xwayland 2:22.1.1-1ubuntu0.4 source package in Ubuntu

Changelog

xwayland (2:22.1.1-1ubuntu0.4) jammy-security; urgency=medium

  * SECURITY UPDATE: XTestSwapFakeInput stack overflow
    - debian/patches/CVE-2022-46340.patch: disallow GenericEvents in
      XTestSwapFakeInput in Xext/xtest.c.
    - CVE-2022-46340
  * SECURITY UPDATE: XIPassiveUngrabDevice out-of-bounds access
    - debian/patches/CVE-2022-46341.patch: disallow passive grabs with a
      detail > 255 in Xi/xipassivegrab.c.
    - CVE-2022-46341
  * SECURITY UPDATE: XvdiSelectVideoNotify use-after-free
    - debian/patches/CVE-2022-46342.patch: free the XvRTVideoNotify when
      turning off from the same client in Xext/xvmain.c.
    - CVE-2022-46342
  * SECURITY UPDATE: ScreenSaverSetAttributes use-after-free
    - debian/patches/CVE-2022-46343.patch: free the screen saver resource
      when replacing it in Xext/saver.c.
    - CVE-2022-46343
  * SECURITY UPDATE: XIChangeProperty out-of-bounds access
    - debian/patches/CVE-2022-46344-1.patch: return an error from XI
      property changes if verification failed in Xi/xiproperty.c.
    - debian/patches/CVE-2022-46344-2.patch: avoid integer truncation in
      length check of ProcXIChangeProperty in Xi/xiproperty.c.
    - CVE-2022-46344
  * SECURITY UPDATE: XkbGetKbdByName use-after-free
    - debian/patches/CVE-2022-4283.patch: reset the radio_groups pointer to
      NULL after freeing it in xkb/xkbUtils.c.
    - CVE-2022-4283

 -- Marc Deslauriers <email address hidden>  Wed, 07 Dec 2022 09:12:14 -0500

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Jammy
Original maintainer:
Ubuntu Developers
Architectures:
linux-any
Section:
x11
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
xwayland_22.1.1.orig.tar.xz 1.2 MiB f5d0e0ba37e19bb87c62f61da5970bd204939f2120620964bed4cc8495baa657
xwayland_22.1.1.orig.tar.xz.asc 195 bytes 5cf0f7c63c5943a24ab012e89fd08f66c0c2ab9a2f1a08297e3ab7967c330a23
xwayland_22.1.1-1ubuntu0.4.debian.tar.xz 42.4 KiB f6b94c8f3a0bcb79b87bb0591081fa06729fd8481fe489825a2cd8e758835738
xwayland_22.1.1-1ubuntu0.4.dsc 2.5 KiB 110d931074a0cb6cf9735ccfbea28ba2a5e163f8cb7d89c9893a8311fb0471ac

View changes file

Binary packages built by this source

xwayland: X server for running X clients under Wayland

 This package provides an X server running on top of wayland, using wayland
 input devices for input and forwarding either the root window or individual
 top-level windows as wayland surfaces.

xwayland-dbgsym: debug symbols for xwayland