Red Hat Security AdvisoryRHSA-2024:1785
X.Org server security update
Released 2024-04-11 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) xorg-x11-server-1.20.4-29.el7_9, xorg-x11-server-Xephyr-1.20.4-29.el7_9, xorg-x11-server-Xorg-1.20.4-29.el7_9 +1
- Red Hat Enterprise Linux Client Optional (v. 7) xorg-x11-server-Xdmx-1.20.4-29.el7_9, xorg-x11-server-Xnest-1.20.4-29.el7_9, xorg-x11-server-Xvfb-1.20.4-29.el7_9 +3
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) xorg-x11-server-1.20.4-29.el7_9, xorg-x11-server-Xdmx-1.20.4-29.el7_9, xorg-x11-server-Xephyr-1.20.4-29.el7_9 +7
- Red Hat Enterprise Linux Server (v. 7) xorg-x11-server-1.20.4-29.el7_9, xorg-x11-server-Xephyr-1.20.4-29.el7_9, xorg-x11-server-Xorg-1.20.4-29.el7_9 +1
- Red Hat Enterprise Linux Server Optional (v. 7) xorg-x11-server-Xdmx-1.20.4-29.el7_9, xorg-x11-server-Xnest-1.20.4-29.el7_9, xorg-x11-server-Xvfb-1.20.4-29.el7_9 +4
- Red Hat Enterprise Linux Workstation (v. 7) xorg-x11-server-1.20.4-29.el7_9, xorg-x11-server-Xephyr-1.20.4-29.el7_9, xorg-x11-server-Xorg-1.20.4-29.el7_9 +1
- Red Hat Enterprise Linux Workstation Optional (v. 7) xorg-x11-server-Xdmx-1.20.4-29.el7_9, xorg-x11-server-Xnest-1.20.4-29.el7_9, xorg-x11-server-Xvfb-1.20.4-29.el7_9 +3
Fixes 3 records
Priority MEDIUM 40
A use-after-free vulnerability was found in the ProcRenderAddGlyphs() function of Xorg servers.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.01859 · Published 2024-04-05 · Partial fix · 1.1.0-25.el6_10.13, 1.20.4-29.el7_9 +14 CWE-416
Priority LOW 35
A heap-based buffer over-read vulnerability was found in the X.org server's ProcXIGetSelectedEvents() function.
CVSS 3.1HIGH 7.3· Local · Low privileges · No interaction · EPSS 0.00517 · Published 2024-04-04 · Partial fix · 1.1.0-25.el6_10.13, 1.20.4-29.el7_9 +14 CWE-126
Priority LOW 33
A heap-based buffer over-read vulnerability was found in the X.org server's ProcXIPassiveGrabDevice() function.
CVSS 3.1HIGH 7.3· Local · Low privileges · No interaction · EPSS 0.00517 · Published 2024-04-04 · Partial fix · 1.1.0-25.el6_10.13, 1.20.4-29.el7_9 +14 CWE-126