SUSE-SU-2022:4484-1 Security update for xorg-x11-server

This update for xorg-x11-server fixes the following issues: - CVE-2022-46340: Server XTestSwapFakeInput stack overflow bsc1205874 - CVE-2022-46341: Server XIPassiveUngrabDevice out-of-bounds access bsc1205877 - CVE-2022-46342: Server XvdiSelectVideoNotify use-after-free bsc1205879 - CVE-2022-4634...

CVE-2022-46343

The CVE-2022-46343 entry affects the X.Org X server (ScreenSaverSetAttributes) with a use-after-free in the handler, allowing memory corruption that can lead to local privilege elevation or remote code execution in ssh X forwarding sessions. Connected advisories (e.g., ALSA/2023:2806, ALSA-2023:2...

Security fix for the ALT Linux 10 package xorg-server version 2:1.20.14-alt5

Dec. 14, 2022 Valery Inozemtsev 2:1.20.14-alt5 - cherry pick upstream fixes for CVE-2022-46340, CVE-2022-46341, CVE-2022-46342, CVE-2022-46343, CVE-2022-46344, CVE-2022-46283...

CVE-2021-46343

There is an Assertion 'contextp-token.type == LEXERLITERAL' failed at /jerry-core/parser/js/js-parser-expr.c in JerryScript 3.0.0...

CVE-2021-46343

CVE-2021-46343 affects JerryScript 3.0.0. The vulnerability is a denial-of-service caused by an assertion failure: Failure: assertion 'context_p->token.type == LEXER_LITERAL' in /jerry-core/parser/js/js-parser-expr.c. Impact: reported as DoS; no further exploit/vector details are provided in t...

CVE-2021-46343

Removed by vendor...