xwayland needs to be upgraded to 23.2.5 to resolve CVE issues

[hankwang]

Hey, because we reviewed 6.6.23_2.0.0 for a CVE issue. We discovered that xwayland has some CVE issues. The new version (23.2.5) fixes these CVES issues. Please help in upgrading the version in future bsp.

[JosephAtNXP · Accepted solution]

Hi,

Thank you for your interest in NXP Semiconductor products,

It is being targeted at this moment by the SW team, thank you for the heads up.

It is also a migration for scarthgap, probably the target will be the next 2025 Q1 release.

https://docs.yoctoproject.org/next/migration-guides/release-notes-5.0.html

Regards