[ALSA-2024:2996] Moderate: xorg-x11-server-Xwayland security update
Type:
security
Severity:
moderate
Release date:
2024-05-29
Description:
Xwayland is an X server for running X clients under Wayland. Security Fix(es): * xorg-x11-server: Out-of-bounds write in XIChangeDeviceProperty/RRChangeOutputProperty (CVE-2023-5367) * xorg-x11-server: out-of-bounds memory reads/writes in XKB button actions (CVE-2023-6377) * xorg-x11-server: out-of-bounds memory read in RRChangeOutputProperty and RRChangeProviderProperty (CVE-2023-6478) * xorg-x11-server: Heap buffer overflow in DeviceFocusEvent and ProcXIQueryPointer (CVE-2023-6816) * xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access (CVE-2024-0229) * xorg-x11-server: SELinux unlabeled GLX PBuffer (CVE-2024-0408) * xorg-x11-server: SELinux context corruption (CVE-2024-0409) * xorg-x11-server: heap buffer overflow in XISendDeviceHierarchyEvent (CVE-2024-21885) * xorg-x11-server: heap buffer overflow in DisableDevice (CVE-2024-21886) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
Updated packages listed below:
Architecture Package Checksum
aarch64 xorg-x11-server-Xwayland-21.1.3-15.el8.aarch64.rpm c05f689f53bc4b09f0c0961c2d7f410bcafe5cef495548997789359b76438a1f
ppc64le xorg-x11-server-Xwayland-21.1.3-15.el8.ppc64le.rpm 7c6342fb762e85a89bd50753e9b5fe98a48dc769333bacc776e3e9640650483a
s390x xorg-x11-server-Xwayland-21.1.3-15.el8.s390x.rpm b59d7fd08656043be51ca7668e25c93345241fa5b128883500ec9cef255ea9fb
x86_64 xorg-x11-server-Xwayland-21.1.3-15.el8.x86_64.rpm 6e39d350579dd59bd1644db6e234e31ba60205126a81140bb1aded425ce0313d
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.