Most recent entries from all

ALSA-2023:2786 — Moderate: wayland security, bug fix, and enhancement update

Affected: AlmaLinux:8: libwayland-client, AlmaLinux:8: libwayland-cursor, AlmaLinux:8: libwayland-egl, AlmaLinux:8: libwayland-server, AlmaLinux:8: wayland-devel

Wayland is a protocol for a compositor to talk to its clients, as well as a C library implementation of that protocol. The compositor can be a standalone display server running on Linux kernel modesetting and evdev input devices, an X application, or a wayland client itself. The clients can be traditional applications, X servers (rootless or fullscreen) or other display servers.

The following packages have been upgraded to a later upstream version: wayland (1.21.0). (BZ#2137625)

Security Fix(es):

* wayland: libwayland-server wl_shm reference-count overflow (CVE-2021-3782)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

bdu:2024-07302

Withdrawn: BELL-CVE-2021-3782 — CVE-2021-3782 does not affect BellSoft software

Withdrawn by the publisher.

EUVD-2026-241007

fkie_cve-2021-3782

An internal reference count is held on the buffer pool, incremented every time a new buffer is created from the pool. The reference count is maintained as an int; on LP64 systems this can cause the reference count to overflow if the client creates a large number of wl_shm buffer objects, or if it can coerce the server to create a large number of external references to the buffer storage. With the reference count overflowing, a use-after-free can be constructed on the wl_shm_pool tracking structure, where values may be incremented or decremented; it may also be possible to construct a limited oracle to leak 4 bytes of server-side memory to the attacking client at a time.

GHSA-pvw2-9h4r-c5cr

gsd-2021-3782

msrc_CVE-2021-3782 — An internal reference count is held on the buffer pool incremented every time a new buffer is created from the pool. Th…

msrc_CVE-2021-3782

OESA-2022-1920 — wayland security update

Affected: openEuler:20.03-LTS-SP1: wayland, openEuler:20.03-LTS-SP3: wayland, openEuler:22.03-LTS: wayland

Wayland is a protocol for a compositor to talk to its clients as well as a C library implementation of that protocol. The compositor can be a standalone display server running on Linux kernel modesetting and evdev input devices, an X application, or a wayland client itself. The clients can be traditional applications, X servers (rootless or fullscreen) or other display servers. Part of the Wayland project is also the Weston reference implementation of a Wayland compositor. Weston can run as an X client or under Linux KMS and ships with a few demo clients. The Weston compositor is a minimal and fast compositor and is suitable for many embedded and mobile use cases. Security Fix(es): An internal reference count is held on the buffer pool, incremented every time a new buffer is created from the pool. The reference count is maintained as an int; on LP64 systems this can cause the reference count to overflow if the client creates a large number of wl_shm buffer objects, or if it can coerce the server to create a large number of external references to the buffer storage. With the reference count overflowing, a use-after-free can be constructed on the wl_shm_pool tracking structure, where values may be incremented or decremented; it may also be possible to construct a limited oracle to leak 4 bytes of server-side memory to the attacking client at a time.(CVE-2021-3782)

RHSA-2023:2786 — Red Hat Security Advisory: wayland security, bug fix, and enhancement update

wayland: libwayland-server wl_shm reference-count overflow

RLSA-2023:2786 — Moderate: wayland security, bug fix, and enhancement update

Affected: Rocky Linux:8: wayland

The following packages have been upgraded to a later upstream version: wayland (1.21.0). (BZ#2137625)

Security Fix(es):

* wayland: libwayland-server wl_shm reference-count overflow (CVE-2021-3782)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 8.8 Release Notes linked from the References section.

SUSE-SU-2023:1864-1 — Security update for wayland

Security update for wayland

UBUNTU-CVE-2021-3782

Affected: Ubuntu:Pro:16.04:LTS: wayland, Ubuntu:18.04:LTS: wayland, Ubuntu:20.04:LTS: wayland, Ubuntu:22.04:LTS: wayland

WID-SEC-W-2023-1238 — Red Hat Enterprise Linux: Mehrere Schwachstellen in verschiedenen Komponenten

Ein entfernter, anonymer oder lokaler Angreifer kann mehrere Schwachstellen in verschiedenen Komponenten von Red Hat Enterprise Linux ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.