Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Mageia 8 Security Advisory: MGASA-2022-0256 Critical X11 Server Issues

mageia
Calendar Grey July 13, 2022
Dist Mageia Esm H88
Recent updates to x11-server packages fix memory handling vulnerabilities in Mageia 8, targeting CVE-2022-2319 and CVE-2022-2320.
Updated x11-server packages fix security vulnerabilities: ProcXkbSetGeometry Out-Of-Bounds Access

Summary

Updated x11-server packages fix security vulnerabilities:
ProcXkbSetGeometry Out-Of-Bounds Access. The handler for the ProcXkbSetGeometry request of the Xkb extension does not properly validate the request length leading to out of bounds memory write (CVE-2022-2319).
ProcXkbSetDeviceInfo Out-Of-Bounds Access. The handler for the ProcXkbSetDeviceInfo request of the Xkb extension does not properly validate the request length leading to out of bounds memory write (CVE-2022-2320).

References

- https://bugs.mageia.org/show_bug.cgi?id=30628

- https://lists.x.org/archives/xorg/2022-July/061035.html

- https://www.cve.org/CVERecord?id=CVE-2022-2319

- https://www.cve.org/CVERecord?id=CVE-2022-2320

Topics%20covered

Topics Covered

security advisory critical issue memory access Mageia X11 server

Resolution

SRPMS

- 8/core/x11-server-1.20.14-3.mga8

Severity
critical
Lowest
Low
Medium
High
Critical

Publication date: 13 Jul 2022
URL: https://advisories.mageia.org/MGASA-2022-0256.html
Type: security
CVE: CVE-2022-2319, CVE-2022-2320

Topics%20covered

Topics Covered

security advisory critical issue memory access Mageia X11 server

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here