ELSA-2021-1804 — Moderate: userspace graphics, xorg-x11, and mesa security, bug fix, and enhancement update (Oracle Linux 8)

Summary

egl-wayland
[1.1.5-3]
- Add upstream patch to address rhbz#1842473

[1.1.5-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild

[1.1.5-1]
- Update to 1.1.5

libdrm
[2.4.103-1]
- Update to 2.4.103

libglvnd
[1.3.2-1]
- Update to 1.3.2 release

libinput
[1.16.3-1]
- libinput 1.16.3 (#1886648)

libwacom
[1.6-2]
- Add Lenovo tablet files from upstream (#1914411)

[1.6-1]
- libwacom 1.6 (#1878160)

libX11
[1.6.8-4]
- Fix CVE-2020-14363 (#1873923)

mesa
[20.3.3-2]
- Fix CPU affinity memory corruption crash (#1938788)

[20.3.3-1]
- Update to 20.3.3 + upstream fixes for qemu regression

[20.3.2-1]
- Update to 20.3.2 for upstream fixes

[20.3.1-1]
- Update to 20.3.1 for radeon fix

[20.3.0-2]
- Fix regression with radeon si/cik cards

[20.3.0-1]
- Update to 20.3.0 release

[20.3.0-0.1.rc2]
- Update 20.3.0-rc2
- enable lavapipe behind env var so it can be used for testing

xorg-x11-drivers
[7.7-30]
- Dont Require wacom on s390x, thats just silly

[7.7-29]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild

[7.7-28]
- Drop geode, since F31+ no longer supports the associated CPU

[7.7-27]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild

[7.7-26]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild

[7.7-25]
- enable on s390x (related #1727029)

[7.7-24]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild

[7.7-23]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

xorg-x11-server
[1.20.10-1]
- xserver 1.20.10
Resolves: #1891871

[1.20.8-10]
- modesetting: keep going if a modeset fails on EnterVT
Resolves: #1838392

[1.20.8-9]
- CVE fix for: CVE-2020-14347 (#1862320)

[1.20.8-8]
- CVE fixes for: CVE-2020-14345 (#1872391), CVE-2020-14346 (#1872395),
CVE-2020-14361 (#1872402), CVE-2020-14362 (#1872409)

[1.20.8-7]
- Enable XC-SECURITY
Resolves: #1863142

Fixed packages 45

Release	Package	Fixed in
Oracle Linux · 8	egl-wayland	0:1.1.5-3.el8
Oracle Linux · 8	libdrm	0:2.4.103-1.el8
Oracle Linux · 8	libdrm-devel	0:2.4.103-1.el8
Oracle Linux · 8	libglvnd	1:1.3.2-1.el8
Oracle Linux · 8	libglvnd-core-devel	1:1.3.2-1.el8
Oracle Linux · 8	libglvnd-devel	1:1.3.2-1.el8
Oracle Linux · 8	libglvnd-egl	1:1.3.2-1.el8
Oracle Linux · 8	libglvnd-gles	1:1.3.2-1.el8
Oracle Linux · 8	libglvnd-glx	1:1.3.2-1.el8
Oracle Linux · 8	libglvnd-opengl	1:1.3.2-1.el8
Oracle Linux · 8	libinput	0:1.16.3-1.el8
Oracle Linux · 8	libinput-devel	0:1.16.3-1.el8
Oracle Linux · 8	libinput-utils	0:1.16.3-1.el8
Oracle Linux · 8	libwacom	0:1.6-2.el8
Oracle Linux · 8	libwacom-data	0:1.6-2.el8
Oracle Linux · 8	libwacom-devel	0:1.6-2.el8
Oracle Linux · 8	libX11	0:1.6.8-4.el8
Oracle Linux · 8	libX11-common	0:1.6.8-4.el8
Oracle Linux · 8	libX11-devel	0:1.6.8-4.el8
Oracle Linux · 8	libX11-xcb	0:1.6.8-4.el8
Oracle Linux · 8	mesa-dri-drivers	0:20.3.3-2.el8
Oracle Linux · 8	mesa-filesystem	0:20.3.3-2.el8
Oracle Linux · 8	mesa-libEGL	0:20.3.3-2.el8
Oracle Linux · 8	mesa-libEGL-devel	0:20.3.3-2.el8
Oracle Linux · 8	mesa-libgbm	0:20.3.3-2.el8
Oracle Linux · 8	mesa-libgbm-devel	0:20.3.3-2.el8
Oracle Linux · 8	mesa-libGL	0:20.3.3-2.el8
Oracle Linux · 8	mesa-libGL-devel	0:20.3.3-2.el8
Oracle Linux · 8	mesa-libglapi	0:20.3.3-2.el8
Oracle Linux · 8	mesa-libOSMesa	0:20.3.3-2.el8
Oracle Linux · 8	mesa-libOSMesa-devel	0:20.3.3-2.el8
Oracle Linux · 8	mesa-libxatracker	0:20.3.3-2.el8
Oracle Linux · 8	mesa-vdpau-drivers	0:20.3.3-2.el8
Oracle Linux · 8	mesa-vulkan-devel	0:20.3.3-2.el8
Oracle Linux · 8	mesa-vulkan-drivers	0:20.3.3-2.el8
Oracle Linux · 8	xorg-x11-drivers	0:7.7-30.el8
Oracle Linux · 8	xorg-x11-server-common	0:1.20.10-1.el8
Oracle Linux · 8	xorg-x11-server-devel	0:1.20.10-1.el8
Oracle Linux · 8	xorg-x11-server-source	0:1.20.10-1.el8
Oracle Linux · 8	xorg-x11-server-Xdmx	0:1.20.10-1.el8
Oracle Linux · 8	xorg-x11-server-Xephyr	0:1.20.10-1.el8
Oracle Linux · 8	xorg-x11-server-Xnest	0:1.20.10-1.el8
Oracle Linux · 8	xorg-x11-server-Xorg	0:1.20.10-1.el8
Oracle Linux · 8	xorg-x11-server-Xvfb	0:1.20.10-1.el8
Oracle Linux · 8	xorg-x11-server-Xwayland	0:1.20.10-1.el8

