xorg-x11-server-1.20.11-5.el8, xorg-x11-server-Xwayland-21.1.3-2.el8

X.Org is an open-source implementation of the X Window System. It provides the
basic low-level functionality that full-fledged graphical user interfaces are
designed upon.

Xwayland is an X server for running X clients under Wayland.

The following packages have been upgraded to a later upstream version:
xorg-x11-server-Xwayland (21.1.3).

Security Fix(es):

* xorg-x11-server: SProcRenderCompositeGlyphs out-of-bounds access
(CVE-2021-4008)
* xorg-x11-server: SProcXFixesCreatePointerBarrier out-of-bounds access
(CVE-2021-4009)
* xorg-x11-server: SProcScreenSaverSuspend out-of-bounds access
(CVE-2021-4010)
* xorg-x11-server: SwapCreateRegister out-of-bounds access (CVE-2021-4011)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s)
listed in the References section.

Additional Changes:

Update the version to xorg-x11-server-1.20.11-5.el8, xorg-x11-server-Xwayland-21.1.3-2.el8.

CVE-2021-4008
A flaw was found in xorg-x11-server in versions before 21.1.2 and before
1.20.14. An out-of-bounds access can occur in the SProcRenderCompositeGlyphs
function. The highest threat from this vulnerability is to data confidentiality
and integrity as well as system availability.
CVE-2021-4009
A flaw was found in xorg-x11-server in versions before 21.1.2 and before
1.20.14. An out-of-bounds access can occur in the
SProcXFixesCreatePointerBarrier function. The highest threat from this
vulnerability is to data confidentiality and integrity as well as system
availability.
CVE-2021-4010
A flaw was found in xorg-x11-server in versions before 21.1.2 and before
1.20.14. An out-of-bounds access can occur in the SProcScreenSaverSuspend
function. The highest threat from this vulnerability is to data confidentiality
and integrity as well as system availability.
CVE-2021-4011
A flaw was found in xorg-x11-server in versions before 21.1.2 and before
1.20.14. An out-of-bounds access can occur in the SwapCreateRegister function.
The highest threat from this vulnerability is to data confidentiality and
integrity as well as system availability.