Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
965fb917 by Salvatore Bonaccorso at 2024-04-03T23:07:40+02:00
Track fixed version for xorg-server issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -583,24 +583,24 @@ CVE-2023-52637 (In the Linux kernel, the following
vulnerability has been resolv
[buster] - linux <not-affected> (Vulnerable code not present)
NOTE:
https://git.kernel.org/linus/efe7cf828039aedb297c1f9920b638fffee6aabc (6.8-rc5)
CVE-2024-31083 [User-after-free in ProcRenderAddGlyphs]
- - xorg-server <unfixed>
+ - xorg-server 2:21.1.11-3
- xwayland <unfixed>
[bookworm] - xwayland <no-dsa> (Minor issue; Xwayland shouldn't be
running as root)
NOTE: Fixed by:
https://gitlab.freedesktop.org/xorg/xserver/-/commit/bdca6c3d1f5057eeb31609b1280fc93237b00c77
NOTE: https://lists.x.org/archives/xorg-announce/2024-April/003497.html
CVE-2024-31082 [Heap buffer overread/data leakage in ProcAppleDRICreatePixmap]
- - xorg-server <unfixed> (unimportant)
+ - xorg-server 2:21.1.11-3 (unimportant)
NOTE: Fixed by:
https://gitlab.freedesktop.org/xorg/xserver/-/commit/6c684d035c06fd41c727f0ef0744517580864cef
NOTE: https://lists.x.org/archives/xorg-announce/2024-April/003497.html
NOTE: Affects the XQuartz (X11 server and client libraries for macOS)
component
CVE-2024-31081 [Heap buffer overread/data leakage in ProcXIPassiveGrabDevice]
- - xorg-server <unfixed>
+ - xorg-server 2:21.1.11-3
- xwayland <unfixed>
[bookworm] - xwayland <no-dsa> (Minor issue; Xwayland shouldn't be
running as root)
NOTE: Fixed by:
https://gitlab.freedesktop.org/xorg/xserver/-/commit/3e77295f888c67fc7645db5d0c00926a29ffecee
NOTE: https://lists.x.org/archives/xorg-announce/2024-April/003497.html
CVE-2024-31080 [Heap buffer overread/data leakage in ProcXIGetSelectedEvents]
- - xorg-server <unfixed>
+ - xorg-server 2:21.1.11-3
- xwayland <unfixed>
[bookworm] - xwayland <no-dsa> (Minor issue; Xwayland shouldn't be
running as root)
NOTE: Fixed by:
https://gitlab.freedesktop.org/xorg/xserver/-/commit/96798fc1967491c80a4d0c8d9e0a80586cb2152b
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/965fb9174919c8440edc2faf51fe3119c08628a9
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/965fb9174919c8440edc2faf51fe3119c08628a9
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
