High ELSA-2022-5905 2 CVEs

Important: xorg-x11-server security update (Oracle Linux 7)

Published Aug 4, 2022 · Updated Aug 4, 2022

Ecosystem: Oracle Linux

Summary

[1.20.4-18]
- CVE fix for: CVE-2022-2319/ZDI-CAN-16062, CVE-2022-2320/ZDI-CAN-16070
Resolves: rhbz#2109031, rhbz#2109033

Fixed packages 9

Release	Package	Fixed in
Oracle Linux · 7	xorg-x11-server-common	0:1.20.4-18.el7_9
Oracle Linux · 7	xorg-x11-server-devel	0:1.20.4-18.el7_9
Oracle Linux · 7	xorg-x11-server-source	0:1.20.4-18.el7_9
Oracle Linux · 7	xorg-x11-server-Xdmx	0:1.20.4-18.el7_9
Oracle Linux · 7	xorg-x11-server-Xephyr	0:1.20.4-18.el7_9
Oracle Linux · 7	xorg-x11-server-Xnest	0:1.20.4-18.el7_9
Oracle Linux · 7	xorg-x11-server-Xorg	0:1.20.4-18.el7_9
Oracle Linux · 7	xorg-x11-server-Xvfb	0:1.20.4-18.el7_9
Oracle Linux · 7	xorg-x11-server-Xwayland	0:1.20.4-18.el7_9

Vulnerabilities 2

Unscored —

CVE-2022-2319

A flaw was found in the Xorg-x11-server. An out-of-bounds access issue can occur in the ProcXkbSetGeometry function due…

xorg-server xorg-server xorg-server-hwe-16.04 xorg-server Debian Ubuntu Azure Linux Alpine

Sep 1, 2022
Unscored —

CVE-2022-2320

A flaw was found in the Xorg-x11-server. The specific flaw exists within the handling of ProcXkbSetDeviceInfo requests.…

xorg-server xorg-server xorg-server-hwe-16.04 xorg-server Debian Ubuntu Azure Linux Alpine

Sep 1, 2022