Skip to content
OpenAdvisories
High ALAS2-2021-1633 1 CVE

Important: xorg-x11-server security update (Amazon Linux 2)

Published Apr 27, 2021 · Updated May 3, 2021

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2021-3472: A flaw was found in xorg-x11-server. An interger underflow can occur in xserver which can lead to a local privilege escalation. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. 1944167: CVE-2021-3472 xorg-x11-server: XChangeFeedbackControl integer underflow leads to privilege escalation

Fixed packages 10

ReleasePackageFixed in
Amazon Linux · 2 xorg-x11-server-common 0:1.20.4-15.amzn2.0.2
Amazon Linux · 2 xorg-x11-server-debuginfo 0:1.20.4-15.amzn2.0.2
Amazon Linux · 2 xorg-x11-server-devel 0:1.20.4-15.amzn2.0.2
Amazon Linux · 2 xorg-x11-server-source 0:1.20.4-15.amzn2.0.2
Amazon Linux · 2 xorg-x11-server-Xdmx 0:1.20.4-15.amzn2.0.2
Amazon Linux · 2 xorg-x11-server-Xephyr 0:1.20.4-15.amzn2.0.2
Amazon Linux · 2 xorg-x11-server-Xnest 0:1.20.4-15.amzn2.0.2
Amazon Linux · 2 xorg-x11-server-Xorg 0:1.20.4-15.amzn2.0.2
Amazon Linux · 2 xorg-x11-server-Xvfb 0:1.20.4-15.amzn2.0.2
Amazon Linux · 2 xorg-x11-server-Xwayland 0:1.20.4-15.amzn2.0.2

Vulnerabilities 1

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2021-3472.html