[Forgot Password]
Login  Register Subscribe

30480

 
 

423868

 
 

253164

 
 

909

 
 

197077

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

RHSA-2023:2249-01 -- Redhat xorg-x11-server-Xwayland

ID: oval:org.secpod.oval:def:507704Date: (C)2023-05-22   (M)2023-12-22
Class: PATCHFamily: unix




Xwayland is an X server for running X clients under Wayland. Security Fix: * xorg-x11-server: buffer overflow in _GetCountedString in xkb/xkb.c * xorg-x11-server: XkbGetKbdByName use-after-free * xorg-x11-server: XTestSwapFakeInput stack overflow * xorg-x11-server: XIPassiveUngrab out-of-bounds access * xorg-x11-server: XvdiSelectVideoNotify use-after-free * xorg-x11-server: ScreenSaverSetAttributes use-after-free * xorg-x11-server: XIChangeProperty out-of-bounds access * xorg-x11-server: DeepCopyPointerClasses use-after-free leads to privilege elevation * xorg-x11-server: memory leak in ProcXkbGetKbdByName in xkb/xkb.c For more details about the security issue, including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page listed in the References section. Additional Changes: For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.2 Release Notes linked from the References section.

Platform:
Red Hat Enterprise Linux 9
Product:
xorg-x11-server-Xwayland
Reference:
RHSA-2023:2249-01
CVE-2022-3550
CVE-2022-3551
CVE-2022-4283
CVE-2022-46340
CVE-2022-46341
CVE-2022-46342
CVE-2022-46343
CVE-2022-46344
CVE-2023-0494
CVE    9
CVE-2023-0494
CVE-2022-3551
CVE-2022-3550
CVE-2022-4283
...
CPE    2
cpe:/o:redhat:enterprise_linux:9
cpe:/a:x.org:xorg-x11-server-Xwayland

© SecPod Technologies