wayland-protocols bug fix and enhancement update

An update is available for wayland-protocols. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...

ALSA-2022:1917 Moderate: xorg-x11-server and xorg-x11-server-Xwayland security update

X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon. Xwayland is an X server for running X clients under Wayland. The following packages have been upgraded to a later upstream...

Moderate: xorg-x11-server and xorg-x11-server-Xwayland security update

X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon. Xwayland is an X server for running X clients under Wayland. The following packages have been upgraded to a later upstream...

Use-After-Free

chromium is vulnerable to use after free. The vulnerability exists due to heap corruption which allows an attacker to potentially exploit heap corruption via running a Wayland test...

The vulnerability of the evdev_log_msg function in the libinput library, implemented in X.Org and Wayland display server protocols, allows a attacker to execute arbitrary code with elevated privileges.

The vulnerability of the evdevlogmsg function in the libinput library, within the implementations of X.Org and Wayland display server protocols, is related to the use of uncontrolled format strings. Exploiting this vulnerability allows a attacker to execute arbitrary code with elevated privileges...

PT-2022-2364 · Libinput +11 · Libinput +11

Name of the Vulnerable Software and Affected Versions: libinput version 1.20.1 Description: A format string vulnerability was found in libinput, related to the use of uncontrolled format strings in the evdev log msg function. This vulnerability can be exploited to execute arbitrary code with...

The vulnerability of the Display Key Combination Fast Access swhkd in the Wayland display server protocol allows a hacker to access protected information or cause a service failure.

The vulnerability of the Display Key Combination daemon swhkd in the Wayland display server protocol implementation relates to the ability to save the PID of a process in the file /tmp/swhkd.pid and incorporate the PID of an existing process into it. Exploiting this vulnerability can allow a remo...

The vulnerability of the Display Key Combination Switches in the Wayland server display protocol implementation allows a hacker to compromise data integrity or cause service failures.

The vulnerability of the Display Key Combination Demon in the Wayland display protocol implementation relates to the ability to save the PID of a process in the /tmp/swhks.pid file and incorporate the PID of an existing process into it. Exploiting this vulnerability allows a remote attacker to...

The vulnerability of the Display Key Combination Fast Access swhkd mechanism in the Wayland display server protocol allows a hacker to gain access to protected information or cause a service failure.

The vulnerability of the Display Key Combination Fast Access daemon, swhkd, in the Wayland display server protocol is related to the ability to connect to the UNIX domain socket /tmp/swhkd.sock. Exploiting this vulnerability allows a remote attacker to gain access to protected information or caus...

Exposure of Resource to Wrong Sphere in Simple-Wayland-HotKey-Daemon

SWHKD 1.1.5 allows arbitrary file-existence tests via the -c option...

GHSA-H5WH-7H2J-H999 Exposure of Resource to Wrong Sphere in Simple-Wayland-HotKey-Daemon

SWHKD 1.1.5 consumes the keyboard events of unintended users. This could potentially cause an information leak, but is usually a denial of functionality...

Exposure of Resource to Wrong Sphere in Simple-Wayland-HotKey-Daemon

SWHKD 1.1.5 allows arbitrary file-existence tests via the -c option...

Denial Of Service (DoS)

swaylock is vulnerable to denial of service. The vulnerability exist because it allows attackers to achieve unlocked access to a Wayland compositor which causes an application crash...

CVE-2022-26530

swaylock before 1.6 allows attackers to trigger a crash and achieve unlocked access to a Wayland compositor...

DEBIAN-CVE-2022-26530

swaylock before 1.6 allows attackers to trigger a crash and achieve unlocked access to a Wayland compositor...

CVE-2022-26530

swaylock before 1.6 allows attackers to trigger a crash and achieve unlocked access to a Wayland compositor...

CVE-2022-26530

swaylock before 1.6 allows attackers to trigger a crash and achieve unlocked access to a Wayland compositor...

UBUNTU-CVE-2022-26530

swaylock before 1.6 allows attackers to trigger a crash and achieve unlocked access to a Wayland compositor...

Design/Logic Flaw

swaylock before 1.6 allows attackers to trigger a crash and achieve unlocked access to a Wayland compositor...

CVE-2022-26530

Swaylock prior to 1.6 is vulnerable to CVE-2022-26530: an attacker can trigger a crash and gain unlocked access to the Wayland compositor. The connected documents specify the affected target as swaylock before 1.6 and do not provide further exploit details, impact elaboration beyond this descript...