Alpine/xwayland: high 7.8
A flaw was found in X.Org server. In the XISendDeviceHierarchyEvent function, it is possible to exceed the allocated array length when certain new device IDs are added to the xXIHierarchyInfo struct.
Action: Upgrade xwayland to 23.2.4-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 23.2.4-r0 | - |
Fixed versions
| 23.2.4-r0 |
Sources
- osv: ALPINE-CVE-2024-21885#Alpine:v3.23/xwayland
- https://security.alpinelinux.org/vuln/CVE-2024-21885
published · modified · JSON