X.org has issued an advisory today (June 15): https://lists.x.org/archives/xorg-announce/2023-June/003406.html The issue is fixed upstream in 1.8.6: https://lists.x.org/archives/xorg-announce/2023-June/003407.html Mageia 8 is also affected.
Status comment: (none) => Fixed upstream in 1.8.6Whiteboard: (none) => MGA8TOO
Suggested advisory: ======================== The updated packages fix a security vulnerability: Buffer overflows in InitExt.c in libX11 prior to 1.8.6. (CVE-2023-3138) References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3138 https://lists.x.org/archives/xorg-announce/2023-June/003406.html https://lists.x.org/archives/xorg-announce/2023-June/003407.html ======================== Updated packages in core/updates_testing: ======================== lib(64)x11_6-1.7.0-1.4.mga8 lib(64)x11-devel-1.7.0-1.4.mga8 lib(64)x11-xcb1-1.7.0-1.4.mga8 libx11-common-1.7.0-1.4.mga8 libx11-doc-1.7.0-1.4.mga8 from SRPM: libx11-1.7.0-1.4.mga8.src.rpm
Status comment: Fixed upstream in 1.8.6 => (none)Status: NEW => ASSIGNEDWhiteboard: MGA8TOO => (none)Version: Cauldron => 8Assignee: bugsquad => qa-bugsSource RPM: libx11-1.8.4-1.mga9.src.rpm => libx11-1.7.0-1.3.mga8.src.rpmCC: (none) => nicolas.salguero
mga8, x86_64 These updated cleanly. libx11 applications are everywhere. The list on this system runs to 975 items. Started an empty session in ardour and logged out - graphics seemed OK. Ran zenity against the built-in commands; calendar, question, entry, file-selection. All work as expected. Tried xplayer on MP4 and MKV files - audio and video perfect. Used xviewer to view an image folder. No regressions noted.
Whiteboard: (none) => MGA8-64-OKCC: (none) => tarazed25
Ubuntu has issued an advisory for this on June 15: https://ubuntu.com/security/notices/USN-6168-1
Validating. Advisory in comment 1.
Keywords: (none) => validated_updateCC: (none) => andrewsfarm, sysadmin-bugs
Keywords: (none) => advisoryCC: (none) => davidwhodgins
An update for this issue has been pushed to the Mageia Updates repository. https://advisories.mageia.org/MGASA-2023-0206.html
Status: ASSIGNED => RESOLVEDResolution: (none) => FIXED