[Midnightbsd-cvs] [MidnightBSD/mports] de6fd8: x11-servers/xwayland: update to 24.1.13 (security)...

[Lucas Holt]

  Branch: refs/heads/master
  Home:   https://github.com/MidnightBSD/mports
  Commit: de6fd85a0d964882b38114b98b2eb5ea4a275d4c
      https://github.com/MidnightBSD/mports/commit/de6fd85a0d964882b38114b98b2eb5ea4a275d4c
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-07-08 (Wed, 08 Jul 2026)

  Changed paths:
    M x11-servers/xwayland/Makefile
    M x11-servers/xwayland/distinfo

  Log Message:
  -----------
  x11-servers/xwayland: update to 24.1.13 (security) (#625)

Updates `x11-servers/xwayland` from 24.1.12 to 24.1.13 to address the
X.Org security advisory of 2026-07-08.

## CVEs fixed
- **CVE-2026-55999** — `glamor_font_get()` font atlas heap buffer
overflow (per-glyph metrics can exceed maxbounds-derived slot). Fix adds
a per-glyph bounds check in `glamor/glamor_font.c`.
- **CVE-2026-56000** — GLX `contextTags` use-after-free in
`CommonMakeCurrent()`. Fix frees the old tag before the realloc that
could move the array (`glx/vndcmds.c`).

Both fixes verified present in the 24.1.13 source.

## Changes
- `PORTVERSION` 24.1.12 → 24.1.13
- Regenerated `distinfo`

## Notes
- Existing MidnightBSD patch still applies cleanly.
- Built and staged (`bmake` + `fake`) on amd64; plist unchanged.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

## Summary by Sourcery

Update the xwayland port to the 24.1.13 release to pick up upstream
security fixes.

Bug Fixes:
- Pull in upstream fixes for CVE-2026-55999 and CVE-2026-56000 via the
24.1.13 xwayland release.

Build:
- Bump PORTVERSION for xwayland to 24.1.13 and refresh distinfo for the
new distfile.

Signed-off-by: Lucas Holt <luke at foolishgames.com>



To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/mports/settings/notifications