RLSA-2024:8798

Source
https://errata.rockylinux.org/RLSA-2024:8798
Import Source
https://storage.googleapis.com/resf-osv-data/RLSA-2024:8798.json
JSON Data
https://api.osv.dev/v1/vulns/RLSA-2024:8798
Related
Published
2024-11-08T15:56:47.559546Z
Modified
2024-11-08T15:59:26.767996Z
Summary
Moderate: xorg-x11-server and xorg-x11-server-Xwayland security update
Details

X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon.

Security Fix(es):

  • xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability (CVE-2024-9632)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

References
Credits
    • Rocky Enterprise Software Foundation
    • Red Hat

Affected packages

Rocky Linux:8 / xorg-x11-server

Package

Name
xorg-x11-server
Purl
pkg:rpm/rocky-linux/xorg-x11-server?distro=rocky-linux-8&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0:1.20.11-25.el8_10

Rocky Linux:8 / xorg-x11-server-Xwayland

Package

Name
xorg-x11-server-Xwayland
Purl
pkg:rpm/rocky-linux/xorg-x11-server-Xwayland?distro=rocky-linux-8&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0:21.1.3-17.el8_10