matthieu a631224042 Multiple issues have been found in the X server and Xwayland ...

implementations:

1) CVE-2023-6816 can be triggered by passing an invalid array index to
DeviceFocusEvent or ProcXIQueryPointer.

2) CVE-2024-0229 can be triggered if a device has both a button and a
key class and zero buttons.

3) CVE-2024-21885 can be triggered if a device with a given ID was
removed and a new device with the same ID added both in the same
operation.

4) CVE-2024-21886 can be triggered by disabling a master device with
disabled slave devices.

5) CVE-2024-0409 can be triggered by enabling SELinux
xserver_object_manager and running a client.

6) CVE-2024-0408 can be triggered by enabling SELinux
xserver_object_manager and creating a GLX PBuffer.

2024-01-16 12:34:23 +00:00

..

clientinfo.c

…

createcontext.c

…

extension_string.c

…

extension_string.h

…

glxbyteorder.h

…

glxcmds.c

…

glxcmdsswap.c

…

glxcontext.h

…

glxdrawable.h

…

glxdri2.c

…

glxdricommon.c

…

glxdricommon.h

…

glxdriswrast.c

…

glxext.c

…

glxext.h

…

glxscreens.c

…

glxscreens.h

…

glxserver.h

…

glxutil.h

…

indirect_dispatch_swap.c

…

indirect_dispatch.c

…

indirect_dispatch.h

…

indirect_program.c

…

indirect_reqsize.c

…

indirect_reqsize.h

…

indirect_size_get.c

…

indirect_size_get.h

…

indirect_size.h

…

indirect_table.c

…

indirect_table.h

…

indirect_texture_compression.c

…

indirect_util.c

…

indirect_util.h

…

Makefile.am

…

Makefile.in

…

meson.build

…

render2.c

…

render2swap.c

…

renderpix.c

…

renderpixswap.c

…

rensize.c

…

single2.c

…

single2swap.c

…

singlepix.c

…

singlepixswap.c

…

singlesize.c

…

singlesize.h

…

swap_interval.c

…

unpack.h

…

vnd_dispatch_stubs.c

…

vndcmds.c

…

vndext.c

…

vndserver.h

…

vndservermapping.c

…

vndservervendor.c

…

vndservervendor.h

…

xfont.c

…