Forum: >>> Magnum BBS <<<

Bug#1068470: xorg-server: double free in fix for CVE-2024-31083

From Julien Cristau@21:1/5 to All on Sat Apr 6 09:51:48 2024

XPost: linux.debian.bugs.dist

Source: xorg-server
Version: 2:21.1.11-3
Severity: grave
Tags: security upstream patch
Justification: user security hole
X-Debbugs-Cc: jcristau@debian.org, Debian Security Team <team@security.debian.org>

The latest security fixes introduced a regression, apparently replacing use-after-free with double-free in some circumstances: https://gitlab.freedesktop.org/xorg/xserver/-/issues/1659 https://gitlab.freedesktop.org/xorg/xserver/-/merge_requests/1476

Cheers,
Julien

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

Sysop:	Keyop
Location:	Huddersfield, West Yorkshire, UK
Users:	546
Nodes:	16 (0 / 16)
Uptime:	166:12:38
Calls:	10,385
Calls today:	2
Files:	14,057
Messages:	6,416,528