ELSA-2014-1983 — Important: xorg-x11-server security update (Oracle Linux 7)

Summary

[1.15.0-7.0.1.el7_0.3]
- Invalid BUG_RETURN_VAL fix, upstream patch (orabug 18896390)

[1.15.0-7.3]
- CVE fixes for: CVE-2014-8099, CVE-2014-8098, CVE-2014-8097, CVE-2014-8096,
CVE-2014-8095, CVE-2014-8094, CVE-2014-8093, CVE-2014-8092, CVE-2014-8091,
CVE-2014-8101, CVE-2014-8100, CVE-2014-8103, CVE-2014-8102

Fixed packages 8

Release	Package	Fixed in
Oracle Linux · 7	xorg-x11-server-common	0:1.15.0-25.el6_6
Oracle Linux · 7	xorg-x11-server-devel	0:1.15.0-25.el6_6
Oracle Linux · 7	xorg-x11-server-source	0:1.15.0-25.el6_6
Oracle Linux · 7	xorg-x11-server-Xdmx	0:1.15.0-25.el6_6
Oracle Linux · 7	xorg-x11-server-Xephyr	0:1.15.0-25.el6_6
Oracle Linux · 7	xorg-x11-server-Xnest	0:1.15.0-25.el6_6
Oracle Linux · 7	xorg-x11-server-Xorg	0:1.15.0-25.el6_6
Oracle Linux · 7	xorg-x11-server-Xvfb	0:1.15.0-25.el6_6

Vulnerabilities 13

Unscored —

CVE-2014-8091

X.Org X Window System (aka X11 and X) X11R5 and X.Org Server (aka xserver and xorg-server) before 1.16.3, when using SU…

nvidia-graphics-drivers-304 xorg-server xorg-server nvidia-graphics-drivers-304-updates Debian Ubuntu

Dec 10, 2014
Unscored —

CVE-2014-8092

Multiple integer overflows in X.Org X Window System (aka X11 or X) X11R1 and X.Org Server (aka xserver and xorg-server)…

xorg-server xorg-server Debian Ubuntu

Dec 10, 2014
Unscored —

CVE-2014-8093

Multiple integer overflows in the GLX extension in XFree86 4.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org…

xorg-server xorg-server Debian Ubuntu

Dec 10, 2014
Unscored —

CVE-2014-8094

Integer overflow in the ProcDRI2GetBuffers function in the DRI2 extension in X.Org Server (aka xserver and xorg-server)…

xorg-server xorg-server Debian Ubuntu

Dec 10, 2014
Unscored —

CVE-2014-8095

The XInput extension in X.Org X Window System (aka X11 or X) X11R4 and X.Org Server (aka xserver and xorg-server) befor…

xorg-server xorg-server Debian Ubuntu

Dec 10, 2014
Unscored —

CVE-2014-8096

The SProcXCMiscGetXIDList function in the XC-MISC extension in X.Org X Window System (aka X11 or X) X11R6.0 and X.Org S…

xorg-server xorg-server Debian Ubuntu

Dec 10, 2014
Unscored —

CVE-2014-8097

The DBE extension in X.Org X Window System (aka X11 or X) X11R6.1 and X.Org Server (aka xserver and xorg-server) before…

xorg-server xorg-server Debian Ubuntu

Dec 10, 2014
Unscored —

CVE-2014-8098

The GLX extension in XFree86 4.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xserver and xorg-…

nvidia-graphics-drivers-304 xorg-server xorg-server nvidia-graphics-drivers-304-updates Debian Ubuntu

Dec 10, 2014
Unscored —

CVE-2014-8099

The XVideo extension in XFree86 4.0.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xserver and …

xorg-server xorg-server Debian Ubuntu

Dec 10, 2014
Unscored —

CVE-2014-8100

The Render extension in XFree86 4.0.1, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xserver and …

xorg-server xorg-server Debian Ubuntu

Dec 10, 2014
Unscored —

CVE-2014-8101

The RandR extension in XFree86 4.2.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xserver and x…

xorg-server xorg-server Debian Ubuntu

Dec 10, 2014
Unscored —

CVE-2014-8102

The SProcXFixesSelectSelectionInput function in the XFixes extension in X.Org X Window System (aka X11 or X) X11R6.8.0 …

xorg-server xorg-server Debian Ubuntu

Dec 10, 2014
Unscored —

CVE-2014-8103

X.Org Server (aka xserver and xorg-server) 1.15.0 through 1.16.x before 1.16.3 allows remote authenticated users to cau…

xorg-server xorg-server Debian Ubuntu

Dec 10, 2014

Important: xorg-x11-server security update (Oracle Linux 7)

Summary

Fixed packages 8

Vulnerabilities 13

X.Org X Window System (aka X11 and X) X11R5 and X.Org Server (aka xserver and xorg-server) before 1.16.3, when using SU…

Multiple integer overflows in X.Org X Window System (aka X11 or X) X11R1 and X.Org Server (aka xserver and xorg-server)…

Multiple integer overflows in the GLX extension in XFree86 4.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org…

Integer overflow in the ProcDRI2GetBuffers function in the DRI2 extension in X.Org Server (aka xserver and xorg-server)…

The XInput extension in X.Org X Window System (aka X11 or X) X11R4 and X.Org Server (aka xserver and xorg-server) befor…

The SProcXCMiscGetXIDList function in the XC-MISC extension in X.Org X Window System (aka X11 or X) X11R6.0 and X.Org S…

The DBE extension in X.Org X Window System (aka X11 or X) X11R6.1 and X.Org Server (aka xserver and xorg-server) before…

The GLX extension in XFree86 4.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xserver and xorg-…

The XVideo extension in XFree86 4.0.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xserver and …

The Render extension in XFree86 4.0.1, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xserver and …

The RandR extension in XFree86 4.2.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xserver and x…

The SProcXFixesSelectSelectionInput function in the XFixes extension in X.Org X Window System (aka X11 or X) X11R6.8.0 …

X.Org Server (aka xserver and xorg-server) 1.15.0 through 1.16.x before 1.16.3 allows remote authenticated users to cau…