Alerts This Week
Warning Icon 1 640
Alerts This Week
Warning Icon 1 640

Red Hat 8 RHSA-2022:7583-01 Moderate: Xorg-X11-Server Update

red hat
Calendar Grey November 8, 2022
Dist Redhat Esm H88
Cautionary security notice regarding xorg-x11-server and Xwayland patch deployments in Red Hat 8. Addresses boundary violation vulnerabilities.
An update for xorg-x11-server, xorg-x11-server-Xwayland, and xorg-x11-xtrans-devel is now available for Red Hat Enterprise Linux 8

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Summary

X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon.
Xwayland is an X server for running X clients under Wayland.
Security Fix(es):
* xorg-x11-server: X.Org Server ProcXkbSetGeometry out-of-bounds access (CVE-2022-2319)
* xorg-x11-server: out-of-bounds access in ProcXkbSetDeviceInfo request handler of the Xkb extension (CVE-2022-2320)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.7 Release Notes linked from the References section.

Topics%20covered

Topics Covered

security advisory security update Red Hat bug fix out-of-bounds Xorg Xwayland

References

https://access.redhat.com/security/cve/CVE-2022-2319 https://access.redhat.com/security/cve/CVE-2022-2320 https://access.redhat.com/security/updates/classification#moderate https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/8/html/8.7_release_notes/index

Package List

Red Hat Enterprise Linux AppStream (v. 8):
Source: xorg-x11-server-1.20.11-9.el8.src.rpm xorg-x11-server-Xwayland-21.1.3-6.el8.src.rpm
aarch64: xorg-x11-server-Xdmx-1.20.11-9.el8.aarch64.rpm xorg-x11-server-Xdmx-debuginfo-1.20.11-9.el8.aarch64.rpm xorg-x11-server-Xephyr-1.20.11-9.el8.aarch64.rpm xorg-x11-server-Xephyr-debuginfo-1.20.11-9.el8.aarch64.rpm xorg-x11-server-Xnest-1.20.11-9.el8.aarch64.rpm xorg-x11-server-Xnest-debuginfo-1.20.11-9.el8.aarch64.rpm xorg-x11-server-Xorg-1.20.11-9.el8.aarch64.rpm xorg-x11-server-Xorg-debuginfo-1.20.11-9.el8.aarch64.rpm xorg-x11-server-Xvfb-1.20.11-9.el8.aarch64.rpm xorg-x11-server-Xvfb-debuginfo-1.20.11-9.el8.aarch64.rpm xorg-x11-server-Xwayland-21.1.3-6.el8.aarch64.rpm xorg-x11-server-Xwayland-debuginfo-21.1.3-6.el8.aarch64.rpm xorg-x11-server-Xwayland-debugsource-21.1.3-6.el8.aarch64.rpm xorg-x11-server-common-1.20.11-9.el8.aarch64.rpm xorg-x11-server-debuginfo-1.20.11-9.el8.aarch64.rpm xorg-x11-server-debugsource-1.20.11-9.el8.aarch64.rpm
ppc64le: xorg-x11-server-Xdmx-1.20.11-9.el8.ppc64le.rpm xorg-x11-server-Xdmx-debuginfo-1.20.11-9.el8.ppc64le.rpm xorg-x11-server-Xephyr-1.20.11-9.el8.ppc64le.rpm xorg-x11-server-Xephyr-debuginfo-1.20.11-9.el8.ppc64le.rpm xorg-x11-server-Xnest-1.20.11-9.el8.ppc64le.rpm

Read the Full Advisory


Advisory ID: RHSA-2022:7583-01
Product: Red Hat Enterprise Linux
Advisory URL: https://access.redhat.com/errata/RHSA-2022:7583
Issue date: 2022-11-08

Topic

An update for xorg-x11-server, xorg-x11-server-Xwayland, andxorg-x11-xtrans-devel is now available for Red Hat Enterprise Linux 8.Red Hat Product Security has rated this update as having a security impactof Moderate. A Common Vulnerability Scoring System (CVSS) base score, whichgives a detailed severity rating, is available for each vulnerability fromthe CVE link(s) in the References section.

Topics%20covered

Topics Covered

security advisory security update Red Hat bug fix out-of-bounds Xorg Xwayland

Relevant Releases Architectures

Red Hat CodeReady Linux Builder (v. 8) - aarch64, noarch, ppc64le, s390x, x86_64

Red Hat Enterprise Linux AppStream (v. 8) - aarch64, ppc64le, s390x, x86_64

Bugs Fixed

2075132 - "Xorg -listen tcp" fails to start if ipv6 is disabled on the system

2106671 - CVE-2022-2319 xorg-x11-server: X.Org Server ProcXkbSetGeometry out-of-bounds access

2106683 - CVE-2022-2320 xorg-x11-server: out-of-bounds access in ProcXkbSetDeviceInfo request handler of the Xkb extension

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here