Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

Fedora 38 2024-1706127797 Critical: Xwayland Issues and Fixes

fedora
Calendar Grey April 24, 2024
Dist Fedora Esm H88
Fedora 38 patches for xorg-x11-server-Xwayland resolve vital security vulnerabilities, encompassing data exposure and compatibility problems.
CVE fix for CVE-2024-31080, CVE-2024-31081, CVE-2024-31083, and a fix for a regression introduced with the fix for CVE-2024-31083

Summary

Xwayland is an X server for running X clients under Wayland.

Update Information:

CVE fix for CVE-2024-31080, CVE-2024-31081, CVE-2024-31083, and a fix for a regression introduced with the fix for CVE-2024-31083

Topics%20covered

Topics Covered

security advisory Fedora critical update data leakage regression fix Xwayland heap overread

Change Log

* Tue Apr 9 2024 Olivier Fourdan - 22.1.9-7 Fix for a regression introduced with the fix for CVE-2024-31083 https://gitlab.freedesktop.org/xorg/xserver/-/issues/1659 * Thu Apr 4 2024 Olivier Fourdan - 22.1.9-6 CVE fix for: CVE-2024-31080, CVE-2024-31081, CVE-2024-31083 Fix for copy/paste error in previous CVE fix Fix to enable buttons with pointer gestures for backward compatibility with legacy X11 clients.

References


[ 1 ] Bug #2271997 - CVE-2024-31080 xorg-x11-server: Heap buffer overread/data leakage in ProcXIGetSelectedEvents https://bugzilla.redhat.com/show_bug.cgi?id=2271997 [ 2 ] Bug #2271998 - CVE-2024-31081 xorg-x11-server: Heap buffer overread/data leakage in ProcXIPassiveGrabDevice https://bugzilla.redhat.com/show_bug.cgi?id=2271998 [ 3 ] Bug #2272000 - CVE-2024-31083 xorg-x11-server: User-after-free in ProcRenderAddGlyphs https://bugzilla.redhat.com/show_bug.cgi?id=2272000

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-1706127797' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
critical
Lowest
Low
Medium
High
Critical

Name: xorg-x11-server-Xwayland
Product: Fedora 38
Version: 22.1.9
Release: 7.fc38
URL: https://www.x.org/wiki/
Summary: Xwayland

Topics%20covered

Topics Covered

security advisory Fedora critical update data leakage regression fix Xwayland heap overread

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here