Medium ELSA-2022-8221 2 CVEs

Moderate: xorg-x11-server security and bug fix update (Oracle Linux 9)

Published Nov 22, 2022 · Updated Nov 22, 2022

Ecosystem: Oracle Linux

Summary

[1.20.11-11]
- CVE fix for: CVE-2022-2319/ZDI-CAN-16062, CVE-2022-2320/ZDI-CAN-16070
Resolves: rhbz#2108157, rhbz#2108162

Fixed packages 8

Release	Package	Fixed in
Oracle Linux · 9	xorg-x11-server-common	0:1.20.11-11.el9
Oracle Linux · 9	xorg-x11-server-devel	0:1.20.11-11.el9
Oracle Linux · 9	xorg-x11-server-source	0:1.20.11-11.el9
Oracle Linux · 9	xorg-x11-server-Xdmx	0:1.20.11-11.el9
Oracle Linux · 9	xorg-x11-server-Xephyr	0:1.20.11-11.el9
Oracle Linux · 9	xorg-x11-server-Xnest	0:1.20.11-11.el9
Oracle Linux · 9	xorg-x11-server-Xorg	0:1.20.11-11.el9
Oracle Linux · 9	xorg-x11-server-Xvfb	0:1.20.11-11.el9

Vulnerabilities 2

Unscored —

CVE-2022-2319

A flaw was found in the Xorg-x11-server. An out-of-bounds access issue can occur in the ProcXkbSetGeometry function due…

xorg-server xorg-server xorg-server-hwe-16.04 xorg-server-hwe-18.04 Debian Ubuntu Azure Linux Alpine

Sep 1, 2022
Unscored —

CVE-2022-2320

A flaw was found in the Xorg-x11-server. The specific flaw exists within the handling of ProcXkbSetDeviceInfo requests.…

xorg-server xorg-server xorg-server-hwe-16.04 xorg-server-hwe-18.04 Debian Ubuntu Azure Linux Alpine

Sep 1, 2022