UbuntuUpdates.org

Bugs fixes in "xwayland"

Origin Bug number Title Date fixed
CVE CVE-2024-0409 SELinux context corruption 2024-01-16
CVE CVE-2024-0408 SELinux unlabeled GLX PBuffer 2024-01-16
CVE CVE-2024-0229 Reattaching to different master device may lead to out-of-bounds memory access 2024-01-16
CVE CVE-2023-6816 Heap buffer overflow in DeviceFocusEvent and ProcXIQueryPointer 2024-01-16
CVE CVE-2023-6478 A flaw was found in xorg-server. A specially crafted request to RRChangeProviderProperty or RRChangeOutputProperty can trigger an integer overflow wh 2023-12-13
CVE CVE-2023-6377 A flaw was found in xorg-server. Querying or changing XKB button actions such as moving from a touchpad to a mouse can result in out-of-bounds memory 2023-12-13
CVE CVE-2023-6478 A flaw was found in xorg-server. A specially crafted request to RRChangeProviderProperty or RRChangeOutputProperty can trigger an integer overflow wh 2023-12-13
CVE CVE-2023-6377 A flaw was found in xorg-server. Querying or changing XKB button actions such as moving from a touchpad to a mouse can result in out-of-bounds memory 2023-12-13
CVE CVE-2023-5367 X.Org server: OOB write in XIChangeDeviceProperty/RRChangeOutputProperty 2023-10-25
CVE CVE-2023-5367 X.Org server: OOB write in XIChangeDeviceProperty/RRChangeOutputProperty 2023-10-25
CVE CVE-2023-0494 Xi: fix potential use-after-free in DeepCopyPointerClasses 2023-02-08
CVE CVE-2023-0494 Xi: fix potential use-after-free in DeepCopyPointerClasses 2023-02-07
CVE CVE-2022-4283 xkb: reset the radio_groups pointer to NULL after freeing it 2022-12-14
CVE CVE-2022-46344 Xi: avoid integer truncation in length check of ProcXIChangeProperty 2022-12-14
CVE CVE-2022-46343 Xext: free the screen saver resource when replacing it 2022-12-14
CVE CVE-2022-46342 Xext: free the XvRTVideoNotify when turning off from the same client 2022-12-14
CVE CVE-2022-46341 Xi: disallow passive grabs with a detail > 255 2022-12-14
CVE CVE-2022-46340 Xtest: disallow GenericEvents in XTestSwapFakeInput 2022-12-14
CVE CVE-2022-4283 xkb: reset the radio_groups pointer to NULL after freeing it 2022-12-14
CVE CVE-2022-46344 Xi: avoid integer truncation in length check of ProcXIChangeProperty 2022-12-14



About   -   Send Feedback to @ubuntu_updates