{"schemaVersion":3,"id":"SUSE-SU-2024:2776-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Security update for dri3proto, presentproto, wayland-protocols, xwayland\n\nThis update for dri3proto, presentproto, wayland-protocols, xwayland fixes the following issues:\n\nChanges in presentproto:\n\n* update to version 1.4 (patch generated from xorgproto-2024.1 sources)\n\nChanges in wayland-protocols:\n\n- Update to version 1.36:\n\n  * xdg-dialog: fix missing namespace in protocol name\n\n- Changes from version 1.35:\n\n  * cursor-shape-v1: Does not advertises the list of supported cursors\n  * xdg-shell: add missing enum attribute to set_constraint_adjustment\n  * xdg-shell: recommend against drawing decorations when tiled\n  * tablet-v2: mark as stable\n  * staging: add alpha-modifier protocol\n\n- Update to 1.36\n\n  * Fix to the xdg dialog protocol\n  * tablet-v2 protocol is now stable\n  * alpha-modifier: new protocol\n  * Bug fix to the cursor shape documentation\n  * The xdg-shell protocol now also explicitly recommends against\n    drawing decorations outside of the window geometry when tiled\n\n- Update to 1.34:\n\n  * xdg-dialog: new protocol\n  * xdg-toplevel-drag: new protocol\n  * Fix typo in ext-foreign-toplevel-list-v1\n  * tablet-v2: clarify that name/id events are optional\n  * linux-drm-syncobj-v1: new protocol\n  * linux-explicit-synchronization-v1: add linux-drm-syncobj note\n\n- Update to version 1.33:\n\n  * xdg-shell: Clarify what a toplevel by default includes\n  * linux-dmabuf: sync changes from unstable to stable\n  * linux-dmabuf: require all planes to use the same modifier\n  * presentation-time: stop referring to Linux/glibc\n  * security-context-v1: Make sandbox engine names use reverse-DNS\n  * xdg-decoration: remove ambiguous wording in configure event\n  * xdg-decoration: fix configure event summary\n  * linux-dmabuf: mark as stable\n  * linux-dmabuf: add note about implicit sync\n  * security-context-v1: Document what can be done with the open\n    sockets\n  * security-context-v1: Document out of band metadata for flatpak\n\nChanges in dri3proto:\n\n* update to version 1.4 (patch generated from xorgproto-2024.1 sources)\n\nChanges in xwayland:\n\n\n- Update to bugfix release 24.1.1 for the current stable 24.1\n  branch of Xwayland\n\n  * xwayland: fix segment fault in `xwl_glamor_gbm_init_main_dev`\n  * os: Explicitly include X11/Xmd.h for CARD32 definition to fix\n    building on i686\n  * present: On *BSD, epoll-shim is needed to emulate eventfd()\n  * xwayland: Stop on first unmapped child\n  * xwayland/window-buffers: Promote xwl_window_buffer\n  * xwayland/window-buffers: Add xwl_window_buffer_release()\n  * xwayland/glamor/gbm: Copy explicit sync code to GLAMOR/GBM\n  * xwayland/window-buffers: Use synchronization from GLAMOR/GBM\n  * xwayland/window-buffers: Do not always set syncpnts\n  * xwayland/window-buffers: Move code to submit pixmaps\n  * xwayland/window-buffers: Set syncpnts for all pixmaps\n  * xwayland: Move xwl_window disposal to its own function\n  * xwayland: Make sure we do not leak xwl_window on destroy\n  * wayland/window-buffers: Move buffer disposal to its own function\n  * xwayland/window-buffers: optionally force disposal\n  * wayland: Force disposal of windows buffers for root on destroy\n  * xwayland: Check for pointer in xwl_seat_leave_ptr()\n  * xwayland: remove includedir from pkgconfig\n\n- disable DPMS on sle15 due to missing proto package\n\n- Update to feature release 24.1.0\n  * This fixes a couple of regressions introduced in the previous release\n    candidate versions along with a fix for XTEST emulation with EI.\n    + xwayland: Send ei_device_frame on device_scroll_discrete\n    + xwayland: Restore the ResizeWindow handler\n    + xwayland: Handle rootful resize in ResizeWindow\n    + xwayland: Move XRandR emulation to the ResizeWindow hook\n    + xwayland: Use correct xwl_window lookup function in xwl_set_shape\n- eglstreams has been dropped\n\n- Update to bug fix relesae 23.2.7\n  * m4: drop autoconf leftovers\n  * xwayland: Send ei_device_frame on device_scroll_discrete\n  * xwayland: Call drmFreeDevice for dma-buf default feedback\n  * xwayland: Use drmDevicesEqual in xwl_dmabuf_feedback_tranche_done\n  * dri3: Free formats in cache_formats_and_modifiers\n  * xwayland/glamor: Handle depth 15 in gbm_format_for_depth\n  * Revert 'xwayland/glamor: Avoid implicit redirection with depth 32 parent windows'\n  * xwayland: Check for outputs before lease devices\n  * xwayland: Do not remove output on withdraw if leased\n\n- Update to 23.2.6\n  * This is a quick bug fix release to address a regression\n    introduced by the fix for CVE-2024-31083 in xwayland-23.2.5.\n\n- Security update 23.2.5\n\n  This release contains the 3 security fixes that actually apply to\n  Xwayland reported in the security advisory of April 3rd 2024\n\n  * CVE-2024-31080\n  * CVE-2024-31081\n  * CVE-2024-31083\n\n  Additionally, it also contains a couple of other fixes, a copy/paste\n  error in the DeviceStateNotify event and a fix to enable buttons with\n  pointer gestures for backward compatibility with legacy X11 clients.