DSA-5657-1 xorg-server - security update

Bulletin has no description...

xorg-x11-server: Heap buffer overread/data leakage in ProcXIPassiveGrabDevice

A heap-based buffer over-read vulnerability was found in the X.org server's ProcXIPassiveGrabDevice function. This issue occurs when byte-swapped length values are used in replies, potentially leading to memory leakage and segmentation faults, particularly when triggered by a client with a...

xorg-x11-server: Heap buffer overread/data leakage in ProcXIGetSelectedEvents

A heap-based buffer over-read vulnerability was found in the X.org server's ProcXIGetSelectedEvents function. This issue occurs when byte-swapped length values are used in replies, potentially leading to memory leakage and segmentation faults, particularly when triggered by a client with a...

xorg-x11-server: Use-after-free in ProcRenderAddGlyphs

A use-after-free vulnerability was found in the ProcRenderAddGlyphs function of Xorg servers. This issue occurs when AllocateGlyph is called to store new glyphs sent by the client to the X server, potentially resulting in multiple entries pointing to the same non-refcounted glyphs. Consequently,...

Use After Free

xorg-server is vulnerable to Use After Free. The vulnerability is due to multiple entries pointing to the same non-refcounted glyph, which can lead to a use-after-free scenario when a freed glyph is accessed again...

SUSE-SU-2024:1199-1 Security update for xorg-x11-server

This update for xorg-x11-server fixes the following issues: - CVE-2024-31080: Fixed ProcXIGetSelectedEvents to use unswapped length bsc1222309. - CVE-2024-31081: Fixed ProcXIPassiveGrabDevice to use unswapped length to send reply bsc1222310. - CVE-2024-31082: Fixed ProcAppleDRICreatePixmap to use...

Ubuntu: Security Advisory (USN-6721-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-6721-2 xorg-server, xwayland regression

USN-6721-1 fixed vulnerabilities in X.Org X Server. That fix was incomplete resulting in a regression. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that X.Org X Server incorrectly handled certain data. An attacker could possibly u...

USN-6721-2: X.Org X Server regression

USN-6721-1 fixed vulnerabilities in X.Org X Server. That fix was incomplete resulting in a regression. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that X.Org X Server incorrectly handled certain data. An attacker could possibly u...

CVE-2023-5574 affecting package xorg-x11-server for versions less than 1.20.10-10

CVE-2023-5574 affecting package xorg-x11-server for versions less than 1.20.10-10. A patched version of the package is available...

CVE-2024-21885 affecting package xorg-x11-server for versions less than 1.20.10-10

CVE-2024-21885 affecting package xorg-x11-server for versions less than 1.20.10-10. A patched version of the package is available...

CVE-2023-5380 affecting package xorg-x11-server for versions less than 1.20.10-10

CVE-2023-5380 affecting package xorg-x11-server for versions less than 1.20.10-10. A patched version of the package is available...

CVE-2023-6816 affecting package xorg-x11-server for versions less than 1.20.10-10

CVE-2023-6816 affecting package xorg-x11-server for versions less than 1.20.10-10. A patched version of the package is available...

CVE-2023-5367 affecting package xorg-x11-server for versions less than 1.20.10-10

CVE-2023-5367 affecting package xorg-x11-server for versions less than 1.20.10-10. A patched version of the package is available...

The vulnerability of the xorg-server package, related to integer overflows or exploits, allows attackers to disclose confidential information.

The vulnerability of the xorg-server package is related to integer overflows or exploits. Exploiting this vulnerability can allow a remote attacker to disclose confidential information...

EulerOS 2.0 SP9 : xorg-x11-server (EulerOS-SA-2024-1522)

According to the versions of the xorg-x11-server package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in X.Org server. Both DeviceFocusEvent and the XIQueryPointer reply contain a bit for each logical button currently dow...

Huawei EulerOS: Security Advisory for xorg-x11-server (EulerOS-SA-2024-1522)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ROS-20250117-02

Vulnerability of xorg-server package is related to created requests to RRChangeProviderProperty or RRChangeOutputProperty causing integer overflow. RRChangeOutputProperty causing an integer overflow. Exploitation of the vulnerability could allow an attacker acting remotely to disclose sensitive...

ROS-20240408-08

Vulnerability of xorg-x11-server package is related to memory usage after it is freed when processing Button Action objects. Button Action objects. Exploitation of the vulnerability could allow an attacker to elevate his privileges and execute arbitrary code in root context The xorg-server packag...

Huawei EulerOS: Security Advisory for xorg-x11-server (EulerOS-SA-2024-1501)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...