Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| xorg-server | not-affected | package | ||
| xwayland | fixed | 2:24.1.14-1 | package |
Примечания
Xwayland shouldn't be running as root, cf. README.Debian.security
https://lists.x.org/archives/xorg-announce/2026-October/003747.html
Fixed by: https://gitlab.freedesktop.org/xorg/xserver/-/commit/d6deb27b655abae79396bf3aedc2937a10ae2d4f (xwayland-24.1.14)
Связанные уязвимости
CVSS3: 7.8
redhat
21 день назад
A flaw was found in xorg-x11-server. In the Glamor 2D graphics acceleration module, a buffer allocation error occurs during color depth conversion when processing an image whose source dimensions exceed the destination dimensions. A local user can exploit this vulnerability to trigger an out-of-bounds memory write, potentially leading to privilege escalation, arbitrary code execution, or a denial of service (DoS).
oracle-oval
9 дней назад
ELSA-2026-85193: xorg-x11-server-Xwayland security update (IMPORTANT)