\n\n- Don't provide xorg-x11-server-source\n  * xwayland sources are not meant for a generic server.","dates":{"published":"2024-08-06T12:33:59.000Z","modified":"2026-02-04T03:29:05.825Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"opensuse","product":"dri3proto&distro=openSUSE Leap 15.5","name":"dri3proto","label":"dri3proto&distro=openSUSE Leap 15.5","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/dri3proto&distro=openSUSE Leap 15.5","purlType":"rpm","versions":[{"text":"< 1.2-150100.6.3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.2-150100.6.3.1","eol":null,"hubHref":null},{"vendor":"opensuse","product":"dri3proto&distro=openSUSE Leap 15.6","name":"dri3proto","label":"dri3proto&distro=openSUSE Leap 15.6","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/dri3proto&distro=openSUSE Leap 15.6","purlType":"rpm","versions":[{"text":"< 1.2-150100.6.3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.2-150100.6.3.1","eol":null,"hubHref":null},{"vendor":"opensuse","product":"presentproto&distro=openSUSE Leap 15.6","name":"presentproto","label":"presentproto&distro=openSUSE Leap 15.6","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/presentproto&distro=openSUSE Leap 15.6","purlType":"rpm","versions":[{"text":"< 1.3-150600.3.3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.3-150600.3.3.1","eol":null,"hubHref":null},{"vendor":"opensuse","product":"wayland-protocols&distro=openSUSE Leap 15.6","name":"wayland-protocols","label":"wayland-protocols&distro=openSUSE Leap 15.6","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/wayland-protocols&distro=openSUSE Leap 15.6","purlType":"rpm","versions":[{"text":"< 1.36-150600.4.3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.36-150600.4.3.1","eol":null,"hubHref":null},{"vendor":"opensuse","product":"xwayland&distro=openSUSE Leap 15.6","name":"xwayland","label":"xwayland&distro=openSUSE Leap 15.6","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/xwayland&distro=openSUSE Leap 15.6","purlType":"rpm","versions":[{"text":"< 24.1.1-150600.5.3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 24.1.1-150600.5.3.1","eol":null,"hubHref":null},{"vendor":"suse","product":"dri3proto&distro=SUSE Linux Enterprise Module for Development Tools 15 SP5","name":"dri3proto","label":"dri3proto&distro=SUSE Linux Enterprise Module for Development Tools 15 SP5","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/dri3proto&distro=SUSE Linux Enterprise Module for Development Tools 15 SP5","purlType":"rpm","versions":[{"text":"< 1.2-150100.6.3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.2-150100.6.3.1","eol":null,"hubHref":null},{"vendor":"suse","product":"dri3proto&distro=SUSE Linux Enterprise Module for Development Tools 15 SP6","name":"dri3proto","label":"dri3proto&distro=SUSE Linux Enterprise Module for Development Tools 15 SP6","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/dri3proto&distro=SUSE Linux Enterprise Module for Development Tools 15 SP6","purlType":"rpm","versions":[{"text":"< 1.2-150100.6.3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.2-150100.6.3.1","eol":null,"hubHref":null},{"vendor":"suse","product":"presentproto&distro=SUSE Linux Enterprise Module for Development Tools 15 SP6","name":"presentproto","label":"presentproto&distro=SUSE Linux Enterprise Module for Development Tools 15 SP6","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/presentproto&distro=SUSE Linux Enterprise Module for Development Tools 15 SP6","purlType":"rpm","versions":[{"text":"< 1.3-150600.3.3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.3-150600.3.3.1","eol":null,"hubHref":null},{"vendor":"suse","product":"wayland-protocols&distro=SUSE Linux Enterprise Module for Package Hub 15 SP6","name":"wayland-protocols","label":"wayland-protocols&distro=SUSE Linux Enterprise Module for Package Hub 15 SP6","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/wayland-protocols&distro=SUSE Linux Enterprise Module for Package Hub 15 SP6","purlType":"rpm","versions":[{"text":"< 1.36-150600.4.3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.36-150600.4.3.1","eol":null,"hubHref":null},{"vendor":"suse","product":"xwayland&distro=SUSE Linux Enterprise Workstation Extension 15 SP6","name":"xwayland","label":"xwayland&distro=SUSE Linux Enterprise Workstation Extension 15 SP6","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/xwayland&distro=SUSE Linux Enterprise Workstation Extension 15 SP6","purlType":"rpm","versions":[{"text":"< 24.1.1-150600.5.3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 24.1.1-150600.5.3.1","eol":null,"hubHref":null}],"affectedCount":10,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20242776-1/","label":"www.suse.com/support/update/announcement/2024/suse-su-20242776-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1219892","label":"bugzilla.suse.com/1219892","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1222309","label":"bugzilla.suse.com/1222309","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1222310","label":"bugzilla.suse.com/1222310","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1222312","label":"bugzilla.suse.com/1222312","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1222442","label":"bugzilla.suse.com/1222442","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2024-31080","label":"www.suse.com/security/cve/CVE-2024-31080","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2024-31081","label":"www.suse.com/security/cve/CVE-2024-31081","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2024-31083","label":"www.suse.com/security/cve/CVE-2024-31083","hostname":"www.suse.com","tags":["WEB"]}],"lineage":{"upstream":["CVE-2024-31080","CVE-2024-31081","CVE-2024-31083"],"downstream":[],"duplicates":[],"related":["CVE-2024-31080","CVE-2024-31081","CVE-2024-31083"]},"timeline":[{"kind":"published","date":"2024-08-06T12:33:59.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-02-04T03:29:05.825Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-22T16:14:28.383Z","stale":false,"partial":false}}