Vulnerabilities 9

High 7.8

CVE-2020-14363

An integer overflow vulnerability leading to a double-free was found in libX11. This flaw allows a local privileged att…

The X11 Project libX11 libx11 libx11 Debian Ubuntu Alpine

Sep 11, 2020
Medium 6.7

CVE-2020-14344

An integer overflow leading to a heap-buffer overflow was found in The X Input Method (XIM) client was implemented in l…

The X11 Project libX11 libx11 libx11 Debian Ubuntu Alpine

Aug 5, 2020
Medium 5.5

CVE-2020-14347

A flaw was found in the way xserver memory was not properly initialized. This could leak parts of server memory to the …

The Xorg Project xorg-x11-server xorg-server xorg-server Debian Ubuntu Alpine

Aug 5, 2020
Unscored —

CVE-2020-14345

A flaw was found in X.Org Server before xorg-x11-server 1.20.9. An Out-Of-Bounds access in XkbSetNames function may lea…

xorg-server xorg-server xorg-server-hwe-16.04 xorg-server Debian Ubuntu Alpine

Sep 15, 2020
Unscored —

CVE-2020-14346

A flaw was found in xorg-x11-server before 1.20.9. An integer underflow in the X input extension protocol decoding in t…

xorg-server xorg-server xorg-server-hwe-16.04 xorg-server Debian Ubuntu Alpine

Sep 15, 2020
Unscored —

CVE-2020-14360

A flaw was found in the X.Org Server before version 1.20.10. An out-of-bounds access in the XkbSetMap function may lead…

xorg-server xorg-server xorg-server-hwe-16.04 xorg-server Debian Ubuntu Alpine

Jan 20, 2021
Unscored —

CVE-2020-14361

A flaw was found in X.Org Server before xorg-x11-server 1.20.9. An Integer underflow leading to heap-buffer overflow ma…

xorg-server xorg-server xorg-server-hwe-16.04 xorg-server Debian Ubuntu Alpine

Sep 15, 2020
Unscored —

CVE-2020-14362

A flaw was found in X.Org Server before xorg-x11-server 1.20.9. An Integer underflow leading to heap-buffer overflow ma…

xorg-server xorg-server xorg-server-hwe-16.04 xorg-server Debian Ubuntu Alpine

Sep 15, 2020
Unscored —

CVE-2020-25712

A flaw was found in xorg-x11-server before 1.20.10. A heap-buffer overflow in XkbSetDeviceInfo may lead to a privilege …

xorg-server xorg-server xorg-server-hwe-16.04 xorg-server Debian Ubuntu Azure Linux Alpine

Dec 15, 2020

Moderate: userspace graphics, xorg-x11, and mesa security, bug fix, and enhancement update (Oracle Linux 8)

Summary

Fixed packages 45

Vulnerabilities 9

An integer overflow vulnerability leading to a double-free was found in libX11. This flaw allows a local privileged att…

An integer overflow leading to a heap-buffer overflow was found in The X Input Method (XIM) client was implemented in l…

A flaw was found in the way xserver memory was not properly initialized. This could leak parts of server memory to the …

A flaw was found in X.Org Server before xorg-x11-server 1.20.9. An Out-Of-Bounds access in XkbSetNames function may lea…

A flaw was found in xorg-x11-server before 1.20.9. An integer underflow in the X input extension protocol decoding in t…

A flaw was found in the X.Org Server before version 1.20.10. An out-of-bounds access in the XkbSetMap function may lead…

A flaw was found in X.Org Server before xorg-x11-server 1.20.9. An Integer underflow leading to heap-buffer overflow ma…

A flaw was found in X.Org Server before xorg-x11-server 1.20.9. An Integer underflow leading to heap-buffer overflow ma…

A flaw was found in xorg-x11-server before 1.20.10. A heap-buffer overflow in XkbSetDeviceInfo may lead to a privilege …