[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#1108073: xorg-server: Followup to CVE-2025-49176



Source: xorg-server
Version: 2:21.1.16-1.2
Severity: grave
Tags: security upstream
Justification: user security hole
X-Debbugs-Cc: carnil@debian.org, Debian Security Team <team@security.debian.org>

As per

https://www.openwall.com/lists/oss-security/2025/06/18/2
https://gitlab.freedesktop.org/xorg/xserver/-/commit/4fc4d76b2c7aaed61ed2653f997783a3714c4fe1

there is another case where the BigRequest length can cause an
overflow, so an additional commit is required as followup to the fixes
for CVE-2025-49176.

Regards,
Salvatore


Reply to: