Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
slackwareSlackware Linux ProjectSSA-2022-194-01
HistoryJul 13, 2022 - 8:04 p.m.

[slackware-security] xorg-server

2022-07-1320:04:43
Slackware Linux Project
www.slackware.com
11

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

35.6%

JSON

New xorg-server packages are available for Slackware 15.0 and -current to
fix security issues.

Here are the details from the Slackware 15.0 ChangeLog:

patches/packages/xorg-server-1.20.14-i586-3_slack15.0.txz: Rebuilt.
xkb: switch to array index loops to moving pointers.
xkb: add request length validation for XkbSetGeometry.
xkb: swap XkbSetDeviceInfo and XkbSetDeviceInfoCheck.
For more information, see:
https://vulners.com/cve/CVE-2022-2319
https://vulners.com/cve/CVE-2022-2320
(* Security fix *)
patches/packages/xorg-server-xephyr-1.20.14-i586-3_slack15.0.txz: Rebuilt.
patches/packages/xorg-server-xnest-1.20.14-i586-3_slack15.0.txz: Rebuilt.
patches/packages/xorg-server-xvfb-1.20.14-i586-3_slack15.0.txz: Rebuilt.

Where to find the new packages:

Thanks to the friendly folks at the OSU Open Source Lab
(http://osuosl.org) for donating FTP and rsync hosting
to the Slackware project! :-)

Also see the “Get Slack” section on http://slackware.com for
additional mirror sites near you.

Updated packages for Slackware 15.0:
ftp://ftp.slackware.com/pub/slackware/slackware-15.0/patches/packages/xorg-server-1.20.14-i586-3_slack15.0.txz
ftp://ftp.slackware.com/pub/slackware/slackware-15.0/patches/packages/xorg-server-xephyr-1.20.14-i586-3_slack15.0.txz
ftp://ftp.slackware.com/pub/slackware/slackware-15.0/patches/packages/xorg-server-xnest-1.20.14-i586-3_slack15.0.txz
ftp://ftp.slackware.com/pub/slackware/slackware-15.0/patches/packages/xorg-server-xvfb-1.20.14-i586-3_slack15.0.txz

Updated packages for Slackware x86_64 15.0:
ftp://ftp.slackware.com/pub/slackware/slackware64-15.0/patches/packages/xorg-server-1.20.14-x86_64-3_slack15.0.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-15.0/patches/packages/xorg-server-xephyr-1.20.14-x86_64-3_slack15.0.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-15.0/patches/packages/xorg-server-xnest-1.20.14-x86_64-3_slack15.0.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-15.0/patches/packages/xorg-server-xvfb-1.20.14-x86_64-3_slack15.0.txz

Updated packages for Slackware -current:
ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/x/xorg-server-1.20.14-i586-4.txz
ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/x/xorg-server-xephyr-1.20.14-i586-4.txz
ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/x/xorg-server-xnest-1.20.14-i586-4.txz
ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/x/xorg-server-xvfb-1.20.14-i586-4.txz

Updated packages for Slackware x86_64 -current:
ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/x/xorg-server-1.20.14-x86_64-4.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/x/xorg-server-xephyr-1.20.14-x86_64-4.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/x/xorg-server-xnest-1.20.14-x86_64-4.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/x/xorg-server-xvfb-1.20.14-x86_64-4.txz

MD5 signatures:

Slackware 15.0 packages:
2a39bcbda1fad77c4936a08dcf1caebe xorg-server-1.20.14-i586-3_slack15.0.txz
a277f13d1ea009fcce3e67415c79745f xorg-server-xephyr-1.20.14-i586-3_slack15.0.txz
3e851870eaad3d3492c75117251b946a xorg-server-xnest-1.20.14-i586-3_slack15.0.txz
c3d2cbe293d26ff47e3a3b4fad7b8ff9 xorg-server-xvfb-1.20.14-i586-3_slack15.0.txz

Slackware x86_64 15.0 packages:
4296492ab74754e8b67c9e52bedf76ee xorg-server-1.20.14-x86_64-3_slack15.0.txz
34863946fa50b8fe869a48449c8af236 xorg-server-xephyr-1.20.14-x86_64-3_slack15.0.txz
99deb8444e34a8bb90eb1082ccea8e08 xorg-server-xnest-1.20.14-x86_64-3_slack15.0.txz
550ca7acb5be195712ac66bad373651a xorg-server-xvfb-1.20.14-x86_64-3_slack15.0.txz

