Important: xorg-x11-server security update (Amazon Linux 2)

Summary

Fixed packages 10

Vulnerabilities 2

• High 7.8
  CVE-2023-6377

  Xorg-x11-server: out-of-bounds memory reads/writes in xkb button actions

  A flaw was found in xorg-server. Querying or changing XKB button actions such as moving from a touchpad to a mouse can result in out-of-bounds memory reads and writes. This may allow local privilege escalation or possible remote code execution in cases where …

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux Alpine
  Dec 13, 2023
• High 7.6
  CVE-2023-6478

  Xorg-x11-server: out-of-bounds memory read in rrchangeoutputproperty and rrchangeproviderproperty

  A flaw was found in xorg-server. A specially crafted request to RRChangeProviderProperty or RRChangeOutputProperty can trigger an integer overflow which may lead to a disclosure of sensitive information.

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux Alpine
  Dec 13, 2023

References

• web
  https://alas.aws.amazon.com/cve/html/CVE-2023-6377.html
• web
  https://alas.aws.amazon.com/cve/html/CVE-2023-6478.html