nx-libs icon indicating copy to clipboard operation
nx-libs copied to clipboard

Published 20 hours ago • verified publisher icon ArcticaProject

CVE-2020-25712: Fix XkbSetDeviceInfo() and SetDeviceIndicators() heap overflows.

Open sunweaver opened this issue 4 years ago • 1 comments

X.Org commit to fix this: https://gitlab.freedesktop.org/xorg/xserver/-/commit/87c64fc5b0db9f62f4e361444f4b60501ebf67b9

We need to investigate, if XKB extension in nxagent is affected by this, too.

sunweaver avatar Dec 10 '20 09:12 sunweaver

Note that only backporting the single fix is not enough. Similar checks have been added before to xkb.c. The CVE patch just adds some more..

uli42 avatar Jan 15 '21 15:01 uli42