Synopsis: Important: xorg-x11-server security update
Advisory ID: SLSA-2020:5408-1
Issue Date: 2020-12-14
CVE Numbers: CVE-2020-14347
CVE-2020-14360
CVE-2020-25712
—
Security Fix(es):
* xorg-x11-server: Out-of-bounds access in XkbSetMap function
(CVE-2020-14360)
* xorg-x11-server: XkbSetDeviceInfo heap-based buffer overflow privilege
escalation vulnerability (CVE-2020-25712)
* xorg-x11-server: Leak of uninitialized heap memory from the X server to
clients in AllocatePixmap of dix/pixmap.c (CVE-2020-14347)
—
SL7
x86_64
xorg-x11-server-Xephyr-1.20.4-15.el7_9.x86_64.rpm
xorg-x11-server-Xorg-1.20.4-15.el7_9.x86_64.rpm
xorg-x11-server-common-1.20.4-15.el7_9.x86_64.rpm
xorg-x11-server-debuginfo-1.20.4-15.el7_9.x86_64.rpm
xorg-x11-server-Xdmx-1.20.4-15.el7_9.x86_64.rpm
xorg-x11-server-Xnest-1.20.4-15.el7_9.x86_64.rpm
xorg-x11-server-Xvfb-1.20.4-15.el7_9.x86_64.rpm
xorg-x11-server-Xwayland-1.20.4-15.el7_9.x86_64.rpm
xorg-x11-server-debuginfo-1.20.4-15.el7_9.i686.rpm
xorg-x11-server-devel-1.20.4-15.el7_9.i686.rpm
xorg-x11-server-devel-1.20.4-15.el7_9.x86_64.rpm
noarch
xorg-x11-server-source-1.20.4-15.el7_9.noarch.rpm
– Scientific Linux Development Team
