RHSA-2023:2805: Moderate: xorg-x11-server-Xwayland security update
Xwayland is an X server for running X clients under Wayland.<br>Security Fix(es):<br><li> xorg-x11-server: buffer overflow in GetCountedString() in xkb/xkb.c (CVE-2022-3550)</li> <li> xorg-x11-server: XkbGetKbdByName use-after-free (CVE-2022-4283)</li> <li> xorg-x11-server: XTestSwapFakeInput stack overflow (CVE-2022-46340)</li> <li> xorg-x11-server: XIPassiveUngrab out-of-bounds access (CVE-2022-46341)</li> <li> xorg-x11-server: XvdiSelectVideoNotify use-after-free (CVE-2022-46342)</li> <li> xorg-x11-server: ScreenSaverSetAttributes use-after-free (CVE-2022-46343)</li> <li> xorg-x11-server: XIChangeProperty out-of-bounds access (CVE-2022-46344)</li> <li> xorg-x11-server: DeepCopyPointerClasses use-after-free leads to privilege elevation (CVE-2023-0494)</li> <li> xorg-x11-server: memory leak in ProcXkbGetKbdByName() in xkb/xkb.c (CVE-2022-3551)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.<br>Additional Changes:<br>For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.8 Release Notes linked from the References section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2023:2805?
The severity of RHSA-2023:2805 is considered moderate due to the identified vulnerabilities that could lead to potential security risks.
How do I fix RHSA-2023:2805?
To fix RHSA-2023:2805, update the affected Xwayland package to the latest version provided by your distribution.
What specific vulnerabilities are addressed in RHSA-2023:2805?
RHSA-2023:2805 addresses a buffer overflow in _GetCountedString() and a use-after-free vulnerability in XkbGetKbdByName.
Who is affected by RHSA-2023:2805?
Users and systems running Xwayland from the X.Org Foundation may be affected by the vulnerabilities outlined in RHSA-2023:2805.
What is Xwayland in the context of RHSA-2023:2805?
Xwayland is an X server that allows X clients to run under the Wayland display server protocol.