Slackware: Security Advisory (SSA:2023-088-02)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Slackware Linux 15.0 / current xorg-server Vulnerability (SSA:2023-088-02)

The version of xorg-server installed on the remote host is prior to 1.20.14 / 21.1.4 / 21.1.8 / 23.1.1. It is, therefore, affected by a vulnerability as referenced in the SSA:2023-088-02 advisory. - Fix for CVE-2023-1393 CVE-2023-1393 Note that Nessus has not tested for this issue but has instead...

Ubuntu: Security Advisory (USN-5986-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[slackware-security] xorg-server

New xorg-server packages are available for Slackware 15.0 and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/xorg-server-1.20.14-i586-8slack15.0.txz: Rebuilt. PATCH composite: Fix use-after-free of the COW. Fix use-after-free that can le...

[SECURITY] [DLA 3372-1] xorg-server security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3372-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz March 29, 2023 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 5380-1] xorg-server security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5380-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso March 29, 2023 https://www.debian.org/security/faq -...

DLA-3372-1 xorg-server - security update

Bulletin has no description...

FreeBSD : xorg-server -- Overlay Window Use-After-Free (96d84238-b500-490b-b6aa-2b77090a0410)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 96d84238-b500-490b-b6aa-2b77090a0410 advisory. - Fix for CVE-2023-1393 CVE-2023-1393 Note that Nessus has not tested for this issue but has instead...

Debian: Security Advisory (DLA-1186-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DLA-218-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DLA-120)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the ProcXkbSetDeviceInfo() and ProcXkbGetDeviceInfo() functions in the X.Org Server software, which relates to the use of memory after it is freed, allows a attacker to execute arbitrary code.

The vulnerability of the ProcXkbSetDeviceInfo and ProcXkbGetDeviceInfo functions in the X.Org Server software is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Ubuntu: Security Advisory (USN-5778-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-5778-2 xorg-server, xorg-server-hwe-16.04 vulnerabilities

USN-5778-1 fixed several vulnerabilities in X.Org. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: Jan-Niklas Sohn discovered that X.Org X Server extensions contained multiple security issues. An attacker could possibly use these...

SUSE CVE-2006-0745

X.Org server xorg-server 1.0.0 and later, X11R6.9.0, and X11R7.0 inadvertently treats the address of the geteuid function as if it is the return value of a call to geteuid, which allows local users to bypass intended restrictions and 1 execute arbitrary code via the -modulepath command line optio...

SUSE CVE-2011-4029

The LockServer function in os/utils.c in X.Org xserver before 1.11.2 allows local users to change the permissions of arbitrary files to 444, read those files, and possibly cause a denial of service removed execution permission via a symlink attack on a temporary lock file...

SUSE CVE-2013-1940

X.Org X server before 1.13.4 and 1.4.x before 1.14.1 does not properly restrict access to input events when adding a new hot-plug device, which might allow physically proximate attackers to obtain sensitive information, as demonstrated by reading passwords from a tty...

SUSE CVE-2013-4394

The SetX11Keyboard function in systemd, when PolicyKit Local Authority PKLA is used to change the group permissions on the X Keyboard Extension XKB layouts description, allows local users in the group to modify the Xorg X11 Server configuration file and possibly gain privileges via vectors...

SUSE CVE-2013-4396

Use-after-free vulnerability in the doImageText function in dix/dixfonts.c in the xorg-server module before 1.14.4 in X.Org X11 allows remote authenticated users to cause a denial of service daemon crash or possibly execute arbitrary code via a crafted ImageText request that triggers...

SUSE CVE-2014-8094

Integer overflow in the ProcDRI2GetBuffers function in the DRI2 extension in X.Org Server aka xserver and xorg-server 1.7.0 through 1.16.x before 1.16.3 allows remote authenticated users to cause a denial of service crash or possibly execute arbitrary code via a crafted request, which triggers an...