Bug 1541132

Summary: Potential infinite recursion in xorg-x11-xserver animated cursor code
Product: Red Hat Enterprise Linux 7 Reporter: Daniel Dadap <ddadap>
Component: xorg-x11-serverAssignee: Adam Jackson <ajax>
Status: CLOSED ERRATA QA Contact: Desktop QE <desktop-qa-list>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 7.4CC: jkoten, lmiksik, tpelka
Target Milestone: rc   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: xorg-x11-server-1.19.5-5.el7 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2018-04-10 11:53:17 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Daniel Dadap 2018-02-01 19:48:05 UTC 
A bug which could cause an infinite recursion in the X server when using animated cursors was recently fixed upstream. The bug affects version 1.19 and later of the X.org X server, and the fixes should be backported to OSes shipping the affected veresions:

https://cgit.freedesktop.org/xorg/xserver/commit/?id=3abbdb7318018584a27220737bd92081ce8ee67c
https://cgit.freedesktop.org/xorg/xserver/commit/?id=cc3241a712684f8c7147f5688e9ee3ecb5a93b87
https://cgit.freedesktop.org/xorg/xserver/commit/?id=094a63d56fbfb9e23210cc9ac538fb198af37cee
https://cgit.freedesktop.org/xorg/xserver/commit/?id=ab54bc295cd05281e55bd4d9c37216c0a929fc83
https://cgit.freedesktop.org/xorg/xserver/commit/?id=de60245e05c0d2528d4ff42557a044387e53315c
https://cgit.freedesktop.org/xorg/xserver/commit/?id=4d82a150b2ee29c1025408cdb9ece255452a81bd
Comment 2 Daniel Dadap 2018-02-08 22:35:54 UTC 
ab54bc295cd05281e55bd4d9c37216c0a929fc83 introduces an ABI break. It's probably a benign one, since I don't think our code depends on the size of that structure, but it's probably safer to avoid backporting that commit, since it's just a cleanup change to stop setting a field that's no longer read anywhere.
Comment 7 errata-xmlrpc 2018-04-10 11:53:17 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2018:0736