RHSA-2021:1804MediumCVSS 7.8

Red Hat Security Advisory: userspace graphics, xorg-x11, and mesa security, bug fix, and enhancement update

Published
May 18, 2021
Last Modified
November 6, 2026

🔗 CVE IDs covered (9)

CVE-2020-14347 →CVE-2020-14362 →CVE-2020-14363 →CVE-2020-14346 →CVE-2020-14360 →CVE-2020-14361 →CVE-2020-25712 →CVE-2020-14344 →CVE-2020-14345 →

📋 Description

CVE-2020-14344 — libX11: Heap overflow in the X input method client CVE-2020-14345 — xorg-x11-server: Out-of-bounds access in XkbSetNames function CVE-2020-14346 — xorg-x11-server: Integer underflow in the X input extension protocol CVE-2020-14347 — xorg-x11-server: Leak of uninitialized heap memory from the X server to clients in AllocatePixmap of dix/pixmap.c CVE-2020-14360 — xorg-x11-server: Out-of-bounds access in XkbSetMap function CVE-2020-14361 — xorg-x11-server: XkbSelectEvents integer underflow privilege escalation vulnerability CVE-2020-14362 — xorg-x11-server: XRecordRegisterClients integer underflow privilege escalation vulnerability CVE-2020-14363 — libX11: integer overflow leads to double free in locale handling CVE-2020-25712 — xorg-x11-server: XkbSetDeviceInfo heap-based buffer overflow privilege escalation vulnerability

🎯 Affected products200

  • Red Hat CodeReady Linux Builder (v. 8)
  • Red Hat Enterprise Linux AppStream (v. 8)
  • drm-utils-debuginfo-0:2.4.103-1.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • drm-utils-debuginfo-0:2.4.103-1.el8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • drm-utils-debuginfo-0:2.4.103-1.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • drm-utils-debuginfo-0:2.4.103-1.el8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • drm-utils-debuginfo-0:2.4.103-1.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • egl-wayland-0:1.1.5-3.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • egl-wayland-0:1.1.5-3.el8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • egl-wayland-0:1.1.5-3.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • egl-wayland-0:1.1.5-3.el8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • egl-wayland-0:1.1.5-3.el8.src as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • egl-wayland-0:1.1.5-3.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • egl-wayland-debuginfo-0:1.1.5-3.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • egl-wayland-debuginfo-0:1.1.5-3.el8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • egl-wayland-debuginfo-0:1.1.5-3.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • egl-wayland-debuginfo-0:1.1.5-3.el8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • egl-wayland-debuginfo-0:1.1.5-3.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • egl-wayland-debugsource-0:1.1.5-3.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • egl-wayland-debugsource-0:1.1.5-3.el8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • egl-wayland-debugsource-0:1.1.5-3.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • egl-wayland-debugsource-0:1.1.5-3.el8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • egl-wayland-debugsource-0:1.1.5-3.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • libX11-0:1.6.8-4.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • libX11-0:1.6.8-4.el8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • libX11-0:1.6.8-4.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • libX11-0:1.6.8-4.el8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • libX11-0:1.6.8-4.el8.src as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • libX11-0:1.6.8-4.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • libX11-common-0:1.6.8-4.el8.noarch as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • +170 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

🔗 References (26)