Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| xorg-server | fixed | 2:21.1.25-1 | package | |
| xwayland | fixed | 2:24.1.14-1 | package |
Примечания
Xwayland shouldn't be running as root, cf. README.Debian.security
https://lists.x.org/archives/xorg-announce/2026-October/003747.html
Fixed by: https://gitlab.freedesktop.org/xorg/xserver/-/commit/9c3880d0745acefc98ed37e79498dfbe558a0f40 (xorg-server-21.1.25)
Связанные уязвимости
CVSS3: 7.8
redhat
20 дней назад
A flaw was found in xorg-x11-server. The server writes pointer barrier events into a fixed-size buffer without properly validating boundaries. An authenticated client can trigger this issue by configuring excessive pointer barriers and generating cursor motion events, causing a buffer overflow. This vulnerability may lead to arbitrary code execution or cause the server to crash, resulting in a Denial of Service (DoS).
