Forum: >>> Magnum BBS <<<

Bug#1068470: xorg-server: double free in fix for CVE-2024-31083

From Julien Cristau@21:1/5 to All on Sat Apr 6 09:51:48 2024

XPost: linux.debian.bugs.dist

Source: xorg-server
Version: 2:21.1.11-3
Severity: grave
Tags: security upstream patch
Justification: user security hole
X-Debbugs-Cc: [email protected], Debian Security Team <[email protected]>

The latest security fixes introduced a regression, apparently replacing use-after-free with double-free in some circumstances: https://gitlab.freedesktop.org/xorg/xserver/-/issues/1659 https://gitlab.freedesktop.org/xorg/xserver/-/merge_requests/1476

Cheers,
Julien

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

Sysop:	Keyop
Location:	Huddersfield, West Yorkshire, UK
Users:	716
Nodes:	16 (2 / 14)
Uptime:	54:13:26
Calls:	12,117
Calls today:	8
Files:	15,010
Messages:	6,518,629
Posted today:	2