High ELSA-2020-5408 3 CVEs

Important: xorg-x11-server security update (Oracle Linux 7)

Published Dec 14, 2020 · Updated Dec 14, 2020

Ecosystem: Oracle Linux

Summary

[1.20.4-15]
- CVE fix for: CVE-2020-25712 (#1904937), CVE-2020-14360 (#1904934)

[1.20.4-14]
- CVE fix for: CVE-2020-14347 (#1862319)

Fixed packages 9

Release	Package	Fixed in
Oracle Linux · 7	xorg-x11-server-common	0:1.20.4-15.el7_9
Oracle Linux · 7	xorg-x11-server-devel	0:1.20.4-15.el7_9
Oracle Linux · 7	xorg-x11-server-source	0:1.20.4-15.el7_9
Oracle Linux · 7	xorg-x11-server-Xdmx	0:1.20.4-15.el7_9
Oracle Linux · 7	xorg-x11-server-Xephyr	0:1.20.4-15.el7_9
Oracle Linux · 7	xorg-x11-server-Xnest	0:1.20.4-15.el7_9
Oracle Linux · 7	xorg-x11-server-Xorg	0:1.20.4-15.el7_9
Oracle Linux · 7	xorg-x11-server-Xvfb	0:1.20.4-15.el7_9
Oracle Linux · 7	xorg-x11-server-Xwayland	0:1.20.4-15.el7_9

Vulnerabilities 3

Medium 5.5

CVE-2020-14347

A flaw was found in the way xserver memory was not properly initialized. This could leak parts of server memory to the …

The Xorg Project xorg-x11-server xorg-server xorg-server Debian Ubuntu Alpine

Aug 5, 2020
Unscored —

CVE-2020-14360

A flaw was found in the X.Org Server before version 1.20.10. An out-of-bounds access in the XkbSetMap function may lead…

xorg-server xorg-server xorg-server-hwe-16.04 xorg-server Debian Ubuntu Alpine

Jan 20, 2021
Unscored —

CVE-2020-25712

A flaw was found in xorg-x11-server before 1.20.10. A heap-buffer overflow in XkbSetDeviceInfo may lead to a privilege …

xorg-server xorg-server xorg-server-hwe-16.04 xorg-server Debian Ubuntu Azure Linux Alpine

Dec 15, 2020