Skip to content
OpenAdvisories
High ALAS2-2022-1744 4 CVEs

Important: xorg-x11-server security update (Amazon Linux 2)

Published Jan 18, 2022 · Updated Jan 20, 2022

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2021-4011: A flaw was found in xorg-x11-server where an out-of-bounds access can occur in the SwapCreateRegister function. CVE-2021-4010: A flaw was found in xorg-x11-server where an out-of-bounds access can occur in the SProcScreenSaverSuspend function. CVE-2021-4009: A flaw was found in xorg-x11-server. An out-of-bounds access can occur in the SProcXFixesCreatePointerBarrier function. CVE-2021-4008: A flaw was found in the Xorg-x11-server. An out-of-bounds access issue can occur in the SProcRenderCompositeGlyphs function due to improper validation of the request length.

Fixed packages 10

ReleasePackageFixed in
Amazon Linux · 2 xorg-x11-server-common 0:1.20.4-15.amzn2.0.4
Amazon Linux · 2 xorg-x11-server-debuginfo 0:1.20.4-15.amzn2.0.4
Amazon Linux · 2 xorg-x11-server-devel 0:1.20.4-15.amzn2.0.4
Amazon Linux · 2 xorg-x11-server-source 0:1.20.4-15.amzn2.0.4
Amazon Linux · 2 xorg-x11-server-Xdmx 0:1.20.4-15.amzn2.0.4
Amazon Linux · 2 xorg-x11-server-Xephyr 0:1.20.4-15.amzn2.0.4
Amazon Linux · 2 xorg-x11-server-Xnest 0:1.20.4-15.amzn2.0.4
Amazon Linux · 2 xorg-x11-server-Xorg 0:1.20.4-15.amzn2.0.4
Amazon Linux · 2 xorg-x11-server-Xvfb 0:1.20.4-15.amzn2.0.4
Amazon Linux · 2 xorg-x11-server-Xwayland 0:1.20.4-15.amzn2.0.4

Vulnerabilities 4

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2021-4008.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2021-4009.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2021-4010.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2021-4011.html