Summary
[23.2.7-1]
- xwayland 23.2.7 - (RHEL-29912)
[21.1.9-7]
- CVE fix for: CVE-2024-31080, CVE-2024-31081, CVE-2024-31083
[21.1.9-6]
New build to add xorg-x11-server-Xwayland-devel (RHEL-25083)
[21.1.9-5]
Fix for CVE-2023-6816, CVE-2024-0229, CVE-2024-21885, CVE-2024-21886,
CVE-2024-0408, CVE-2024-0409
[21.1.9-4]
- Fix for CVE-2023-6377, CVE-2023-6478
[22.1.9-3]
- Fix for CVE-2023-5367
[22.1.9-2]
- Rebuild (#2158761)
[22.1.9-1]
- xwayland 22.1.9 (#2158761)
[21.1.3-8]
- Fix CVE-2023-1393 (#2180299)
[21.1.3-7]
- Fix CVE-2023-0494 (#2166974)
[21.1.3-6]
- Follow-up fix for CVE-2022-46340 (#2151778)
[21.1.3-5]
- CVE fix for: CVE-2022-4283 (#2151803), CVE-2022-46340 (#2151778),
CVE-2022-46341 (#2151783), CVE-2022-46342 (#2151786),
CVE-2022-46343 (#2151793), CVE-2022-46344 (#2151796)
[ 21.1.3-4]
- Fix CVE-2022-3550, CVE-2022-3551
Resolves: rhbz#2140769, rhbz#2140771
[21.1.3-3]
- CVE fix for: CVE-2022-2319/ZDI-CAN-16062, CVE-2022-2320/ZDI-CAN-16070
Resolves: rhbz#2110440, rhbz#2110433
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | xorg-x11-server-Xwayland | 0:23.2.7-1.el9 |
| Oracle Linux · 9 | xorg-x11-server-Xwayland-devel | 0:23.2.7-1.el9 |
Vulnerabilities 3
-
High 7.8
Xorg-x11-server: use-after-free in procrenderaddglyphs
A use-after-free vulnerability was found in the ProcRenderAddGlyphs() function of Xorg servers. This issue occurs when AllocateGlyph() is called to store new glyphs sent by the client to the X server, potentially resulting in multiple entries pointing to the …
-
High 7.3
Xorg-x11-server: heap buffer overread/data leakage in procxigetselectedevents
A heap-based buffer over-read vulnerability was found in the X.org server's ProcXIGetSelectedEvents() function. This issue occurs when byte-swapped length values are used in replies, potentially leading to memory leakage and segmentation faults, particularly …
-
High 7.3
Xorg-x11-server: heap buffer overread/data leakage in procxipassivegrabdevice
A heap-based buffer over-read vulnerability was found in the X.org server's ProcXIPassiveGrabDevice() function. This issue occurs when byte-swapped length values are used in replies, potentially leading to memory leakage and segmentation faults, particularly …