Red Hat Security AdvisoryRHSA-2019:2079
Xorg security and bug fix update
Released 2019-08-06 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) gdm-1:3.28.2-16.el7, libX11-1.6.7-2.el7, libX11-common-1.6.7-2.el7 +10
- Red Hat Enterprise Linux Client Optional (v. 7) gdm-devel-1:3.28.2-16.el7, gdm-pam-extensions-devel-1:3.28.2-16.el7, libxkbcommon-devel-0.7.1-3.el7 +8
- Red Hat Enterprise Linux ComputeNode (v. 7) libX11-1.6.7-2.el7, libX11-common-1.6.7-2.el7, libxkbcommon-0.7.1-3.el7
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) gdm-1:3.28.2-16.el7, gdm-devel-1:3.28.2-16.el7, gdm-pam-extensions-devel-1:3.28.2-16.el7 +16
- Red Hat Enterprise Linux Server (v. 7) gdm-1:3.28.2-16.el7, gdm-1:3.28.2-16.el7.ppc, libX11-1.6.7-2.el7 +21
- Red Hat Enterprise Linux Server Optional (v. 7) gdm-devel-1:3.28.2-16.el7, gdm-devel-1:3.28.2-16.el7.ppc, gdm-pam-extensions-devel-1:3.28.2-16.el7 +12
- Red Hat Enterprise Linux Workstation (v. 7) gdm-1:3.28.2-16.el7, libX11-1.6.7-2.el7, libX11-common-1.6.7-2.el7 +13
- Red Hat Enterprise Linux Workstation Optional (v. 7) gdm-devel-1:3.28.2-16.el7, gdm-pam-extensions-devel-1:3.28.2-16.el7, libxkbcommon-x11-devel-0.7.1-3.el7 +7
Fixes 13 records
Priority MEDIUM 54
An issue was discovered in libX11 through 1.6.5.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.09224 · Published 2018-08-24 · Partial fix CWE-787
Priority MEDIUM 49
An issue was discovered in libX11 through 1.6.5.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.04207 · Published 2018-08-24 · Partial fix CWE-193
Priority MEDIUM 40
An issue was discovered in XListExtensions in ListExt.c in libX11 through 1.6.5.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.04175 · Published 2018-08-24 · Partial fix CWE-20
Priority LOW 34
An invalid free in ExprAppendMultiKeysymList in xkbcomp/ast-build.c in xkbcommon before 0.8.1 could be used by local attackers to crash xkbcommon keymap parsers or possibly have unspecified other impact by supplying a cr…
CVSS 3.0HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00447 · Published 2018-08-25 · Fixed CWE-416
Priority LOW 26
Unchecked NULL pointer usage in ResolveStateAndPredicate in xkbcomp/compat.c in xkbcommon before 0.8.2 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon parser by supplying a crafted keym…
CVSS 3.0MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00535 · Published 2018-08-25 · Partial fix CWE-476
Priority LOW 26
Unchecked NULL pointer usage in ExprResolveLhs in xkbcomp/expr.c in xkbcommon before 0.8.2 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon parser by supplying a crafted keymap file that…
CVSS 3.0MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00535 · Published 2018-08-25 · Partial fix CWE-476
Priority LOW 26
Unchecked NULL pointer usage when parsing invalid atoms in ExprResolveLhs in xkbcomp/expr.c in xkbcommon before 0.8.2 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon parser by supplying…
CVSS 3.0MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00535 · Published 2018-08-25 · Partial fix CWE-476
Priority LOW 26
Endless recursion exists in xkbcomp/expr.c in xkbcommon and libxkbcommon before 0.8.1, which could be used by local attackers to crash xkbcommon users by supplying a crafted keymap file that triggers boolean negation.
CVSS 3.0MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00535 · Published 2018-08-25 · Partial fix CWE-400
Priority LOW 25
Unchecked NULL pointer usage in resolve_keysym in xkbcomp/parser.y in xkbcommon before 0.8.2 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon parser by supplying a crafted keymap file, b…
CVSS 3.0MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00433 · Published 2018-08-25 · Fixed CWE-476
Priority LOW 25
Unchecked NULL pointer usage in LookupModMask in xkbcomp/expr.c in xkbcommon before 0.8.2 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon parser by supplying a crafted keymap file with…
CVSS 3.0MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00433 · Published 2018-08-25 · Fixed CWE-476
Priority LOW 25
An infinite loop when reaching EOL unexpectedly in compose/parser.c (aka the keymap parser) in xkbcommon before 0.8.1 could be used by local attackers to cause a denial of service during parsing of crafted keymap files.
CVSS 3.0MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00428 · Published 2018-08-25 · Fixed CWE-835
Priority LOW 25
Unchecked NULL pointer usage in xkbcommon before 0.8.1 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon parser by supplying a crafted keymap file, because the XkbFile for an xkb_geometry…
CVSS 3.0MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00433 · Published 2018-08-25 · Fixed CWE-476
Priority LOW 25
Unchecked NULL pointer usage in xkbcommon before 0.8.1 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon parser by supplying a crafted keymap file, because geometry tokens were desupporte…
CVSS 3.0MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00433 · Published 2018-08-25 · Fixed CWE-476