Fedora Linux 8743 Published by

A xorg-x11-server-Xwayland security update has been released for Fedora 37.



SECURITY: Fedora 37 Update: xorg-x11-server-Xwayland-22.1.6-1.fc37


--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2022-721a78b7e5
2022-12-19 01:14:07.970828
--------------------------------------------------------------------------------

Name : xorg-x11-server-Xwayland
Product : Fedora 37
Version : 22.1.6
Release : 1.fc37
URL :   http://www.x.org
Summary : Xwayland
Description :
Xwayland is an X server for running X clients under Wayland.

--------------------------------------------------------------------------------
Update Information:

xwayland 22.1.6 Fixes CVE-2022-46340, CVE-2022-46341, CVE-2022-46342,
CVE-2022-46343, CVE-2022-46344, CVE-2022-4283
--------------------------------------------------------------------------------
ChangeLog:

* Wed Dec 14 2022 Peter Hutterer - 22.1.6-1
- xwayland 22.1.6
Fixes CVE-2022-46340, CVE-2022-46341, CVE-2022-46342, CVE-2022-46343,
CVE-2022-46344, CVE-2022-4283
--------------------------------------------------------------------------------
References:

[ 1 ] Bug #2151755 - CVE-2022-46340 xorg-x11-server: X.Org Server XTestSwapFakeInput stack overflow
  https://bugzilla.redhat.com/show_bug.cgi?id=2151755
[ 2 ] Bug #2151756 - CVE-2022-46341 xorg-x11-server: X.Org Server XIPassiveUngrab out-of-bounds access
  https://bugzilla.redhat.com/show_bug.cgi?id=2151756
[ 3 ] Bug #2151757 - CVE-2022-46342 xorg-x11-server: X.Org Server XvdiSelectVideoNotify use-after-free
  https://bugzilla.redhat.com/show_bug.cgi?id=2151757
[ 4 ] Bug #2151758 - CVE-2022-46343 xorg-x11-server: X.Org Server ScreenSaverSetAttributes use-after-free
  https://bugzilla.redhat.com/show_bug.cgi?id=2151758
[ 5 ] Bug #2151760 - CVE-2022-46344 xorg-x11-server: X.Org Server XIChangeProperty out-of-bounds access
  https://bugzilla.redhat.com/show_bug.cgi?id=2151760
[ 6 ] Bug #2151761 - CVE-2022-4283 xorg-x11-server: X.Org Server XkbGetKbdByName use-after-free
  https://bugzilla.redhat.com/show_bug.cgi?id=2151761
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2022-721a78b7e5' at the command
line. For more information, refer to the dnf documentation available at
  http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
  https://fedoraproject.org/keys
--------------------------------------------------------------------------------
_______________________________________________