Security update for wayland SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2023:1860-1 Final 1 1 2023-04-14T15:36:16Z current 2023-04-14T15:36:16Z 2023-04-14T15:36:16Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for wayland This update for wayland fixes the following issues: - CVE-2021-3782: Fixed a reference-count overflow in libwayland-server SHM handling. (bsc#1190486) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Image SLES15-SP4-SAP-2023-1860,Image SLES15-SP4-SAP-Azure-2023-1860,Image SLES15-SP4-SAP-Azure-LI-BYOS-2023-1860,Image SLES15-SP4-SAP-Azure-LI-BYOS-Production-2023-1860,Image SLES15-SP4-SAP-Azure-VLI-BYOS-2023-1860,Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production-2023-1860,Image SLES15-SP4-SAP-BYOS-2023-1860,Image SLES15-SP4-SAP-BYOS-Azure-2023-1860,Image SLES15-SP4-SAP-BYOS-EC2-2023-1860,Image SLES15-SP4-SAP-BYOS-GCE-2023-1860,Image SLES15-SP4-SAP-EC2-2023-1860,Image SLES15-SP4-SAP-GCE-2023-1860,Image SLES15-SP4-SAP-Hardened-2023-1860,Image SLES15-SP4-SAP-Hardened-Azure-2023-1860,Image SLES15-SP4-SAP-Hardened-BYOS-2023-1860,Image SLES15-SP4-SAP-Hardened-BYOS-Azure-2023-1860,Image SLES15-SP4-SAP-Hardened-BYOS-EC2-2023-1860,Image SLES15-SP4-SAP-Hardened-BYOS-GCE-2023-1860,Image SLES15-SP4-SAP-Hardened-EC2-2023-1860,Image SLES15-SP4-SAP-Hardened-GCE-2023-1860,Image SLES15-SP4-SAPCAL-2023-1860,Image SLES15-SP4-SAPCAL-Azure-2023-1860,Image SLES15-SP4-SAPCAL-EC2-2023-1860,Image SLES15-SP4-SAPCAL-GCE-2023-1860,SUSE-2023-1860,SUSE-SLE-Micro-5.3-2023-1860,SUSE-SLE-Micro-5.4-2023-1860,SUSE-SLE-Module-Basesystem-15-SP4-2023-1860,openSUSE-Leap-Micro-5.3-2023-1860,openSUSE-SLE-15.4-2023-1860 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2023/suse-su-20231860-1/ Link for SUSE-SU-2023:1860-1 https://lists.suse.com/pipermail/sle-security-updates/2023-April/014454.html E-Mail link for SUSE-SU-2023:1860-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1190486 SUSE Bug 1190486 https://www.suse.com/security/cve/CVE-2021-3782/ SUSE CVE CVE-2021-3782 page Image SLES15-SP4-SAP Image SLES15-SP4-SAP-Azure Image SLES15-SP4-SAP-Azure-LI-BYOS Image SLES15-SP4-SAP-Azure-LI-BYOS-Production Image SLES15-SP4-SAP-Azure-VLI-BYOS Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production Image SLES15-SP4-SAP-BYOS Image SLES15-SP4-SAP-BYOS-Azure Image SLES15-SP4-SAP-BYOS-EC2 Image SLES15-SP4-SAP-BYOS-GCE Image SLES15-SP4-SAP-EC2 Image SLES15-SP4-SAP-GCE Image SLES15-SP4-SAP-Hardened Image SLES15-SP4-SAP-Hardened-Azure Image SLES15-SP4-SAP-Hardened-BYOS Image SLES15-SP4-SAP-Hardened-BYOS-Azure Image SLES15-SP4-SAP-Hardened-BYOS-EC2 Image SLES15-SP4-SAP-Hardened-BYOS-GCE Image SLES15-SP4-SAP-Hardened-EC2 Image SLES15-SP4-SAP-Hardened-GCE Image SLES15-SP4-SAPCAL Image SLES15-SP4-SAPCAL-Azure Image SLES15-SP4-SAPCAL-EC2 Image SLES15-SP4-SAPCAL-GCE SUSE Linux Enterprise Micro 5.3 SUSE Linux Enterprise Micro 5.4 SUSE Linux Enterprise Module for Basesystem 15 SP4 openSUSE Leap 15.4 openSUSE Leap Micro 5.3 libwayland-client0-1.19.0-150400.3.3.1 libwayland-server0-1.19.0-150400.3.3.1 libwayland-cursor0-1.19.0-150400.3.3.1 libwayland-egl1-99~1.19.0-150400.3.3.1 libwayland-client0-32bit-1.19.0-150400.3.3.1 libwayland-client0-64bit-1.19.0-150400.3.3.1 libwayland-cursor0-32bit-1.19.0-150400.3.3.1 