(RHSA-2024:1785) Important: X.Org server security update

2024-04-1115:27:06

access.redhat.com

x.org

security update

heap buffer overread

data leakage

cve-2024-31080

cve-2024-31081

cve-2024-31083

7.4 High

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.2%

JSON

X.Org is an open-source implementation of the X Window System. It provides the
basic low-level functionality that full-fledged graphical user interfaces are
designed upon.

Security Fix(es):

xorg-x11-server: Heap buffer overread/data leakage in ProcXIGetSelectedEvents (CVE-2024-31080)
xorg-x11-server: Heap buffer overread/data leakage in ProcXIPassiveGrabDevice (CVE-2024-31081)
xorg-x11-server: User-after-free in ProcRenderAddGlyphs (CVE-2024-31083)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHat7ppc64xorg-x11-server-xorg< 1.20.4-29.el7_9xorg-x11-server-Xorg-1.20.4-29.el7_9.ppc64.rpm
RedHat7x86_64xorg-x11-server-xwayland< 1.20.4-29.el7_9xorg-x11-server-Xwayland-1.20.4-29.el7_9.x86_64.rpm
RedHat7ppc64xorg-x11-server-debuginfo< 1.20.4-29.el7_9xorg-x11-server-debuginfo-1.20.4-29.el7_9.ppc64.rpm
RedHat7ppc64lexorg-x11-server-debuginfo< 1.20.4-29.el7_9xorg-x11-server-debuginfo-1.20.4-29.el7_9.ppc64le.rpm
RedHat7ppc64lexorg-x11-server-xwayland< 1.20.4-29.el7_9xorg-x11-server-Xwayland-1.20.4-29.el7_9.ppc64le.rpm
RedHat7x86_64xorg-x11-server-xorg< 1.20.4-29.el7_9xorg-x11-server-Xorg-1.20.4-29.el7_9.x86_64.rpm
RedHat7s390xxorg-x11-server-debuginfo< 1.20.4-29.el7_9xorg-x11-server-debuginfo-1.20.4-29.el7_9.s390x.rpm
RedHat7x86_64xorg-x11-server-devel< 1.20.4-29.el7_9xorg-x11-server-devel-1.20.4-29.el7_9.x86_64.rpm
RedHat7x86_64xorg-x11-server-xephyr< 1.20.4-29.el7_9xorg-x11-server-Xephyr-1.20.4-29.el7_9.x86_64.rpm
RedHat7ppc64xorg-x11-server-common< 1.20.4-29.el7_9xorg-x11-server-common-1.20.4-29.el7_9.ppc64.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	7	ppc64	xorg-x11-server-xorg	< 1.20.4-29.el7_9	xorg-x11-server-Xorg-1.20.4-29.el7_9.ppc64.rpm
RedHat	7	x86_64	xorg-x11-server-xwayland	< 1.20.4-29.el7_9	xorg-x11-server-Xwayland-1.20.4-29.el7_9.x86_64.rpm
RedHat	7	ppc64	xorg-x11-server-debuginfo	< 1.20.4-29.el7_9	xorg-x11-server-debuginfo-1.20.4-29.el7_9.ppc64.rpm
RedHat	7	ppc64le	xorg-x11-server-debuginfo	< 1.20.4-29.el7_9	xorg-x11-server-debuginfo-1.20.4-29.el7_9.ppc64le.rpm
RedHat	7	ppc64le	xorg-x11-server-xwayland	< 1.20.4-29.el7_9	xorg-x11-server-Xwayland-1.20.4-29.el7_9.ppc64le.rpm
RedHat	7	x86_64	xorg-x11-server-xorg	< 1.20.4-29.el7_9	xorg-x11-server-Xorg-1.20.4-29.el7_9.x86_64.rpm
RedHat	7	s390x	xorg-x11-server-debuginfo	< 1.20.4-29.el7_9	xorg-x11-server-debuginfo-1.20.4-29.el7_9.s390x.rpm
RedHat	7	x86_64	xorg-x11-server-devel	< 1.20.4-29.el7_9	xorg-x11-server-devel-1.20.4-29.el7_9.x86_64.rpm
RedHat	7	x86_64	xorg-x11-server-xephyr	< 1.20.4-29.el7_9	xorg-x11-server-Xephyr-1.20.4-29.el7_9.x86_64.rpm
RedHat	7	ppc64	xorg-x11-server-common	< 1.20.4-29.el7_9	xorg-x11-server-common-1.20.4-29.el7_9.ppc64.rpm