UbuntuUpdates.org

Package "xserver-xephyr"

Name: xserver-xephyr

Description:

nested X server
Latest version: 2:21.1.4-2ubuntu1.7~22.04.10
Release: jammy (22.04)
Level: updates
Repository: main
Head package: xorg-server
Homepage: https://www.x.org/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "xserver-xephyr"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "xserver-xephyr" in Jammy

Repository Area Version
base main 2:21.1.3-2ubuntu2
security main 2:21.1.4-2ubuntu1.7~22.04.10
proposed main 2:21.1.4-2ubuntu1.7~22.04.11

Changelog

Version: 2:21.1.4-2ubuntu1.7~22.04.2 2023-10-25 20:13:01 UTC

  xorg-server (2:21.1.4-2ubuntu1.7~22.04.2) jammy-security; urgency=medium

  * SECURITY UPDATE: OOB write in XIChangeDeviceProperty and
    RRChangeOutputProperty
    - debian/patches/CVE-2023-5367.patch: fix handling of PropModeAppend
      and PropModePrepend in Xi/xiproperty.c, randr/rrproperty.c.
    - CVE-2023-5367
  * SECURITY UPDATE: Use-after-free bug in DestroyWindow
    - debian/patches/CVE-2023-5380.patch: reset the PointerWindows
      reference on screen switch in dix/enterleave.h, include/eventstr.h,
      mi/mipointer.c.
    - CVE-2023-5380

 -- Marc Deslauriers <email address hidden> Mon, 23 Oct 2023 12:30:42 -0400
Source diff to previous version
CVE-2023-5367 X.Org server: OOB write in XIChangeDeviceProperty/RRChangeOutputProperty
CVE-2023-5380 Use-after-free bug in DestroyWindow

Version: 2:21.1.4-2ubuntu1.7~22.04.1 2023-04-13 11:07:01 UTC

  xorg-server (2:21.1.4-2ubuntu1.7~22.04.1) jammy; urgency=medium

  * Backport to jammy. (LP: #2009767)

 -- Timo Aaltonen <email address hidden> Tue, 04 Apr 2023 09:20:09 +0300
Source diff to previous version

Version: 2:21.1.3-2ubuntu2.9 2023-03-29 21:07:00 UTC

  xorg-server (2:21.1.3-2ubuntu2.9) jammy-security; urgency=medium

  * SECURITY UPDATE: Overlay Window Use-After-Free
    - debian/patches/CVE-2023-1393.patch: fix use-after-free of the COW in
      composite/compwindow.c.
    - CVE-2023-1393

 -- Marc Deslauriers <email address hidden> Wed, 29 Mar 2023 08:52:16 -0400
Source diff to previous version

Version: 2:21.1.3-2ubuntu2.8 2023-03-20 21:06:54 UTC

  xorg-server (2:21.1.3-2ubuntu2.8) jammy; urgency=medium

  * patches: Force update LEDs after device state update. (LP: #1993621)

 -- Timo Aaltonen <email address hidden> Tue, 21 Feb 2023 18:01:37 +0200
Source diff to previous version
1993621 Force update keyboard LEDs after calling EnableDevice to fix its hardware state after VT switching

Version: 2:21.1.3-2ubuntu2.7 2023-02-07 21:07:06 UTC

  xorg-server (2:21.1.3-2ubuntu2.7) jammy-security; urgency=medium

  * SECURITY UPDATE: DeepCopyPointerClasses use-after-free
    - debian/patches/CVE-2023-0494.patch: fix potential use-after-free in
      Xi/exevents.c.
    - CVE-2023-0494

 -- Marc Deslauriers <email address hidden> Tue, 07 Feb 2023 07:47:22 -0500
CVE-2023-0494 Xi: fix potential use-after-free in DeepCopyPointerClasses


About   -   Send Feedback to @ubuntu_updates