libwayland-cursor0-64bit-1.19.0-150400.3.3.1 libwayland-egl1-32bit-99~1.19.0-150400.3.3.1 libwayland-egl1-64bit-99~1.19.0-150400.3.3.1 libwayland-server0-32bit-1.19.0-150400.3.3.1 libwayland-server0-64bit-1.19.0-150400.3.3.1 wayland-devel-1.19.0-150400.3.3.1 wayland-devel-32bit-1.19.0-150400.3.3.1 wayland-devel-64bit-1.19.0-150400.3.3.1 libwayland-client0-1.19.0-150400.3.3.1 as a component of Image SLES15-SP4-SAP libwayland-server0-1.19.0-150400.3.3.1 as a component of Image SLES15-SP4-SAP libwayland-client0-1.19.0-150400.3.3.1 as a component of Image SLES15-SP4-SAP-Azure libwayland-server0-1.19.0-150400.3.3.1 as a component of Image SLES15-SP4-SAP-Azure libwayland-client0-1.19.0-150400.3.3.1 as a component of Image SLES15-SP4-SAP-Azure-LI-BYOS libwayland-cursor0-1.19.0-150400.3.3.1 as a component of Image SLES15-SP4-SAP-Azure-LI-BYOS libwayland-egl1-99~1.19.0-150400.3.3.1 as a component of Image SLES15-SP4-SAP-Azure-LI-BYOS libwayland-server0-1.19.0-150400.3.3.1 as a component of Image SLES15-SP4-SAP-Azure-LI-BYOS libwayland-client0-1.19.0-150400.3.3.1 as a component of Image SLES15-SP4-SAP-Azure-LI-BYOS-Production libwayland-cursor0-1.19.0-150400.3.3.1 as a component of Image SLES15-SP4-SAP-Azure-LI-BYOS-Production libwayland-egl1-99~1.19.0-150400.3.3.1 as a component of Image SLES15-SP4-SAP-Azure-LI-BYOS-Production libwayland-server0-1.19.0-150400.3.3.1 as a component of Image SLES15-SP4-SAP-Azure-LI-BYOS-Production libwayland-client0-1.19.0-150400.3.3.1 as a component of Image SLES15-SP4-SAP-Azure-VLI-BYOS libwayland-cursor0-1.19.0-150400.3.3.1 as a component of Image SLES15-SP4-SAP-Azure-VLI-BYOS libwayland-egl1-99~1.19.0-150400.3.3.1 as a component of Image SLES15-SP4-SAP-Azure-VLI-BYOS libwayland-server0-1.19.0-150400.3.3.1 as a component of Image SLES15-SP4-SAP-Azure-VLI-BYOS libwayland-client0-1.19.0-150400.3.3.1 as a component of Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production libwayland-cursor0-1.19.0-150400.3.3.1 as a component of Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production libwayland-egl1-99~1.19.0-150400.3.3.1 as a component of Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production libwayland-server0-1.19.0-150400.3.3.1 as a component of Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production libwayland-server0-1.19.0-150400.3.3.1 as a component of Image SLES15-SP4-SAP-BYOS libwayland-server0-1.19.0-150400.3.3.1 as a component of Image SLES15-SP4-SAP-BYOS-Azure libwayland-server0-1.19.0-150400.3.3.1 as a component of Image SLES15-SP4-SAP-BYOS-EC2 libwayland-server0-1.19.0-150400.3.3.1 as a component of Image SLES15-SP4-SAP-BYOS-GCE libwayland-client0-1.19.0-150400.3.3.1 as a component of Image SLES15-SP4-SAP-EC2 libwayland-server0-1.19.0-150400.3.3.1 as a component of Image SLES15-SP4-SAP-EC2 libwayland-client0-1.19.0-150400.3.3.1 as a component of Image SLES15-SP4-SAP-GCE libwayland-server0-1.19.0-150400.3.3.1 as a component of Image SLES15-SP4-SAP-GCE libwayland-server0-1.19.0-150400.3.3.1 as a component of Image SLES15-SP4-SAP-Hardened libwayland-server0-1.19.0-150400.3.3.1 as a component of Image SLES15-SP4-SAP-Hardened-Azure libwayland-server0-1.19.0-150400.3.3.1 as a component of Image SLES15-SP4-SAP-Hardened-BYOS libwayland-server0-1.19.0-150400.3.3.1 