Red Hat Security Advisory: Xorg security and bug fix update

Fixed packages 126

Vulnerabilities 13

• Unscored —
  CVE-2018-14598

  An issue was discovered in XListExtensions in ListExt.c in libX11 through 1.6.5. A malicious server can send a reply in…

  libx11 libx11 libx11 Debian Ubuntu Alpine
  Aug 24, 2018
• Unscored —
  CVE-2018-14599

  An issue was discovered in libX11 through 1.6.5. The function XListExtensions in ListExt.c is vulnerable to an off-by-o…

  libx11 libx11 libx11 Debian Ubuntu Alpine
  Aug 24, 2018
• Unscored —
  CVE-2018-14600

  An issue was discovered in libX11 through 1.6.5. The function XListExtensions in ListExt.c interprets a variable as sig…

  libx11 libx11 libx11 Debian Ubuntu Alpine
  Aug 24, 2018
• Unscored —
  CVE-2018-15853

  Endless recursion exists in xkbcomp/expr.c in xkbcommon and libxkbcommon before 0.8.1, which could be used by local att…

  libxkbcommon libxkbcommon x11-xkb-utils xkbcomp Debian Ubuntu Alpine
  Aug 25, 2018
• Unscored —
  CVE-2018-15854

  Unchecked NULL pointer usage in xkbcommon before 0.8.1 could be used by local attackers to crash (NULL pointer derefere…

  libxkbcommon libxkbcommon Debian Ubuntu
  Aug 25, 2018
• Unscored —
  CVE-2018-15855

  Unchecked NULL pointer usage in xkbcommon before 0.8.1 could be used by local attackers to crash (NULL pointer derefere…

  libxkbcommon libxkbcommon Debian Ubuntu
  Aug 25, 2018
• Unscored —
  CVE-2018-15856

  An infinite loop when reaching EOL unexpectedly in compose/parser.c (aka the keymap parser) in xkbcommon before 0.8.1 c…

  libxkbcommon libxkbcommon Debian Ubuntu
  Aug 25, 2018
• Unscored —
  CVE-2018-15857

  An invalid free in ExprAppendMultiKeysymList in xkbcomp/ast-build.c in xkbcommon before 0.8.1 could be used by local at…

  libxkbcommon libxkbcommon Debian Ubuntu
  Aug 25, 2018
• Unscored —
  CVE-2018-15859

  Unchecked NULL pointer usage when parsing invalid atoms in ExprResolveLhs in xkbcomp/expr.c in xkbcommon before 0.8.2 c…

  libxkbcommon libxkbcommon x11-xkb-utils xkbcomp Debian Ubuntu Alpine
  Aug 25, 2018
• Unscored —
  CVE-2018-15861

  Unchecked NULL pointer usage in ExprResolveLhs in xkbcomp/expr.c in xkbcommon before 0.8.2 could be used by local attac…

  libxkbcommon libxkbcommon x11-xkb-utils xkbcomp Debian Ubuntu Alpine
  Aug 25, 2018
• Unscored —
  CVE-2018-15862

  Unchecked NULL pointer usage in LookupModMask in xkbcomp/expr.c in xkbcommon before 0.8.2 could be used by local attack…

  libxkbcommon libxkbcommon Debian Ubuntu
  Aug 25, 2018
• Unscored —
  CVE-2018-15863

  Unchecked NULL pointer usage in ResolveStateAndPredicate in xkbcomp/compat.c in xkbcommon before 0.8.2 could be used by…

  libxkbcommon libxkbcommon xkbcomp x11-xkb-utils Debian Ubuntu Alpine
  Aug 25, 2018
• Unscored —
  CVE-2018-15864

  Unchecked NULL pointer usage in resolve_keysym in xkbcomp/parser.y in xkbcommon before 0.8.2 could be used by local att…

  libxkbcommon libxkbcommon Debian Ubuntu
  Aug 25, 2018

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• article
  https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.7_release_notes/index
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1529419
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1623009
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1623012
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1623013
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1623018
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1623022
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1623026
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1623028
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1623029
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1623030
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1623033
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1623238
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1623242
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1623250
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1624847
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1632807
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1635747
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1642197
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1648116
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1650166
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1650634
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1665433
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1674474
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1680120
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1724300
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2079.json
• report
  https://access.redhat.com/security/cve/CVE-2018-14598
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-14598
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-14598
• report
  https://access.redhat.com/security/cve/CVE-2018-14599
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-14599
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-14599
• report
  https://access.redhat.com/security/cve/CVE-2018-14600
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-14600
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-14600
• report
  https://access.redhat.com/security/cve/CVE-2018-15853
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-15853