Files
Daniel Golle 4c5a3bb191 wlroots: update to version 0.20.2
Also add an explicit PKG_RELEASE line (was previously undefined).

Several Xwayland hardening fixes for handling malformed/malicious
client input: an out-of-bounds strndup() in read_surface_class(),
removed VLAs for MIME type atom lists, use of const pointers for
xcb_get_property_value(), no longer relying on the (removable)
xcb_get_property_reply_t.value_len field, a WM_TRANSIENT_FOR length
check, and checks against duplicate/mistyped WL_SURFACE_ID association
messages. Also: intersect the visible area with the output layout in
update_node_update_outputs(), don't send a new dmabuf feedback after a
scene node is disabled, set CLOEXEC on client FDs in
security_context_v1, emit set_parent when an Xwayland parent surface
is destroyed, and check the drag-and-drop action/accepted state on
touch-up.

No patches to refresh. Hash verified against the release archive and
an independent fresh git clone of the same tag (byte-identical tree
content after extraction).

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2026-08-25 02:25:40 +01:00
..
2026-08-25 02:25:40 +01:00