as a component of Image SLES15-SP4-SAP-Hardened-BYOS-Azure libwayland-server0-1.19.0-150400.3.3.1 as a component of Image SLES15-SP4-SAP-Hardened-BYOS-EC2 libwayland-server0-1.19.0-150400.3.3.1 as a component of Image SLES15-SP4-SAP-Hardened-BYOS-GCE libwayland-server0-1.19.0-150400.3.3.1 as a component of Image SLES15-SP4-SAP-Hardened-EC2 libwayland-server0-1.19.0-150400.3.3.1 as a component of Image SLES15-SP4-SAP-Hardened-GCE libwayland-client0-1.19.0-150400.3.3.1 as a component of Image SLES15-SP4-SAPCAL libwayland-server0-1.19.0-150400.3.3.1 as a component of Image SLES15-SP4-SAPCAL libwayland-client0-1.19.0-150400.3.3.1 as a component of Image SLES15-SP4-SAPCAL-Azure libwayland-server0-1.19.0-150400.3.3.1 as a component of Image SLES15-SP4-SAPCAL-Azure libwayland-client0-1.19.0-150400.3.3.1 as a component of Image SLES15-SP4-SAPCAL-EC2 libwayland-server0-1.19.0-150400.3.3.1 as a component of Image SLES15-SP4-SAPCAL-EC2 libwayland-client0-1.19.0-150400.3.3.1 as a component of Image SLES15-SP4-SAPCAL-GCE libwayland-server0-1.19.0-150400.3.3.1 as a component of Image SLES15-SP4-SAPCAL-GCE libwayland-client0-1.19.0-150400.3.3.1 as a component of SUSE Linux Enterprise Micro 5.3 libwayland-cursor0-1.19.0-150400.3.3.1 as a component of SUSE Linux Enterprise Micro 5.3 libwayland-egl1-99~1.19.0-150400.3.3.1 as a component of SUSE Linux Enterprise Micro 5.3 libwayland-server0-1.19.0-150400.3.3.1 as a component of SUSE Linux Enterprise Micro 5.3 libwayland-client0-1.19.0-150400.3.3.1 as a component of SUSE Linux Enterprise Micro 5.4 libwayland-cursor0-1.19.0-150400.3.3.1 as a component of SUSE Linux Enterprise Micro 5.4 libwayland-egl1-99~1.19.0-150400.3.3.1 as a component of SUSE Linux Enterprise Micro 5.4 libwayland-server0-1.19.0-150400.3.3.1 as a component of SUSE Linux Enterprise Micro 5.4 libwayland-client0-1.19.0-150400.3.3.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 libwayland-client0-32bit-1.19.0-150400.3.3.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 libwayland-cursor0-1.19.0-150400.3.3.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 libwayland-egl1-99~1.19.0-150400.3.3.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 libwayland-server0-1.19.0-150400.3.3.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 libwayland-server0-32bit-1.19.0-150400.3.3.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 wayland-devel-1.19.0-150400.3.3.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 libwayland-client0-1.19.0-150400.3.3.1 as a component of openSUSE Leap 15.4 libwayland-client0-32bit-1.19.0-150400.3.3.1 as a component of openSUSE Leap 15.4 libwayland-cursor0-1.19.0-150400.3.3.1 as a component of openSUSE Leap 15.4 libwayland-cursor0-32bit-1.19.0-150400.3.3.1 as a component of openSUSE Leap 15.4 libwayland-egl1-99~1.19.0-150400.3.3.1 as a component of openSUSE Leap 15.4 libwayland-egl1-32bit-99~1.19.0-150400.3.3.1 as a component of openSUSE Leap 15.4 libwayland-server0-1.19.0-150400.3.3.1 as a component of openSUSE Leap 15.4 libwayland-server0-32bit-1.19.0-150400.3.3.1 as a component of openSUSE Leap 15.4 wayland-devel-1.19.0-150400.3.3.1 as a component of openSUSE Leap 15.4 wayland-devel-32bit-1.19.0-150400.3.3.1 as a component of openSUSE Leap 15.4 