[Buildroot] [PATCH 1/2] package/xserver_xorg-server: security bump to version 21.1.9

Peter Korsgaard peter at korsgaard.com
Fri Jan 5 10:46:03 UTC 2024


>>>>> "Peter" == Peter Korsgaard <peter at korsgaard.com> writes:

 > Fixes the following security issues:
 > - CVE-2023-5367 X.Org server: OOB write in
 >   XIChangeDeviceProperty/RRChangeOutputProperty

 > - CVE-2023-5380: Use-after-free bug in DestroyWindow

 > - CVE-2023-5574: Use-after-free bug in DamageDestroy

 > For details, see the advisory:
 > https://lists.x.org/archives/xorg-announce/2023-October/003430.html

 > Signed-off-by: Peter Korsgaard <peter at korsgaard.com>

Committed to 2023.02.x and 2023.11.x, thanks.

-- 
Bye, Peter Korsgaard



More information about the buildroot mailing list