Summary
[1.20.4-12]
- CVE fixes for: CVE-2020-14345 (#1872389), CVE-2020-14346 (#1872393),
CVE-2020-14361 (#1872400), CVE-2020-14362 (#1872407)
- Temporarily revert fixes from 1.20.4-11 build for delivery of CVE fixes
[1.20.4-11]
- Fix a crash when moving an animated cursor between screens
- Be case-insentive when matching extension names to enable or disable
Fixed packages 9
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | xorg-x11-server-common | 0:1.20.4-12.el7_9 |
| Oracle Linux · 7 | xorg-x11-server-devel | 0:1.20.4-12.el7_9 |
| Oracle Linux · 7 | xorg-x11-server-source | 0:1.20.4-12.el7_9 |
| Oracle Linux · 7 | xorg-x11-server-Xdmx | 0:1.20.4-12.el7_9 |
| Oracle Linux · 7 | xorg-x11-server-Xephyr | 0:1.20.4-12.el7_9 |
| Oracle Linux · 7 | xorg-x11-server-Xnest | 0:1.20.4-12.el7_9 |
| Oracle Linux · 7 | xorg-x11-server-Xorg | 0:1.20.4-12.el7_9 |
| Oracle Linux · 7 | xorg-x11-server-Xvfb | 0:1.20.4-12.el7_9 |
| Oracle Linux · 7 | xorg-x11-server-Xwayland | 0:1.20.4-12.el7_9 |
Vulnerabilities 4
-
Unscored —
A flaw was found in X.Org Server before xorg-x11-server 1.20.9. An Out-Of-Bounds access in XkbSetNames function may lea…
-
Unscored —
A flaw was found in xorg-x11-server before 1.20.9. An integer underflow in the X input extension protocol decoding in t…
-
Unscored —
A flaw was found in X.Org Server before xorg-x11-server 1.20.9. An Integer underflow leading to heap-buffer overflow ma…
-
Unscored —
A flaw was found in X.Org Server before xorg-x11-server 1.20.9. An Integer underflow leading to heap-buffer overflow ma…