libwayland-client0-1.19.0-150400.3.3.1 as a component of openSUSE Leap Micro 5.3 libwayland-cursor0-1.19.0-150400.3.3.1 as a component of openSUSE Leap Micro 5.3 libwayland-egl1-99~1.19.0-150400.3.3.1 as a component of openSUSE Leap Micro 5.3 libwayland-server0-1.19.0-150400.3.3.1 as a component of openSUSE Leap Micro 5.3 An internal reference count is held on the buffer pool, incremented every time a new buffer is created from the pool. The reference count is maintained as an int; on LP64 systems this can cause the reference count to overflow if the client creates a large number of wl_shm buffer objects, or if it can coerce the server to create a large number of external references to the buffer storage. With the reference count overflowing, a use-after-free can be constructed on the wl_shm_pool tracking structure, where values may be incremented or decremented; it may also be possible to construct a limited oracle to leak 4 bytes of server-side memory to the attacking client at a time. CVE-2021-3782 Image SLES15-SP4-SAP-Azure-LI-BYOS-Production:libwayland-client0-1.19.0-150400.3.3.1 Image SLES15-SP4-SAP-Azure-LI-BYOS-Production:libwayland-cursor0-1.19.0-150400.3.3.1 Image SLES15-SP4-SAP-Azure-LI-BYOS-Production:libwayland-egl1-99~1.19.0-150400.3.3.1 Image SLES15-SP4-SAP-Azure-LI-BYOS-Production:libwayland-server0-1.19.0-150400.3.3.1 Image SLES15-SP4-SAP-Azure-LI-BYOS:libwayland-client0-1.19.0-150400.3.3.1 Image SLES15-SP4-SAP-Azure-LI-BYOS:libwayland-cursor0-1.19.0-150400.3.3.1 Image SLES15-SP4-SAP-Azure-LI-BYOS:libwayland-egl1-99~1.19.0-150400.3.3.1 Image SLES15-SP4-SAP-Azure-LI-BYOS:libwayland-server0-1.19.0-150400.3.3.1 Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production:libwayland-client0-1.19.0-150400.3.3.1 Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production:libwayland-cursor0-1.19.0-150400.3.3.1 Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production:libwayland-egl1-99~1.19.0-150400.3.3.1 Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production:libwayland-server0-1.19.0-150400.3.3.1 Image SLES15-SP4-SAP-Azure-VLI-BYOS:libwayland-client0-1.19.0-150400.3.3.1 Image SLES15-SP4-SAP-Azure-VLI-BYOS:libwayland-cursor0-1.19.0-150400.3.3.1 Image SLES15-SP4-SAP-Azure-VLI-BYOS:libwayland-egl1-99~1.19.0-150400.3.3.1 Image SLES15-SP4-SAP-Azure-VLI-BYOS:libwayland-server0-1.19.0-150400.3.3.1 Image SLES15-SP4-SAP-Azure:libwayland-client0-1.19.0-150400.3.3.1 Image SLES15-SP4-SAP-Azure:libwayland-server0-1.19.0-150400.3.3.1 Image SLES15-SP4-SAP-BYOS-Azure:libwayland-server0-1.19.0-150400.3.3.1 Image SLES15-SP4-SAP-BYOS-EC2:libwayland-server0-1.19.0-150400.3.3.1 Image SLES15-SP4-SAP-BYOS-GCE:libwayland-server0-1.19.0-150400.3.3.1 Image SLES15-SP4-SAP-BYOS:libwayland-server0-1.19.0-150400.3.3.1 Image SLES15-SP4-SAP-EC2:libwayland-client0-1.19.0-150400.3.3.1 Image SLES15-SP4-SAP-EC2:libwayland-server0-1.19.0-150400.3.3.1 Image SLES15-SP4-SAP-GCE:libwayland-client0-1.19.0-150400.3.3.1 Image SLES15-SP4-SAP-GCE:libwayland-server0-1.19.0-150400.3.3.1 Image SLES15-SP4-SAP-Hardened-Azure:libwayland-server0-1.19.0-150400.3.3.1 Image SLES15-SP4-SAP-Hardened-BYOS-Azure:libwayland-server0-1.19.0-150400.3.3.