Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Mageia 8, 9: MGASA-2023-0307 Critical: X11-Server Security Issues

mageia
Calendar Grey November 6, 2023
Dist Mageia Esm H88
Mageia has released updated x11-server packages to address significant security vulnerabilities, notably including out-of-bounds write and use-after-free defects.
The updated packages fix security vulnerabilities: OOB write in XIChangeDeviceProperty/RRChangeOutputProperty

Summary

The updated packages fix security vulnerabilities:
OOB write in XIChangeDeviceProperty/RRChangeOutputProperty. (CVE-2023-5367)
Use-after-free bug in DestroyWindow. (CVE-2023-5380)
Use-after-free bug in DamageDestroy. (CVE-2023-5574)

References

- https://bugs.mageia.org/show_bug.cgi?id=32453

- https://www.openwall.com/lists/oss-security/2023/10/25/1

- https://www.cve.org/CVERecord?id=CVE-2023-5367

- https://www.cve.org/CVERecord?id=CVE-2023-5380

- https://www.cve.org/CVERecord?id=CVE-2023-5574

Topics%20covered

Topics Covered

security advisory critical security issues out-of-bounds use-after-free Mageia x11-server

Resolution

SRPMS

- 9/core/x11-server-21.1.8-7.1.mga9

- 9/core/x11-server-xwayland-22.1.9-1.1.mga9

- 8/core/x11-server-1.20.14-4.4.mga8

Severity
critical
Lowest
Low
Medium
High
Critical

Publication date: 06 Nov 2023
URL: https://advisories.mageia.org/MGASA-2023-0307.html
Type: security
CVE: CVE-2023-5367, CVE-2023-5380, CVE-2023-5574

Topics%20covered

Topics Covered

security advisory critical security issues out-of-bounds use-after-free Mageia x11-server

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here