Skip to content
OpenAdvisories
High ELSA-2022-8491 2 CVEs

Important: xorg-x11-server security update (Oracle Linux 7)

Published Nov 16, 2022 · Updated Nov 16, 2022

Summary

[1.20.4-19]
- CVE fix for: CVE-2022-3550, CVE-2022-3551
Resolves: rhbz#2140765, rhbz#2140770

Fixed packages 9

ReleasePackageFixed in
Oracle Linux · 7 xorg-x11-server-common 0:1.20.4-19.el7_9
Oracle Linux · 7 xorg-x11-server-devel 0:1.20.4-19.el7_9
Oracle Linux · 7 xorg-x11-server-source 0:1.20.4-19.el7_9
Oracle Linux · 7 xorg-x11-server-Xdmx 0:1.20.4-19.el7_9
Oracle Linux · 7 xorg-x11-server-Xephyr 0:1.20.4-19.el7_9
Oracle Linux · 7 xorg-x11-server-Xnest 0:1.20.4-19.el7_9
Oracle Linux · 7 xorg-x11-server-Xorg 0:1.20.4-19.el7_9
Oracle Linux · 7 xorg-x11-server-Xvfb 0:1.20.4-19.el7_9
Oracle Linux · 7 xorg-x11-server-Xwayland 0:1.20.4-19.el7_9

Vulnerabilities 2

  • Medium 5.5

    X.org Server xkb.c _GetCountedString buffer overflow

    A vulnerability classified as critical was found in X.org Server. Affected by this vulnerability is the function _GetCountedString of the file xkb/xkb.c. The manipulation leads to buffer overflow. It is recommended to apply a patch to fix this issue. The asso…

  • Low 3.5

    X.org Server xkb.c ProcXkbGetKbdByName memory leak

    A vulnerability, which was classified as problematic, has been found in X.org Server. Affected by this issue is the function ProcXkbGetKbdByName of the file xkb/xkb.c. The manipulation leads to memory leak. It is recommended to apply a patch to fix this issue…