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:libwayland-server0-1.19.0-150400.3.3.1 Image SLES15-SP4-SAP-Hardened-BYOS-GCE:libwayland-server0-1.19.0-150400.3.3.1 Image SLES15-SP4-SAP-Hardened-BYOS:libwayland-server0-1.19.0-150400.3.3.1 Image SLES15-SP4-SAP-Hardened-EC2:libwayland-server0-1.19.0-150400.3.3.1 Image SLES15-SP4-SAP-Hardened-GCE:libwayland-server0-1.19.0-150400.3.3.1 Image SLES15-SP4-SAP-Hardened:libwayland-server0-1.19.0-150400.3.3.1 Image SLES15-SP4-SAP:libwayland-client0-1.19.0-150400.3.3.1 Image SLES15-SP4-SAP:libwayland-server0-1.19.0-150400.3.3.1 Image SLES15-SP4-SAPCAL-Azure:libwayland-client0-1.19.0-150400.3.3.1 Image SLES15-SP4-SAPCAL-Azure:libwayland-server0-1.19.0-150400.3.3.1 Image SLES15-SP4-SAPCAL-EC2:libwayland-client0-1.19.0-150400.3.3.1 Image SLES15-SP4-SAPCAL-EC2:libwayland-server0-1.19.0-150400.3.3.1 Image SLES15-SP4-SAPCAL-GCE:libwayland-client0-1.19.0-150400.3.3.1 Image SLES15-SP4-SAPCAL-GCE:libwayland-server0-1.19.0-150400.3.3.1 Image SLES15-SP4-SAPCAL:libwayland-client0-1.19.0-150400.3.3.1 Image SLES15-SP4-SAPCAL:libwayland-server0-1.19.0-150400.3.3.1 SUSE Linux Enterprise Micro 5.3:libwayland-client0-1.19.0-150400.3.3.1 SUSE Linux Enterprise Micro 5.3:libwayland-cursor0-1.19.0-150400.3.3.1 SUSE Linux Enterprise Micro 5.3:libwayland-egl1-99~1.19.0-150400.3.3.1 SUSE Linux Enterprise Micro 5.3:libwayland-server0-1.19.0-150400.3.3.1 SUSE Linux Enterprise Micro 5.4:libwayland-client0-1.19.0-150400.3.3.1 SUSE Linux Enterprise Micro 5.4:libwayland-cursor0-1.19.0-150400.3.3.1 SUSE Linux Enterprise Micro 5.4:libwayland-egl1-99~1.19.0-150400.3.3.1 SUSE Linux Enterprise Micro 5.4:libwayland-server0-1.19.0-150400.3.3.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:libwayland-client0-1.19.0-150400.3.3.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:libwayland-client0-32bit-1.19.0-150400.3.3.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:libwayland-cursor0-1.19.0-150400.3.3.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:libwayland-egl1-99~1.19.0-150400.3.3.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:libwayland-server0-1.19.0-150400.3.3.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:libwayland-server0-32bit-1.19.0-150400.3.3.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:wayland-devel-1.19.0-150400.3.3.1 openSUSE Leap 15.4:libwayland-client0-1.19.0-150400.3.3.1 openSUSE Leap 15.4:libwayland-client0-32bit-1.19.0-150400.3.3.1 openSUSE Leap 15.4:libwayland-cursor0-1.19.0-150400.3.3.1 openSUSE Leap 15.4:libwayland-cursor0-32bit-1.19.0-150400.3.3.1 openSUSE Leap 15.4:libwayland-egl1-32bit-99~1.19.0-150400.3.3.1 openSUSE Leap 15.4:libwayland-egl1-99~1.19.0-150400.3.3.1 openSUSE Leap 15.4:libwayland-server0-1.19.0-150400.3.3.1 openSUSE Leap 15.4:libwayland-server0-32bit-1.19.0-150400.3.3.1 openSUSE Leap 15.4:wayland-devel-1.19.0-150400.3.3.1 openSUSE Leap 15.4:wayland-devel-32bit-1.19.0-150400.3.3.1 openSUSE Leap Micro 5.3:libwayland-client0-1.19.0-150400.3.3.1 openSUSE Leap Micro 5.3:libwayland-cursor0-1.19.0-150400.3.3.1 openSUSE Leap Micro 5.3:libwayland-egl1-99~1.19.0-150400.3.3.1 openSUSE Leap Micro 5.3:libwayland-server0-1.19.0-150400.3.3.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20231860-1/ https://www.suse.com/security/cve/CVE-2021-3782.html CVE-2021-3782 https://bugzilla.suse.com/1190486 SUSE Bug 1190486