Skip to main content

Boteraser | Website and Server Security Solutions

🛡️ SUSE-SU-2024:2776-1 — dri3proto (CVE-2024-31083 +2 more)

⚪ Unknown ✅ No Known Exploit OSV
N/A
CVSS Score
0 Low4 Medium7 High9 Critical10

Description

Security update for dri3proto, presentproto, wayland-protocols, xwayland

This update for dri3proto, presentproto, wayland-protocols, xwayland fixes the following issues:

Changes in presentproto:

  • update to version 1.4 (patch generated from xorgproto-2024.1 sources)

Changes in wayland-protocols:

  • Update to version 1.36:
  • xdg-dialog: fix missing namespace in protocol name
  • Changes from version 1.35:
  • cursor-shape-v1: Does not advertises the list of supported cursors
  • xdg-shell: add missing enum attribute to set_constraint_adjustment
  • xdg-shell: recommend against drawing decorations when tiled
  • tablet-v2: mark as stable
  • staging: add alpha-modifier protocol
  • Update to 1.36
  • Fix to the xdg dialog protocol
  • tablet-v2 protocol is now stable
  • alpha-modifier: new protocol
  • Bug fix to the cursor shape documentation
  • The xdg-shell protocol now also explicitly recommends against

drawing decorations outside of the window geometry when tiled

  • Update to 1.34:
  • xdg-dialog: new protocol
  • xdg-toplevel-drag: new protocol
  • Fix typo in ext-foreign-toplevel-list-v1
  • tablet-v2: clarify that name/id events are optional
  • linux-drm-syncobj-v1: new protocol
  • linux-explicit-synchronization-v1: add linux-drm-syncobj note
  • Update to version 1.33:
  • xdg-shell: Clarify what a toplevel by default includes
  • linux-dmabuf: sync changes from unstable to stable
  • linux-dmabuf: require all planes to use the same modifier
  • presentation-time: stop referring to Linux/glibc
  • security-context-v1: Make sandbox engine names use reverse-DNS
  • xdg-decoration: remove ambiguous wording in configure event
  • xdg-decoration: fix configure event summary
  • linux-dmabuf: mark as stable
  • linux-dmabuf: add note about implicit sync
  • security-context-v1: Document what can be done with the open

sockets

  • security-context-v1: Document out of band metadata for flatpak

Changes in dri3proto:

  • update to version 1.4 (patch generated from xorgproto-2024.1 sources)

Changes in xwayland:

  • Update to bugfix release 24.1.1 for the current stable 24.1

branch of Xwayland

  • xwayland: fix segment fault in xwl_glamor_gbm_init_main_dev
  • os: Explicitly include X11/Xmd.h for CARD32 definition to fix

building on i686

  • present: On *BSD, epoll-shim is needed to emulate eventfd()
  • xwayland: Stop on first unmapped child
  • xwayland/window-buffers: Promote xwl_window_buffer
  • xwayland/window-buffers: Add xwl_window_buffer_release()
  • xwayland/glamor/gbm: Copy explicit sync code to GLAMOR/GBM
  • xwayland/window-buffers: Use synchronization from GLAMOR/GBM
  • xwayland/window-buffers: Do not always set syncpnts
  • xwayland/window-buffers: Move code to submit pixmaps
  • xwayland/window-buffers: Set syncpnts for all pixmaps
  • xwayland: Move xwl_window disposal to its own function
  • xwayland: Make sure we do not leak xwl_window on destroy
  • wayland/window-buffers: Move buffer disposal to its own function
  • xwayland/window-buffers: optionally force disposal
  • wayland: Force disposal of windows buffers for root on destroy
  • xwayland: Check for pointer in xwl_seat_leave_ptr()
  • xwayland: remove includedir from pkgconfig
  • disable DPMS on sle15 due to missing proto package
  • Update to feature release 24.1.0
  • This fixes a couple of regressions introduced in the previous release

candidate versions along with a fix for XTEST emulation with EI.

+ xwayland: Send ei_device_frame on device_scroll_discrete

+ xwayland: Restore the ResizeWindow handler

+ xwayland: Handle rootful resize in ResizeWindow

+ xwayland: Move XRandR emulation to the ResizeWindow hook

+ xwayland: Use correct xwl_window lookup function in xwl_set_shape

  • eglstreams has been dropped
  • Update to bug fix relesae 23.2.7
  • m4: drop autoconf leftovers
  • xwayland: Send ei_device_frame on device_scroll_discrete
  • xwayland: Call drmFreeDevice for dma-buf default feedback
  • xwayland: Use drmDevicesEqual in xwl_dmabuf_feedback_tranche_done
  • dri3: Free formats in cache_formats_and_modifiers
  • xwayland/glamor: Handle depth 15 in gbm_format_for_depth
  • Revert 'xwayland/glamor: Avoid implicit redirection with depth 32 parent windows'
  • xwayland: Check for outputs before lease devices
  • xwayland: Do not remove output on withdraw if leased
  • Update to 23.2.6
  • This is a quick bug fix release to address a regression

introduced by the fix for CVE-2024-31083 in xwayland-23.2.5.

  • Security update 23.2.5

This release contains the 3 security fixes that actually apply to

Xwayland reported in the security advisory of April 3rd 2024

  • CVE-2024-31080
  • CVE-2024-31081
  • CVE-2024-31083

Additionally, it also contains a couple of other fixes, a copy/paste

error in the DeviceStateNotify event and a fix to enable buttons with

pointer gestures for backward compatibility with legacy X11 clients.

  • Don't provide xorg-x11-server-source
  • xwayla

Affected software

SUSE-SU-2024:2776-1 is recorded against 4 packages.

  • dri3proto (fixed in 1.2-150100.6.3.1)
  • presentproto (fixed in 1.3-150600.3.3.1)
  • wayland-protocols (fixed in 1.36-150600.4.3.1)
  • xwayland (fixed in 24.1.1-150600.5.3.1)

Timeline and source

Published on 6 August 2024 and last revised on 4 February 2026. No public exploit is currently recorded for this entry. Record sourced from OSV.

References

www.suse.com (Advisory)
bugzilla.suse.com (Report)
bugzilla.suse.com (Report)
bugzilla.suse.com (Report)
bugzilla.suse.com (Report)
bugzilla.suse.com (Report)
www.suse.com (Web)
www.suse.com (Web)
www.suse.com (Web)

Details

Severity Unknown
CVSS Score N/A
CVSS Vector N/A
CWE N/A
Public Exploit ✅ No
Source OSV
Published 2024-08-06
Updated 2026-08-20
Modified 2026-02-04
Fix URL N/A

Affected Packages

Software From version Fixed in
dri3proto 1.2-150100.6.3.1
presentproto 1.3-150600.3.3.1
wayland-protocols 1.36-150600.4.3.1
xwayland 24.1.1-150600.5.3.1

Free Vulnerability Check

Is your site affected by SUSE-SU-2024:2776-1?

BotEraser helps you identify potentially vulnerable plugins and themes by checking your installation against SUSE-SU-2024:2776-1 and other known CVE records.

Scan My Site Free →

No credit card required  ·  Results in minutes

ⓘ Data Notice: The information presented above has been compiled from publicly available internet sources. Boteraser aggregates this data solely for informational purposes and does not independently classify, evaluate, or endorse any findings about the vulnerabilities listed. The accuracy and completeness of this information is the sole responsibility of the original publishers. Boteraser and its operators accept no liability for any decisions made based on this data.