Red Hat Security Advisory

RHSA-2024:9093

xorg-x11-server-Xwayland security update

Released 2024-11-12 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat CodeReady Linux Builder (v. 9) xorg-x11-server-Xwayland-23.2.7-1.el9, xorg-x11-server-Xwayland-devel-23.2.7-1.el9
Red Hat Enterprise Linux AppStream (v. 9) xorg-x11-server-Xwayland-23.2.7-1.el9

TI-2024-20472 CVE-2024-31083 · GHSA-q6w6-rjjj-5p52

MEDIUM 40

A use-after-free vulnerability was found in the ProcRenderAddGlyphs() function of Xorg servers.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01859 Published 2024-04-05 Partial fix · 1.1.0-25.el6_10.13, 1.20.4-29.el7_9 +14 CWE-416

TI-2024-20469 CVE-2024-31080 · GHSA-mqqf-4p7r-rf89

LOW 35

A heap-based buffer over-read vulnerability was found in the X.org server's ProcXIGetSelectedEvents() function.

CVSS 3.1HIGH 7.3 Local Low privileges No interaction EPSS 0.00517 Published 2024-04-04 Partial fix · 1.1.0-25.el6_10.13, 1.20.4-29.el7_9 +14 CWE-126

TI-2024-20470 CVE-2024-31081 · GHSA-3fpg-j8cw-vcjq

LOW 33

A heap-based buffer over-read vulnerability was found in the X.org server's ProcXIPassiveGrabDevice() function.

CVSS 3.1HIGH 7.3 Local Low privileges No interaction EPSS 0.00517 Published 2024-04-04 Partial fix · 1.1.0-25.el6_10.13, 1.20.4-29.el7_9 +14 CWE-126