Summary
[1.20.1-5.1]
- CVE-2018-14665: Disable -logfile and -modulepath when running with elevated
privileges
[1.20.1-5]
- Call LeaveVT from xf86CrtcCloseScreen
[1.20.1-4]
- Hide the modesetting driver's atomic ioctl support behind Option 'Atomic'
Fixed packages 9
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | xorg-x11-server-common | 0:1.20.1-5.1.el7 |
| Oracle Linux · 7 | xorg-x11-server-devel | 0:1.20.1-5.1.el7 |
| Oracle Linux · 7 | xorg-x11-server-source | 0:1.20.1-5.1.el7 |
| Oracle Linux · 7 | xorg-x11-server-Xdmx | 0:1.20.1-5.1.el7 |
| Oracle Linux · 7 | xorg-x11-server-Xephyr | 0:1.20.1-5.1.el7 |
| Oracle Linux · 7 | xorg-x11-server-Xnest | 0:1.20.1-5.1.el7 |
| Oracle Linux · 7 | xorg-x11-server-Xorg | 0:1.20.1-5.1.el7 |
| Oracle Linux · 7 | xorg-x11-server-Xvfb | 0:1.20.1-5.1.el7 |
| Oracle Linux · 7 | xorg-x11-server-Xwayland | 0:1.20.1-5.1.el7 |
Vulnerabilities 1
-
Unscored —
A flaw was found in xorg-x11-server before 1.20.3. An incorrect permission check for -modulepath and -logfile options w…