wlroots 0.20.2 releases with XWayland and scene graph fixes

Brief written by the FOSSWire AI editor from wlroots How we write

July 7, 2026 1 min read 60 reads

Key Takeaway

The wlroots 0.20.2 update provides several stability and security improvements, particularly targeting XWayland and the scene graph.

Summary

The wlroots library has released version 0.20.2, addressing various bugs in the XWayland implementation and the scene graph component. The update includes fixes for out-of-bounds memory access in XWayland, improved handling of surface IDs, and security enhancements for the security_context_v1 protocol. It also refines drag-and-drop behavior for touch inputs.

Technical improvements in 0.20.2

XWayland: Removed use of Variable Length Arrays (VLAs) for MIME type atom lists and fixed an out-of-bounds strndup() in read_surface_class().
Scene Graph: Implemented intersection of the visible area with the output layout in update_node_update_outputs() and prevented new dmabuf feedback after node disabling.
Security: Added CLOEXEC for client file descriptors in the security_context_v1 protocol.
XWayland/XWM: Improved validation for WL_SURFACE_ID messages and surface associations.
Input: Added checks for drag-and-drop actions and acceptance during touch-up events.

Why it matters

As a foundational library for Wayland compositors, these fixes improve the stability and security of various Linux desktop environments using wlroots.

Original reference: gitlab.freedesktop.org →