Security update for xwayland
Security update for xwayland
describes (6)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-21886US | — | — | ||
A heap buffer overflow flaw was found in the DisableDevice function in the X.Org server. This issue may lead to an application crash or, in some circumstances, remote code executio… | ||||
| CVE-2024-21885US | — | — | ||
A flaw was found in X.Org server. In the XISendDeviceHierarchyEvent function, it is possible to exceed the allocated array length when certain new device IDs are added to the xXIHi… | ||||
| CVE-2024-0229US | high7.8 | — | ||
An out-of-bounds memory access flaw was found in the X.Org server. This issue can be triggered when a device frozen by a sync grab is reattached to a different master device. This… | ||||
| CVE-2024-0409US | high7.8 | — | ||
A flaw was found in the X.Org server. The cursor code in both Xephyr and Xwayland uses the wrong type of private at creation. It uses the cursor bits type with the cursor as privat… | ||||
| CVE-2024-0408US | medium5.5 | — | ||
A flaw was found in the X.Org server. The GLX PBuffer code does not call the XACE hook when creating the buffer, leaving it unlabeled. When the client issues another request to acc… | ||||
| CVE-2023-6816US | critical9.8 | — | ||
A flaw was found in X.Org server. Both DeviceFocusEvent and the XIQueryPointer reply contain a bit for each logical button currently down. Buttons can be arbitrarily mapped to any… | ||||
references
External citations — patches, advisories, analysis.
remediations (6)
- Fixedxwayland-21.1.4-150400.3.31.1.x86_64 as component of SUSE Linux Enterprise Desktop 15 SP4-LTSS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedxwayland-21.1.4-150400.3.31.1.x86_64 as component of SUSE Linux Enterprise Desktop 15 SP4-LTSS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedxwayland-21.1.4-150400.3.31.1.x86_64 as component of SUSE Linux Enterprise Desktop 15 SP4-LTSS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedxwayland-21.1.4-150400.3.31.1.x86_64 as component of SUSE Linux Enterprise Desktop 15 SP4-LTSS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedxwayland-21.1.4-150400.3.31.1.x86_64 as component of SUSE Linux Enterprise Desktop 15 SP4-LTSS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedxwayland-21.1.4-150400.3.31.1.x86_64 as component of SUSE Linux Enterprise Desktop 15 SP4-LTSS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan