Lucene search

K
mageiaGentoo FoundationMGASA-2017-0366
HistoryOct 09, 2017 - 12:51 p.m.

Updated x11-server packages fix security vulnerabilities

2017-10-0912:51:10
Gentoo Foundation
advisories.mageia.org
14

0.001 Low

EPSS

Percentile

26.4%

In Xext/shm, the shmseg resource id can belong to a non-existing client and abort X server with FatalError “client not in use”, or overwrite existing segment of another existing client (CVE-2017-13721). Generating strings for XKB data used a single shared static buffer, which offered several opportunities for errors when strings end up longer than anticipated (CVE-2017-13723).

OSVersionArchitecturePackageVersionFilename
Mageia5noarchx11-server< 1.16.4-2.3x11-server-1.16.4-2.3.mga5
Mageia6noarchx11-server< 1.19.4-1x11-server-1.19.4-1.mga6