Fedora Linux 8775 Published by

A xorg-x11-server security update has been released for Fedora 35.



SECURITY: Fedora 35 Update: xorg-x11-server-1.20.14-7.fc35


--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2022-573714ca6b
2022-07-29 01:24:05.033710
--------------------------------------------------------------------------------

Name : xorg-x11-server
Product : Fedora 35
Version : 1.20.14
Release : 7.fc35
URL :   http://www.x.org
Summary : X.Org X11 X server
Description :
X.Org X11 X server

--------------------------------------------------------------------------------
Update Information:

Security fix for CVE-2022-2319/ZDI-CAN-16062, CVE-2022-2320/ZDI-CAN-16070
--------------------------------------------------------------------------------
ChangeLog:

* Tue Jul 12 2022 Olivier Fourdan - 1.20.14-7
- Fix CVE-2022-2319/ZDI-CAN-16062, CVE-2022-2320/ZDI-CAN-16070
* Wed Apr 13 2022 Dominik Mierzejewski - 1.20.14-6
- Don't hardcode fps for fake screen (#2054188)
* Fri Apr 8 2022 Jocelyn Falempe - 1.20.14-5
- Fix basic graphic mode not working with simpledrm (#2067151)
* Fri Jan 28 2022 Olivier Fourdan - 1.20.14-4
- Fix build with GCC 12 (#2047134)
--------------------------------------------------------------------------------
References:

[ 1 ] Bug #2106671 - CVE-2022-2319 xorg-x11-server: X.Org Server ProcXkbSetGeometry Out-Of-Bounds Access
  https://bugzilla.redhat.com/show_bug.cgi?id=2106671
[ 2 ] Bug #2106683 - CVE-2022-2320 xorg-x11-server: out-of-bounds access in ProcXkbSetDeviceInfo request handler of the Xkb extension
  https://bugzilla.redhat.com/show_bug.cgi?id=2106683
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2022-573714ca6b' at the command
line. For more information, refer to the dnf documentation available at
  http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
  https://fedoraproject.org/keys
--------------------------------------------------------------------------------
_______________________________________________