Red Hat Security Advisory: xorg-x11-server security and bug fix update

Fixed packages 23

Vulnerabilities 9

• High 8.8
  CVE-2022-46340

  A vulnerability was found in X.Org. This security flaw occurs becuase the swap handler for the XTestFakeInput request o…

  xorg-server xorg-server xorg-server-hwe-16.04 xorg-server Debian Ubuntu Azure Linux Alpine
  Dec 14, 2022
• High 8.8
  CVE-2022-46341

  A vulnerability was found in X.Org. This security flaw occurs because the handler for the XIPassiveUngrab request acces…

  xorg-server xorg-server xorg-server-hwe-16.04 xorg-server Debian Ubuntu Azure Linux Alpine
  Dec 14, 2022
• High 8.8
  CVE-2022-46342

  A vulnerability was found in X.Org. This security flaw occurs because the handler for the XvdiSelectVideoNotify request…

  xorg-server xorg-server xorg-server-hwe-16.04 xorg-server Debian Ubuntu Azure Linux Alpine
  Dec 14, 2022
• High 8.8
  CVE-2022-46343

  A vulnerability was found in X.Org. This security flaw occurs because the handler for the ScreenSaverSetAttributes requ…

  xorg-server xorg-server xorg-server-hwe-16.04 xorg-server Debian Ubuntu Azure Linux Alpine
  Dec 14, 2022
• High 7.8
  CVE-2022-4283

  A vulnerability was found in X.Org. This security flaw occurs because the XkbCopyNames function left a dangling pointer…

  xorg-server xorg-server xorg-server-hwe-16.04 xorg-server Debian Ubuntu Azure Linux Alpine
  Dec 14, 2022
• High 7.8
  CVE-2023-0494

  A vulnerability was found in X.Org. This issue occurs due to a dangling pointer in DeepCopyPointerClasses that can be e…

  xorg-server xorg-server xorg-server-hwe-16.04 xorg-server Debian Ubuntu Alpine
  Mar 27, 2023
• Medium 5.5
  CVE-2022-3550

  X.org Server xkb.c _GetCountedString buffer overflow

  A vulnerability classified as critical was found in X.org Server. Affected by this vulnerability is the function _GetCountedString of the file xkb/xkb.c. The manipulation leads to buffer overflow. It is recommended to apply a patch to fix this issue. The asso…

  X.Org Server xorg-server xorg-server Debian Ubuntu Azure Linux
  Oct 17, 2022
• Low 3.5
  CVE-2022-3551

  X.org Server xkb.c ProcXkbGetKbdByName memory leak

  A vulnerability, which was classified as problematic, has been found in X.org Server. Affected by this issue is the function ProcXkbGetKbdByName of the file xkb/xkb.c. The manipulation leads to memory leak. It is recommended to apply a patch to fix this issue…

  X.Org Server xorg-server xorg-server Debian Ubuntu Azure Linux
  Oct 17, 2022
• Unscored —
  CVE-2022-46344

  A vulnerability was found in X.Org. This security flaw occurs because the handler for the XIChangeProperty request has …

  xorg-server xorg-server xorg-server-hwe-16.04 xorg-server Debian Ubuntu Azure Linux Alpine
  Dec 14, 2022

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• article
  https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.2_release_notes/index
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2140698
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2140701
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2148292
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2151755
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2151756
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2151757
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2151758
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2151760
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2151761
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2165995
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2172116
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_2248.json
• report
  https://access.redhat.com/security/cve/CVE-2022-3550
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-3550
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-3550
• report
  https://access.redhat.com/security/cve/CVE-2022-3551
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-3551
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-3551
• report
  https://access.redhat.com/security/cve/CVE-2022-4283
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-4283
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-4283
• report
  https://access.redhat.com/security/cve/CVE-2022-46340
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-46340
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-46340
• report
  https://access.redhat.com/security/cve/CVE-2022-46341
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-46341
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-46341
• report
  https://access.redhat.com/security/cve/CVE-2022-46342
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-46342
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-46342
• report
  https://access.redhat.com/security/cve/CVE-2022-46343
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-46343
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-46343
• report
  https://access.redhat.com/security/cve/CVE-2022-46344
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-46344
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-46344
• report
  https://access.redhat.com/security/cve/CVE-2023-0494