CVE-2024-0409
Xorg-x11-server: selinux context corruption
Résumé
Xorg-x11-server: selinux context corruption
Description d'origine
La description telle que publiée par la source (souvent en anglais).
A flaw was found in the X.Org server. The cursor code in both Xephyr and Xwayland uses the wrong type of private at creation. It uses the cursor bits type with the cursor as private, and when initiating the cursor, that overwrites the XSELINUX context.
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Debian DEBIAN-CVE-2024-0409 xorg-server Corrigé dans: 2:1.20.11-1+deb11u11
Références
- advisory access.redhat.com
- advisory access.redhat.com
- advisory access.redhat.com
- advisory access.redhat.com
- advisory access.redhat.com
- advisory access.redhat.com
- advisory github.com
- advisory nvd.nist.gov
- advisory security.gentoo.org
- advisory security.netapp.com
- package gitlab.freedesktop.org
- report bugzilla.redhat.com
- web access.redhat.com
- web lists.debian.org
- web lists.fedoraproject.org
- web lists.fedoraproject.org
- web lists.fedoraproject.org