MGASA-2021-0190

See a problem?
Please try reporting it to the source first.

Source

https://advisories.mageia.org/MGASA-2021-0190.html

Import Source

https://advisories.mageia.org/MGASA-2021-0190.json

JSON Data

https://api.osv.dev/v1/vulns/MGASA-2021-0190

Related

Published

2021-04-15T19:03:58Z

Modified

2021-04-15T17:58:18Z

Summary

Updated x11-server packages fix security vulnerability

Details

Insufficient checks on the lengths of the XInput extension ChangeFeedbackControl request can lead to out of bounds memory accesses in the X server.

These issues can lead to privilege escalation for authorized clients on systems where the X server is running privileged (CVE-2021-3472).

References

Credits

Affected packages

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.20.11-1.mga7

{
    "section": "core"
}

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.20.11-1.mga8

{
    "section": "core"
}