From a607c3c14a7e6902e9600b3fb18d3c6265585c6cf1feb5bf07660eb2f93244a9 Mon Sep 17 00:00:00 2001 From: Stefan Dirsch Date: Fri, 24 Nov 2023 10:37:02 +0000 Subject: [PATCH] - This release contains the following patches mentioned in previous sle15 releases * U_Xext-fix-invalid-event-type-mask-in-XTestSwapFakeInp.patch: fixes regression introduced with security update for CVE-2022-46340 (bsc#1205874) * U_bsc1216135-Xi-randr-fix-handling-of-PropModeAppend-Prepend.patch: fix handling of PropModeAppend/Prepend ((CVE-2023-5367, ZDI-CAN-22153, bsc#1216135) * U_bsc1216261-0001-mi-fix-CloseScreen-initialization-order.patch, U_bsc1216261-0002-fb-properly-wrap-unwrap-CloseScreen.patch: Server Damage Object Use-After-Free Local Privilege Escalation Vulnerability (CVE-2023-5574, ZDI-CAN-21213, bsc#1216261) * U_bsc1216261-0003-dix-always-initialize-pScreen-CloseScreen.patch: fixes a regresion, which can trigger a segfault in Xwayland on exit, introduced by U_bsc1216261-0002-fb-properly-wrap-unwrap-CloseScreen.patch (CVE-2023-5574, ZDI-CAN-21213, bsc#1216261) OBS-URL: https://build.opensuse.org/package/show/X11:XOrg/xwayland?expand=0&rev=63 --- xwayland.changes | 21 +++++++++++++++++++++ 1 file changed, 21 insertions(+) diff --git a/xwayland.changes b/xwayland.changes index 471bcfb..4d61d75 100644 --- a/xwayland.changes +++ b/xwayland.changes @@ -1,3 +1,24 @@ +------------------------------------------------------------------- +Fri Nov 24 10:29:56 UTC 2023 - Stefan Dirsch + +- This release contains the following patches mentioned in previous + sle15 releases + * U_Xext-fix-invalid-event-type-mask-in-XTestSwapFakeInp.patch: + fixes regression introduced with security update for + CVE-2022-46340 (bsc#1205874) + * U_bsc1216135-Xi-randr-fix-handling-of-PropModeAppend-Prepend.patch: + fix handling of PropModeAppend/Prepend ((CVE-2023-5367, ZDI-CAN-22153, + bsc#1216135) + * U_bsc1216261-0001-mi-fix-CloseScreen-initialization-order.patch, + U_bsc1216261-0002-fb-properly-wrap-unwrap-CloseScreen.patch: + Server Damage Object Use-After-Free Local Privilege Escalation + Vulnerability (CVE-2023-5574, ZDI-CAN-21213, bsc#1216261) + * U_bsc1216261-0003-dix-always-initialize-pScreen-CloseScreen.patch: + fixes a regresion, which can trigger a segfault in Xwayland on + exit, introduced by + U_bsc1216261-0002-fb-properly-wrap-unwrap-CloseScreen.patch + (CVE-2023-5574, ZDI-CAN-21213, bsc#1216261) + ------------------------------------------------------------------- Wed Oct 25 10:39:17 UTC 2023 - Stefan Dirsch