Slackware -current packages:
80bd0b4e5849ce53b8b47a8571b00062 x/xorg-server-1.20.14-i586-4.txz
6c479d2f3ee30c017ebda4b4634f63ec x/xorg-server-xephyr-1.20.14-i586-4.txz
bea775722de1898d6f974958700fb64a x/xorg-server-xnest-1.20.14-i586-4.txz
db136a96940eafd5e8dc503cd225d765 x/xorg-server-xvfb-1.20.14-i586-4.txz

Slackware x86_64 -current packages:
55082a6088ec0ed0b0fc49c75ac42562 x/xorg-server-1.20.14-x86_64-4.txz
a21d0968c7f22c653ba2b326e65df42c x/xorg-server-xephyr-1.20.14-x86_64-4.txz
1a1710af2811fddcfa72ab22cf46b2a8 x/xorg-server-xnest-1.20.14-x86_64-4.txz
619d5dd793a7f2dc0ab8de7077d6f6e8 x/xorg-server-xvfb-1.20.14-x86_64-4.txz

Installation instructions:

Upgrade the packages as root:
> upgradepkg xorg-server-*.txz

OSVersionArchitecturePackageVersionFilename
Slackware15.0i586xorg-server< 1.20.14xorg-server-1.20.14-i586-3_slack15.0.txz
Slackware15.0i586xorg-server-xephyr< 1.20.14xorg-server-xephyr-1.20.14-i586-3_slack15.0.txz
Slackware15.0i586xorg-server-xnest< 1.20.14xorg-server-xnest-1.20.14-i586-3_slack15.0.txz
Slackware15.0i586xorg-server-xvfb< 1.20.14xorg-server-xvfb-1.20.14-i586-3_slack15.0.txz
Slackware15.0x86_64xorg-server< 1.20.14xorg-server-1.20.14-x86_64-3_slack15.0.txz
Slackware15.0x86_64xorg-server-xephyr< 1.20.14xorg-server-xephyr-1.20.14-x86_64-3_slack15.0.txz
Slackware15.0x86_64xorg-server-xnest< 1.20.14xorg-server-xnest-1.20.14-x86_64-3_slack15.0.txz
Slackware15.0x86_64xorg-server-xvfb< 1.20.14xorg-server-xvfb-1.20.14-x86_64-3_slack15.0.txz
Slackwarecurrenti586xorg-server< 1.20.14xorg-server-1.20.14-i586-4.txz
Slackwarecurrenti586xorg-server-xephyr< 1.20.14xorg-server-xephyr-1.20.14-i586-4.txz
Rows per page:
1-10 of 161

