Summary
[1.20.4-24]
- CVE fix for: CVE-2023-5367
Resolves: https://issues.redhat.com/browse/RHEL-13424
Fixed packages 9
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | xorg-x11-server-common | 0:1.20.4-24.el7_9 |
| Oracle Linux · 7 | xorg-x11-server-devel | 0:1.20.4-24.el7_9 |
| Oracle Linux · 7 | xorg-x11-server-source | 0:1.20.4-24.el7_9 |
| Oracle Linux · 7 | xorg-x11-server-Xdmx | 0:1.20.4-24.el7_9 |
| Oracle Linux · 7 | xorg-x11-server-Xephyr | 0:1.20.4-24.el7_9 |
| Oracle Linux · 7 | xorg-x11-server-Xnest | 0:1.20.4-24.el7_9 |
| Oracle Linux · 7 | xorg-x11-server-Xorg | 0:1.20.4-24.el7_9 |
| Oracle Linux · 7 | xorg-x11-server-Xvfb | 0:1.20.4-24.el7_9 |
| Oracle Linux · 7 | xorg-x11-server-Xwayland | 0:1.20.4-24.el7_9 |
Vulnerabilities 1
-
High 7.8
Xorg-x11-server: out-of-bounds write in xichangedeviceproperty/rrchangeoutputproperty
A out-of-bounds write flaw was found in the xorg-x11-server. This issue occurs due to an incorrect calculation of a buffer offset when copying data stored in the heap in the XIChangeDeviceProperty function in Xi/xiproperty.c and in RRChangeOutputProperty func…