| Summary: | libx11 new security issues CVE-2022-355[45] | ||
|---|---|---|---|
| Product: | Mageia | Reporter: | David Walser <luigiwalser> |
| Component: | Security | Assignee: | QA Team <qa-bugs> |
| Status: | RESOLVED FIXED | QA Contact: | Sec team <security> |
| Severity: | normal | ||
| Priority: | Normal | CC: | andrewsfarm, davidwhodgins, fri, herman.viaene, nicolas.salguero, sysadmin-bugs |
| Version: | 8 | Keywords: | advisory, validated_update |
| Target Milestone: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | MGA8-64-OK | ||
| Source RPM: | libx11-1.7.0-1.2.mga8.src.rpm | CVE: | CVE-2022-3554, CVE-2022-3555 |
| Status comment: | |||
|
Description
David Walser
2022-11-16 17:44:34 CET
David Walser
2022-11-16 17:47:30 CET
Status comment:
(none) =>
Fixed upstream in 1.8.2 Equivalent openSUSE advisory: https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/TPCKHK5VITSWJVYMQDZ642ZYBWJACES3/ DavidW has already put v1.8.2 into Cauldron. Assigning to tv for Mageia 8, you seem to be the principle maintainer. Assignee:
bugsquad =>
thierry.vignaud Suggested advisory: ======================== The updated packages fix security vulnerabilities: Memory leak in XRegisterIMInstantiateCallback(). (CVE-2022-3554) Memory leak in _XFreeX11XCBStructure(). (CVE-2022-3555) References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3554 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3555 https://lists.suse.com/pipermail/sle-security-updates/2022-November/012923.html https://lists.x.org/archives/xorg-announce/2022-November/003253.html https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/TPCKHK5VITSWJVYMQDZ642ZYBWJACES3/ ======================== Updated packages in core/updates_testing: ======================== lib(64)x11_6-1.7.0-1.3.mga8 lib(64)x11-devel-1.7.0-1.3.mga8 lib(64)x11-xcb1-1.7.0-1.3.mga8 libx11-common-1.7.0-1.3.mga8 libx11-doc-1.7.0-1.3.mga8 from SRPM: libx11-1.7.0-1.3.mga8.src.rpm Status:
NEW =>
ASSIGNED mga8-64 OK here Plasma, VirtualBox host nvidia-current and kernel from backports updates testing. tests at https://bugs.mageia.org/show_bug.cgi?id=31149#c6 CC:
(none) =>
fri MGA8-64 MATE on Acer Aspire 5253 No installation issues Ref bug 29102 for testing. Rebooted after installation, all looks well. $ xview flipped.jpg flipped.jpg is a 903x988 JPEG image, color space YCbCr, 3 comps., Huffman coding Building XImage...done Picture looks OK. Whiteboard:
(none) =>
MGA8-64-OK Validating. Advisory in Comment 3. Keywords:
(none) =>
validated_update
Dave Hodgins
2022-11-24 04:19:21 CET
Keywords:
(none) =>
advisory An update for this issue has been pushed to the Mageia Updates repository. https://advisories.mageia.org/MGASA-2022-0438.html Status:
ASSIGNED =>
RESOLVED |