{"id":"ALSA-2021:1804","summary":"Moderate: userspace graphics, xorg-x11, and mesa security, bug fix, and enhancement update","details":"X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon.\n\nMesa provides a 3D graphics API that is compatible with Open Graphics Library (OpenGL). It also provides hardware-accelerated drivers for many popular graphics chips.\n\nThe following packages have been upgraded to a later upstream version: egl-wayland (1.1.5), libdrm (2.4.103), libglvnd (1.3.2), libinput (1.16.3), libwacom (1.6), mesa (20.3.3), xorg-x11-server (1.20.10). (BZ#1878160, BZ#1886648, BZ#1887654, BZ#1887655)\n\nSecurity Fix(es):\n\n* xorg-x11-server: Out-of-bounds access in XkbSetNames function (CVE-2020-14345)\n\n* xorg-x11-server: Integer underflow in the X input extension protocol (CVE-2020-14346)\n\n* xorg-x11-server: Out-of-bounds access in XkbSetMap function (CVE-2020-14360)\n\n* xorg-x11-server: XkbSelectEvents integer underflow privilege escalation vulnerability (CVE-2020-14361)\n\n* xorg-x11-server: XRecordRegisterClients integer underflow privilege escalation vulnerability (CVE-2020-14362)\n\n* libX11: Integer overflow leads to double free in locale handling (CVE-2020-14363)\n\n* xorg-x11-server: XkbSetDeviceInfo heap-based buffer overflow privilege escalation vulnerability (CVE-2020-25712)\n\n* libX11: Heap overflow in the X input method client (CVE-2020-14344)\n\n* xorg-x11-server: Leak of uninitialized heap memory from the X server to clients in AllocatePixmap of dix/pixmap.c (CVE-2020-14347)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","modified":"2026-02-04T03:16:17.889301Z","published":"2021-05-18T06:07:47Z","related":["CVE-2020-14344","CVE-2020-14345","CVE-2020-14346","CVE-2020-14347","CVE-2020-14360","CVE-2020-14361","CVE-2020-14362","CVE-2020-14363","CVE-2020-25712"],"references":[{"type":"ADVISORY","url":"https://errata.almalinux.org/8/ALSA-2021-1804.html"},{"type":"REPORT","url":"https://vulners.com/cve/CVE-2020-14344"},{"type":"REPORT","url":"https://vulners.com/cve/CVE-2020-14345"},{"type":"REPORT","url":"https://vulners.com/cve/CVE-2020-14346"},{"type":"REPORT","url":"https://vulners.com/cve/CVE-2020-14347"},{"type":"REPORT","url":"https://vulners.com/cve/CVE-2020-14360"},{"type":"REPORT","url":"https://vulners.com/cve/CVE-2020-14361"},{"type":"REPORT","url":"https://vulners.com/cve/CVE-2020-14362"},{"type":"REPORT","url":"https://vulners.com/cve/CVE-2020-14363"},{"type":"REPORT","url":"https://vulners.com/cve/CVE-2020-25712"}],"affected":[{"package":{"name":"libglvnd","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/libglvnd"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.3.2-1.el8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2021:1804.json"}},{"package":{"name":"libglvnd-core-devel","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/libglvnd-core-devel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.3.2-1.el8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2021:1804.json"}},{"package":{"name":"libglvnd-devel","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/libglvnd-devel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.3.2-1.el8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2021:1804.json"}},{"package":{"name":"libglvnd-egl","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/libglvnd-egl"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.3.2-1.el8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2021:1804.json"}},{"package":{"name":"libglvnd-gles","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/libglvnd-gles"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.3.2-1.el8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2021:1804.json"}},{"package":{"name":"libglvnd-glx","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/libglvnd-glx"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.3.2-1.el8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2021:1804.json"}},{"package":{"name":"libglvnd-opengl","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/libglvnd-opengl"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.3.2-1.el8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2021:1804.json"}},{"package":{"name":"libinput-devel","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/libinput-devel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.3-1.el8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2021:1804.json"}},{"package":{"name":"libwacom-devel","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/libwacom-devel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6-2.el8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2021:1804.json"}},{"package":{"name":"mesa-libOSMesa-devel","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/mesa-libOSMesa-devel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20.3.3-2.el8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2021:1804.json"}},{"package":{"name":"mesa-libgbm-devel","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/mesa-libgbm-devel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20.3.3-2.el8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2021:1804.json"}},{"package":{"name":"xorg-x11-drivers","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/xorg-x11-drivers"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.7-30.el8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2021:1804.json"}},{"package":{"name":"xorg-x11-server-devel","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/xorg-x11-server-devel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.10-1.el8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2021:1804.json"}},{"package":{"name":"xorg-x11-server-source","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/xorg-x11-server-source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.10-1.el8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2021:1804.json"}}],"schema_version":"1.7.3"}