Description:
Xwayland is an X server for running X clients under Wayland.
Security Fix(es):
* xorg-x11-server: Out-of-bounds write in XIChangeDeviceProperty/RRChangeOutputProperty (CVE-2023-5367)
* xorg-x11-server: out-of-bounds memory reads/writes in XKB button actions (CVE-2023-6377)
* xorg-x11-server: out-of-bounds memory read in RRChangeOutputProperty and RRChangeProviderProperty (CVE-2023-6478)
* xorg-x11-server: Heap buffer overflow in DeviceFocusEvent and ProcXIQueryPointer (CVE-2023-6816)
* xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access (CVE-2024-0229)
* xorg-x11-server: SELinux unlabeled GLX PBuffer (CVE-2024-0408)
* xorg-x11-server: SELinux context corruption (CVE-2024-0409)
* xorg-x11-server: heap buffer overflow in XISendDeviceHierarchyEvent (CVE-2024-21885)
* xorg-x11-server: heap buffer overflow in DisableDevice (CVE-2024-21886)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
Updated packages listed below:
Architecture |
Package |
Checksum |
aarch64 |
xorg-x11-server-Xwayland-21.1.3-15.el8.aarch64.rpm |
c05f689f53bc4b09f0c0961c2d7f410bcafe5cef495548997789359b76438a1f |
ppc64le |
xorg-x11-server-Xwayland-21.1.3-15.el8.ppc64le.rpm |
7c6342fb762e85a89bd50753e9b5fe98a48dc769333bacc776e3e9640650483a |
s390x |
xorg-x11-server-Xwayland-21.1.3-15.el8.s390x.rpm |
b59d7fd08656043be51ca7668e25c93345241fa5b128883500ec9cef255ea9fb |
x86_64 |
xorg-x11-server-Xwayland-21.1.3-15.el8.x86_64.rpm |
6e39d350579dd59bd1644db6e234e31ba60205126a81140bb1aded425ce0313d |