advisories/28774.adv

type: security
subject: Updated x11-server packages fix security vulnerability
CVE:
 - CVE-2021-3472
src:
  7:
   core:
     - x11-server-1.20.11-1.mga7
  8:
   core:
     - x11-server-1.20.11-1.mga8
description: |
  Insufficient checks on the lengths of the XInput extension
  ChangeFeedbackControl request can lead to out of bounds memory
  accesses in the X server.
  
  These issues can lead to privilege escalation for authorized clients
  on systems where the X server is running privileged (CVE-2021-3472).
references:
 - https://bugs.mageia.org/show_bug.cgi?id=28774
 - https://lists.freedesktop.org/archives/xorg/2021-April/060678.html
 - https://lists.freedesktop.org/archives/xorg/2021-April/060679.html
ID: MGASA-2021-0190
1	type: security
2	subject: Updated x11-server packages fix security vulnerability
3	CVE:
4	- CVE-2021-3472
5	src:
6	7:
7	core:
8	- x11-server-1.20.11-1.mga7
9	8:
10	core:
11	- x11-server-1.20.11-1.mga8
12	description: \|
13	Insufficient checks on the lengths of the XInput extension
14	ChangeFeedbackControl request can lead to out of bounds memory
15	accesses in the X server.
16
17	These issues can lead to privilege escalation for authorized clients
18	on systems where the X server is running privileged (CVE-2021-3472).
19	references:
20	- https://bugs.mageia.org/show_bug.cgi?id=28774
21	- https://lists.freedesktop.org/archives/xorg/2021-April/060678.html
22	- https://lists.freedesktop.org/archives/xorg/2021-April/060679.html
23	ID: MGASA-2021-0190