xorg security update

2024-01-2618:10:28

CentOS Project

lists.centos.org

x.org

security update

buffer overflow

memory access

selinux

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

8.7

Confidence

High

EPSS

0.004

Percentile

73.8%

JSON

CentOS Errata and Security Advisory CESA-2024:0320

X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon.

Security Fix(es):

xorg-x11-server: Heap buffer overflow in DeviceFocusEvent and ProcXIQueryPointer (CVE-2023-6816)
xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access (CVE-2024-0229)
xorg-x11-server: SELinux unlabeled GLX PBuffer (CVE-2024-0408)
xorg-x11-server: SELinux context corruption (CVE-2024-0409)
xorg-x11-server: heap buffer overflow in XISendDeviceHierarchyEvent (CVE-2024-21885)
xorg-x11-server: heap buffer overflow in DisableDevice (CVE-2024-21886)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Merged security bulletin from advisories:
https://lists.centos.org/pipermail/centos-announce/2024-January/099216.html

Affected packages:
xorg-x11-server-Xdmx
xorg-x11-server-Xephyr
xorg-x11-server-Xnest
xorg-x11-server-Xorg
xorg-x11-server-Xvfb
xorg-x11-server-Xwayland
xorg-x11-server-common
xorg-x11-server-devel
xorg-x11-server-source

Upstream details at:
https://access.redhat.com/errata/RHSA-2024:0320

OSVersionArchitecturePackageVersionFilename
CentOS7x86_64xorg-x11-server-common< 1.20.4-27.el7_9xorg-x11-server-common-1.20.4-27.el7_9.x86_64.rpm
CentOS7i686xorg-x11-server-devel< 1.20.4-27.el7_9xorg-x11-server-devel-1.20.4-27.el7_9.i686.rpm
CentOS7x86_64xorg-x11-server-devel< 1.20.4-27.el7_9xorg-x11-server-devel-1.20.4-27.el7_9.x86_64.rpm
CentOS7noarchxorg-x11-server-source< 1.20.4-27.el7_9xorg-x11-server-source-1.20.4-27.el7_9.noarch.rpm
CentOS7x86_64xorg-x11-server-xdmx< 1.20.4-27.el7_9xorg-x11-server-Xdmx-1.20.4-27.el7_9.x86_64.rpm
CentOS7x86_64xorg-x11-server-xephyr< 1.20.4-27.el7_9xorg-x11-server-Xephyr-1.20.4-27.el7_9.x86_64.rpm
CentOS7x86_64xorg-x11-server-xnest< 1.20.4-27.el7_9xorg-x11-server-Xnest-1.20.4-27.el7_9.x86_64.rpm
CentOS7x86_64xorg-x11-server-xorg< 1.20.4-27.el7_9xorg-x11-server-Xorg-1.20.4-27.el7_9.x86_64.rpm
CentOS7x86_64xorg-x11-server-xvfb< 1.20.4-27.el7_9xorg-x11-server-Xvfb-1.20.4-27.el7_9.x86_64.rpm
CentOS7x86_64xorg-x11-server-xwayland< 1.20.4-27.el7_9xorg-x11-server-Xwayland-1.20.4-27.el7_9.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
CentOS	7	x86_64	xorg-x11-server-common	< 1.20.4-27.el7_9	xorg-x11-server-common-1.20.4-27.el7_9.x86_64.rpm
CentOS	7	i686	xorg-x11-server-devel	< 1.20.4-27.el7_9	xorg-x11-server-devel-1.20.4-27.el7_9.i686.rpm
CentOS	7	x86_64	xorg-x11-server-devel	< 1.20.4-27.el7_9	xorg-x11-server-devel-1.20.4-27.el7_9.x86_64.rpm
CentOS	7	noarch	xorg-x11-server-source	< 1.20.4-27.el7_9	xorg-x11-server-source-1.20.4-27.el7_9.noarch.rpm
CentOS	7	x86_64	xorg-x11-server-xdmx	< 1.20.4-27.el7_9	xorg-x11-server-Xdmx-1.20.4-27.el7_9.x86_64.rpm
CentOS	7	x86_64	xorg-x11-server-xephyr	< 1.20.4-27.el7_9	xorg-x11-server-Xephyr-1.20.4-27.el7_9.x86_64.rpm
CentOS	7	x86_64	xorg-x11-server-xnest	< 1.20.4-27.el7_9	xorg-x11-server-Xnest-1.20.4-27.el7_9.x86_64.rpm
CentOS	7	x86_64	xorg-x11-server-xorg	< 1.20.4-27.el7_9	xorg-x11-server-Xorg-1.20.4-27.el7_9.x86_64.rpm
CentOS	7	x86_64	xorg-x11-server-xvfb	< 1.20.4-27.el7_9	xorg-x11-server-Xvfb-1.20.4-27.el7_9.x86_64.rpm
CentOS	7	x86_64	xorg-x11-server-xwayland	< 1.20.4-27.el7_9	xorg-x11-server-Xwayland-1.20.4-27.el7_9.x86_64.rpm