Slackware Linux 15.0 / current xorg-server Multiple Vulnerabilities (SSA:2023-347-01)

The version of xorg-server installed on the remote host is prior to 1.20.14 / 21.1.10 / 21.1.4 / 23.2.3. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2023-347-01 advisory. - A flaw was found in xorg-server. Querying or changing XKB button actions such as moving...

Important: xorg-x11-server

Issue Overview: A use-after-free flaw was found in xorg-x11-server-Xvfb. This issue occurs in Xvfb with a very specific and legacy configuration a multi-screen setup with multiple protocol screens, also known as Zaphod mode. If the pointer is warped from a screen 1 to a screen 0, a use-after-free...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : xwayland (SUSE-SU-2023:4792-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:4792-1 advisory. - CVE-2023-6377: Fixed out-of-bounds memory write in XKB button actions bsc1217765. -...

Slackware: Security Advisory (SSA:2023-347-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2023:4789-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2023:4790-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLED15: xorg-x11-server / xorg-x11-server-Xvfb / xorg-x11-server-extra / etc (SUSE-SU-2023:4787-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:4787-1 advisory. - CVE-2023-6377: Fixed Out-of-bounds memory write in XKB button actionsbsc1217765. -...

Ubuntu: Security Advisory (USN-6555-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-5576-2)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES12 Security Update : xorg-x11-server (SUSE-SU-2023:4790-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:4790-1 advisory. - CVE-2023-6377: Fixed out-of-bounds memory write in XKB button actions bsc1217765. - CVE-2023-6478: Fixed out-of-bounds memory rea...

SUSE SLED15: xorg-x11-server / xorg-x11-server-extra / xorg-x11-server-sdk / etc (SUSE-SU-2023:4791-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:4791-1 advisory. - CVE-2023-6377: Fixed out-of-bounds memory write in XKB button actions bsc1217765. -...

Debian dla-3686 : xdmx - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3686 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3686-2 [email protected] https://www.debian.org/lts/security/...

[slackware-security] xorg-server

New xorg-server packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/xorg-server-1.20.14-i586-10slack15.0.txz: Rebuilt. This update fixes two security issues: Out-of-bounds memory write in XKB butto...

SUSE-SU-2023:4791-1 Security update for xorg-x11-server

This update for xorg-x11-server fixes the following issues: - CVE-2023-6377: Fixed out-of-bounds memory write in XKB button actions bsc1217765. - CVE-2023-6478: Fixed out-of-bounds memory read in RRChangeOutputProperty and RRChangeProviderProperty bsc1217766...

SUSE-SU-2023:4790-1 Security update for xorg-x11-server

This update for xorg-x11-server fixes the following issues: - CVE-2023-6377: Fixed out-of-bounds memory write in XKB button actions bsc1217765. - CVE-2023-6478: Fixed out-of-bounds memory read in RRChangeOutputProperty and RRChangeProviderProperty bsc1217766...

SUSE-SU-2023:4789-1 Security update for xorg-x11-server

This update for xorg-x11-server fixes the following issues: - CVE-2023-6377: Fixed Out-of-bounds memory write in XKB button actionsbsc1217765. - CVE-2023-6478: Fixed Out-of-bounds memory read in RRChangeOutputProperty and RRChangeProviderProperty bsc1217766...

SUSE-SU-2023:4787-1 Security update for xorg-x11-server

This update for xorg-x11-server fixes the following issues: - CVE-2023-6377: Fixed Out-of-bounds memory write in XKB button actionsbsc1217765. - CVE-2023-6478: Fixed Out-of-bounds memory read in RRChangeOutputProperty and RRChangeProviderProperty bsc1217766...

USN-6555-1 xorg-server, xwayland vulnerabilities

Jan-Niklas Sohn discovered that the X.Org X Server incorrectly handled XKB button actions. An attacker could possibly use this issue to cause the X Server to crash, execute arbitrary code, or escalate privileges. CVE-2023-6377 Jan-Niklas Sohn discovered that the X.Org X Server incorrectly handled...

[SECURITY] [DLA 3686-1] xorg-server security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3686-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz December 13, 2023 https://wiki.debian.org/LTS -...

CVE-2023-6478

A flaw was found in xorg-server. A specially crafted request to RRChangeProviderProperty or RRChangeOutputProperty can trigger an integer overflow which may lead to a disclosure of sensitive information...