Published: 18/01/2024 Updated: 21/11/2024

A flaw was found in the X.Org server. The cursor code in both Xephyr and Xwayland uses the wrong type of private at creation. It uses the cursor bits type with the cursor as private, and when initiating the cursor, that overwrites the XSELINUX context.

Vulnerable Product	Search on Vulmon	Subscribe to Product
tigervnc tigervnc
x.org xorg-server
x.org xwayland
fedoraproject fedora 39
redhat enterprise linux 6.0
redhat enterprise linux 7.0
redhat enterprise linux 8.0
redhat enterprise linux 9.0
redhat enterprise linux desktop 7.0
redhat enterprise linux for ibm z systems 7.0
redhat enterprise linux for power big endian 7.0
redhat enterprise linux for power little endian 7.0
redhat enterprise linux for scientific computing 7.0
redhat enterprise linux server 7.0
redhat enterprise linux workstation 7.0

Synopsis Important: xorg-x11-server security update Type/Severity Security Advisory: Important Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for xorg-x11-server is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this upd ...

Heap buffer overflow in DeviceFocusEvent and ProcXIQueryPointer NOTE: listsxorg/archives/xorg/2024-January/061525htmlNOTE: gitlabfreedesktoporg/xorg/xserver/-/commit/9e2ecb2af8302dedc49cb6a63ebe063c58a9e7e3 (CVE-2023-6816) Reattaching to different master device may lead to out-of-bounds memory access NOTE: listsxorg/a ...

DescriptionA flaw was found in the XOrg server The cursor code in both Xephyr and Xwayland uses the wrong type of private at creation It uses the cursor bits type with the cursor as private, and when initiating the cursor, that overwrites the XSELINUX contextA flaw was found in the XOrg server The cursor code in both Xephyr and Xwaylan ...

LTS-120 is being updated in the LTS (Long Term Support) channel, version 12006099310 (Platform Version: 156621070), for most ChromeOS devices Release notes for LTS-120 can be found here Want to know more about Long-term Support? Click hereThis update contains selective Security fixes, including:Chrome Browser Security Fixes3392 ...

---------- Forwarded message --------- From: Jose Exposito Quintana <jexposit () redhat com> Date: Tue, Jan 16, 2024 at 3:24 PM Subject: XOrg Security Advisory: Issues in XOrg X server prior to 21111 and Xwayland prior to 2324 To: <xorg-announce () lists x org> XOrg Security Advisory: January 16, 2024 Issues in XOrg X serve ...

https://nvd.nist.gov https://access.redhat.com/errata/RHSA-2024:0320 https://alas.aws.amazon.com/AL2/ALAS-2024-2455.html

CVE-2024-0409

Vulnerability Summary

Vendor Advisories

Mailing Lists

References

Vulmon Search

About

Products

Connect