:24.1.9-1) unstable; urgency=medium

  [ Alessandro Astone ]
  * Enable input emulation through XDG Desktop Portal (LP: #2075962)
  * Actually set debian builder string

  [ Timo Aaltonen ]
  * New upstream release.
    - CVE-2025-62229
    - CVE-2025-62230
    - CVE-2025-62231

 -- Timo Aaltonen <tjaalton@debian.org>  Mon, 24 Nov 2025 19:17:29 +0200

xwayland (2:24.1.8-1) unstable; urgency=medium

  * Add README.Debian.security to clarify how the security issues are
    inherited from the shared codebase with xorg-server, and don't
    actually apply to xwayland. Thanks, Moritz Muehlenhoff!
  * New upstream release. (Closes: #1108369)
    - CVE-2025-49175
    - CVE-2025-49176
    - CVE-2025-49177
    - CVE-2025-49178
    - CVE-2025-49179
    - CVE-2025-49180

 -- Timo Aaltonen <tjaalton@debian.org>  Wed, 27 Aug 2025 10:25:23 +0300

xwayland (2:24.1.6-1) unstable; urgency=medium

  * New upstream release. Fixes:
    - CVE-2025-26594: use-after-free of the root cursor
    - CVE-2025-26595: buffer overflow in XkbVModMaskText
    - CVE-2025-26596: heap overflow in XkbWriteKeySyms
    - CVE-2025-26597: buffer overflow in XkbChangeTypesOfKey
    - CVE-2025-26598: out-of-bounds write in CreatePointerBarrierClient
    - CVE-2025-26599: use of uninitialized pointer in compRedirectWindow
    - CVE-2025-26600: use-after-free in PlayReleasedEvents
    - CVE-2025-26601: use-after-free in SyncInitTrigger
    (Closes: #1098907).

 -- Emilio Pozuelo Monfort <pochu@debian.org>  Wed, 26 Feb 2025 10:22:59 +0100

xwayland (2:24.1.5-1) unstable; urgency=medium

  * New upstream release.
  * patches: Drop upstreamed patches.
  * xwayland-Detect-gbm_bo_get_fd_for_plane-at-runtime.patch: Dropped,
    likely unneeded by now for Xilinx.

 -- Timo Aaltonen <tjaalton@debian.org>  Thu, 06 Feb 2025 09:56:57 +0200

xwayland (2:24.1.4-3) unstable; urgency=medium

  [ Alessandro Astone ]
  * Add patch to fix possible crash after the previous backport
    (LP: #2096653)

 -- Timo Aaltonen <tjaalton@debian.org>  Mon, 27 Jan 2025 13:17:11 +0200

xwayland (2:24.1.4-2) unstable; urgency=medium

  [ Alessandro Astone ]
  * Backport patch to fix busy-loop on inactive VT (LP: #2043517)

 -- Timo Aaltonen <tjaalton@debian.org>  Mon, 16 Dec 2024 14:27:57 +0200

xwayland (2:24.1.4-1) unstable; urgency=medium

  * New upstream release
    + CVE-2024-9632: Heap-based buffer overflow privilege escalation in
      _XkbSetCompatMap (closes: #1086244)

 -- Timo Aaltonen <tjaalton@debian.org>  Wed, 30 Oct 2024 12:01:08 +0200

xwayland (2:24.1.3-1) unstable; urgency=medium

  * New upstream release.

 -- Timo Aaltonen <tjaalton@debian.org>  Wed, 16 Oct 2024 13:13:19 +0300

xwayland (2:24.1.2-1) unstable; urgency=medium

  * New upstream release.
  * control: Bump libdrm-dev build-dependency. (Closes: #1076005)
  * patches: Refreshed.
  * control: Migrate to pkgconf.

 -- Timo Aaltonen <tjaalton@debian.org>  Thu, 08 Aug 2024 09:56:38 +0300

xwayland (2:24.1.0-1) unstable; urgency=medium

  * New upstream release.

 -- Timo Aaltonen <tjaalton@debian.org>  Wed, 15 May 2024 16:57:31 +0300

xwayland (2:24.0.99.901-1) experimental; urgency=medium

  * New upstream release candidate.
  * patches: Refreshed.

 -- Timo Aaltonen <tjaalton@debian.org>  Fri, 26 Apr 2024 13:27:37 +0300

xwayland (2:23.2.6-1) unstable; urgency=medium

  * New upstream release.
    - CVE-2024-31080
    - CVE-2024-31081
    - CVE-2024-31083
  * control: Add libtirpc-dev to build-depends. (Closes: #1065184)

 -- Timo Aaltonen <tjaalton@debian.org>  Sat, 13 Apr 2024 16:58:45 +0300

xwayland (2:23.2.4-1) unstable; urgency=medium

  * New upstream release
    - CVE-2023-6816
    - CVE-2024-0229
    - CVE-2024-21885
    - CVE-2024-21886
    - CVE-2024-0408
    - CVE-2024-0409

 -- Julien Cristau <jcristau@debian.org>  Wed, 17 Jan 2024 11:20:05 +0100

xwayland (2:23.2.3-1) unstable; urgency=medium

  * New upstream release.
    - CVE-2023-6377
    - CVE-2023-6478

 -- Timo Aaltonen <tjaalton@debian.org>  Wed, 13 Dec 2023 10:35:39 +0200

xwayland (2:23.2.2-1) unstable; urgency=medium

  * New upstream release.
    - CVE-2023-5367
    - CVE-2023-5380
    - CVE-2023-5574
  * control: Add libdecor-0-dev to build-depends. (Closes: #1054529)

 -- Timo Aaltonen <tjaalton@debian.org>  Wed, 25 Oct 2023 10:51:36 +0300

xwayland (2:23.2.1-1) unstable; urgency=medium

  * New upstream release.

 -- Timo Aaltonen <tjaalton@debian.org>  Wed, 20 Sep 2023 16:09:23 +0300

xwayland (2:23.2.0-1) unstable; urgency=medium

  * New upstream release.
  * patches: Refreshed.
  * control: Bump x11proto-dev depends.

 -- Timo Aaltonen <tjaalton@debian.org>  Wed, 16 Aug 2023 15:27:59 +0300

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog xwayland`.