Related

nessus 44
fedora 4
openvas 30
ubuntu 2
osv 12
redhat 4
almalinux 3
slackware 1
mageia 1
rocky 3
oraclelinux 4
ibm 1
debian 2
suse 2
gentoo 1
altlinux 1
amazon 2
redos 1
centos 1
redhatcve 2
ubuntucve 2
veracode 2
prion 2
zdi 2
nvd 2
cvelist 2
cve 2
debiancve 2
alpinelinux 2
nessus
nessus
SUSE SLES15 Security Update : xorg-x11-server (SUSE-SU-2022:2371-1)
2022-07-13 00:00:00
Debian DLA-3068-1 : xorg-server - LTS security update
2022-08-04 00:00:00
Oracle Linux 7 : xorg-x11-server (ELSA-2022-5905)
2022-08-05 00:00:00
fedora
fedora
[SECURITY] Fedora 36 Update: xorg-x11-server-Xwayland-22.1.3-1.fc36
2022-07-15 01:18:18
[SECURITY] Fedora 35 Update: xorg-x11-server-Xwayland-21.1.4-2.fc35
2022-07-29 01:24:52
[SECURITY] Fedora 35 Update: xorg-x11-server-1.20.14-7.fc35
2022-07-29 01:24:50
openvas
openvas
Mageia: Security Advisory (MGASA-2022-0256)
2022-07-14 00:00:00
Slackware: Security Advisory (SSA:2022-194-01)
2022-07-14 00:00:00
Huawei EulerOS: Security Advisory for xorg-x11-server (EulerOS-SA-2023-1699)
2023-05-08 00:00:00
ubuntu
ubuntu
X.Org X Server vulnerabilities
2022-07-12 00:00:00
X.Org X Server vulnerabilities
2022-07-12 00:00:00
osv
osv
Moderate: xorg-x11-server and xorg-x11-server-Xwayland security and bug fix update
2022-11-08 00:00:00
xorg-server, xorg-server-hwe-18.04, xwayland vulnerabilities
2022-07-12 13:38:41
Moderate: xorg-x11-server security and bug fix update
2022-11-15 00:00:00
redhat
redhat
(RHSA-2022:5905) Important: xorg-x11-server security update
2022-08-04 09:54:38
(RHSA-2022:8222) Moderate: xorg-x11-server-Xwayland security update
2022-11-15 06:18:43
(RHSA-2022:7583) Moderate: xorg-x11-server and xorg-x11-server-Xwayland security and bug fix update
2022-11-08 06:23:38
almalinux
almalinux
Moderate: xorg-x11-server and xorg-x11-server-Xwayland security and bug fix update
2022-11-08 00:00:00
Moderate: xorg-x11-server security and bug fix update
2022-11-15 00:00:00
Moderate: xorg-x11-server-Xwayland security update
2022-11-15 00:00:00
slackware
slackware
SSA-2022-0928190027
2022-09-28 19:00:27
mageia
mageia
Updated x11-server packages fix security vulnerabilities
2022-07-13 10:25:41
rocky
rocky
xorg-x11-server-Xwayland security update
2022-11-15 06:18:43
xorg-x11-server and xorg-x11-server-Xwayland security and bug fix update
2022-11-08 06:23:38
xorg-x11-server security and bug fix update
2022-11-15 06:18:41
oraclelinux
oraclelinux
xorg-x11-server and xorg-x11-server-Xwayland security and bug fix update
2022-11-15 00:00:00
xorg-x11-server-Xwayland security update
2022-11-22 00:00:00
xorg-x11-server security update
2022-08-04 00:00:00
ibm
ibm
Security Bulletin: IBM Security Guardium is affected by an out-of-bounds access issue vulnerability (CVE-2022-2319, CVE-2022-2320)
2023-03-06 13:57:05
debian
debian
[SECURITY] [DLA 3068-1] xorg-server security update
2022-08-04 15:57:26
[SECURITY] [DSA 5199-1] xorg-server security update
2022-08-06 15:16:10
suse
suse
Security update for xorg-x11-server (important)
2022-07-12 00:00:00
Security update for xorg-x11-server (important)
2022-07-12 00:00:00
gentoo
gentoo
X.Org X server, XWayland: Multiple Vulnerabilities
2022-10-31 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package xorg-server version 2:1.20.14-alt4
2022-07-15 00:00:00
amazon
amazon
Important: xorg-x11-server
2022-09-30 07:04:00
Important: xorg-x11-server
2023-02-17 00:02:00
redos
redos
ROS-20220721-01
2022-07-21 00:00:00
centos
centos
xorg security update
2022-08-04 19:09:12
redhatcve
redhatcve
CVE-2022-2320
2022-07-13 10:16:04
CVE-2022-2319
2022-07-13 09:45:18
ubuntucve
ubuntucve
CVE-2022-2320
2022-07-12 00:00:00
CVE-2022-2319
2022-07-12 00:00:00
veracode
veracode
Out-Of-Bounds Access
2022-07-18 23:24:13
Out-Of-Bounds Access
2022-07-18 23:36:29
prion
prion
Buffer overflow
2022-09-01 21:15:00
Design/Logic Flaw
2022-09-01 21:15:00
zdi
zdi
X.Org Server ProcXkbSetDeviceInfo Out-Of-Bounds Access Local Privilege Escalation Vulnerability
2022-07-12 00:00:00
X.Org Server ProcXkbSetGeometry Out-Of-Bounds Access Local Privilege Escalation Vulnerability
2022-07-12 00:00:00
nvd
nvd
CVE-2022-2320
2022-09-01 21:15:09
CVE-2022-2319
2022-09-01 21:15:09
cvelist
cvelist
CVE-2022-2320
2022-09-01 00:00:00
CVE-2022-2319
2022-09-01 00:00:00
cve
cve
CVE-2022-2320
2022-09-01 21:15:09
CVE-2022-2319
2022-09-01 21:15:09
debiancve
debiancve
CVE-2022-2320
2022-09-01 21:15:09
CVE-2022-2319
2022-09-01 21:15:09
alpinelinux
alpinelinux
CVE-2022-2320
2022-09-01 21:15:09
CVE-2022-2319
2022-09-01 21:15:09

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

35.6%

JSON
Related for SSA-2022-194-01
nessus44fedora4openvas30ubuntu2osv12redhat4almalinux3slackware1mageia1rocky3oraclelinux4ibm1debian2suse2gentoo1altlinux1amazon2redos1centos1redhatcve2ubuntucve2veracode2prion2zdi2nvd2cvelist2cve2debiancve2alpinelinux2