Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2023:4926-1

Опубликовано: 20 дек. 2023
Источник: suse-cvrf

Описание

Security update for xwayland

This update for xwayland fixes the following issues:

  • CVE-2023-6377: Fixed out-of-bounds memory write in XKB button actions (bsc#1217765).

Список пакетов

SUSE Linux Enterprise Workstation Extension 15 SP4
xwayland-21.1.4-150400.3.26.1
openSUSE Leap 15.4
xwayland-21.1.4-150400.3.26.1
xwayland-devel-21.1.4-150400.3.26.1

Ссылки

Описание

A flaw was found in xorg-server. Querying or changing XKB button actions such as moving from a touchpad to a mouse can result in out-of-bounds memory reads and writes. This may allow local privilege escalation or possible remote code execution in cases where X11 forwarding is involved.

Затронутые продукты
SUSE Linux Enterprise Workstation Extension 15 SP4:xwayland-21.1.4-150400.3.26.1
openSUSE Leap 15.4:xwayland-21.1.4-150400.3.26.1
openSUSE Leap 15.4:xwayland-devel-21.1.4-150400.3.26.1
Ссылки