Red Hat Security Advisory

RHSA-2024:0320

xorg-x11-server security update

Released 2024-01-22 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Client (v. 7) xorg-x11-server-1.20.4-27.el7_9, xorg-x11-server-Xephyr-1.20.4-27.el7_9, xorg-x11-server-Xorg-1.20.4-27.el7_9 +1
Red Hat Enterprise Linux Client Optional (v. 7) xorg-x11-server-Xdmx-1.20.4-27.el7_9, xorg-x11-server-Xnest-1.20.4-27.el7_9, xorg-x11-server-Xvfb-1.20.4-27.el7_9 +3
Red Hat Enterprise Linux ComputeNode Optional (v. 7) xorg-x11-server-1.20.4-27.el7_9, xorg-x11-server-Xdmx-1.20.4-27.el7_9, xorg-x11-server-Xephyr-1.20.4-27.el7_9 +7
Red Hat Enterprise Linux Server (v. 7) xorg-x11-server-1.20.4-27.el7_9, xorg-x11-server-Xephyr-1.20.4-27.el7_9, xorg-x11-server-Xorg-1.20.4-27.el7_9 +1
Red Hat Enterprise Linux Server Optional (v. 7) xorg-x11-server-Xdmx-1.20.4-27.el7_9, xorg-x11-server-Xnest-1.20.4-27.el7_9, xorg-x11-server-Xvfb-1.20.4-27.el7_9 +4
Red Hat Enterprise Linux Workstation (v. 7) xorg-x11-server-1.20.4-27.el7_9, xorg-x11-server-Xephyr-1.20.4-27.el7_9, xorg-x11-server-Xorg-1.20.4-27.el7_9 +1
Red Hat Enterprise Linux Workstation Optional (v. 7) xorg-x11-server-Xdmx-1.20.4-27.el7_9, xorg-x11-server-Xnest-1.20.4-27.el7_9, xorg-x11-server-Xvfb-1.20.4-27.el7_9 +3

TI-2023-06228 CVE-2023-6816 · GHSA-pcjv-393q-rqf2

MEDIUM 46

A flaw was found in X.Org server.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02106 Published 2024-01-18 Partial fix · 1.1.0-25.el6_10.13, 1.20.4-27.el7_9 +13 CWE-787

TI-2024-14548 CVE-2024-21886 · GHSA-vx3h-cj8w-2h2c

MEDIUM 43

A heap buffer overflow flaw was found in the DisableDevice function in the X.Org server.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0142 Published 2024-02-28 Partial fix · 1.1.0-25.el6_10.13, 1.20.4-27.el7_9 +13 CWE-122

TI-2024-14547 CVE-2024-21885 · GHSA-2x93-8973-5mgq

LOW 39

A flaw was found in X.Org server.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0142 Published 2024-02-28 Partial fix · 21.1.11, 23.2.4 +15 CWE-122

TI-2024-00205 CVE-2024-0229 · GHSA-49wx-9h9f-8c9g

LOW 39

An out-of-bounds memory access flaw was found in the X.Org server.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01229 Published 2024-02-09 Partial fix · 21.1.11, 1.1.0-25.el6_10.13 +14 CWE-787

TI-2024-00371 CVE-2024-0409 · GHSA-w668-xcxf-v3gg

LOW 34

A flaw was found in the X.Org server.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00356 Published 2024-01-18 Partial fix · 21.1.11, 1.20.4-27.el7_9 +4 CWE-787

TI-2024-00370 CVE-2024-0408 · GHSA-rcj8-jx65-7c4r

LOW 25

A flaw was found in the X.Org server.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00321 Published 2024-01-18 Partial fix · 21.1.11, 1.20.4-27.el7_9 +4 CWE-158