it-securitynotifies AT lists.piratenpartei.de
Betreff: Sicherheitsankündigungen
Listenarchiv
- From: Salvatore Bonaccorso <carnil AT debian.org>
- To: debian-security-announce AT lists.debian.org
- Subject: [IT-SecNots] [SECURITY] [DSA 5433-1] libx11 security update
- Date: Wed, 21 Jun 2023 09:28:13 +0000
- Authentication-results: mail.piratenpartei.de; dkim=none; spf=none (mail.piratenpartei.de: domain of "bounce-debian-security-announce=it-securitynotifies=lists.piratenpartei.de AT lists.debian.org" has no SPF policy when checking 2001:41b8:202:deb:216:36ff:fe40:4002) smtp.mailfrom="bounce-debian-security-announce=it-securitynotifies=lists.piratenpartei.de AT lists.debian.org"; dmarc=none
- List-archive: https://lists.debian.org/msgid-search/E1qBu8L-00Cwlz-IS AT seger.debian.org
- List-id: <debian-security-announce.lists.debian.org>
- List-url: <http://lists.debian.org/debian-security-announce/>
- Old-dkim-signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=debian.org; s=smtpauto.seger; h=Date:Message-Id:Subject:To:From:Reply-To:Cc:MIME-Version: Content-Type:Content-Transfer-Encoding:Content-ID:Content-Description: In-Reply-To:References; bh=/hhNrbUwJefYZIlTJSiFQt1YR8Sa9b+eLY8ZxqKGUyk=; b=QZ 5uDPoOzSyJpUxKMCfEPbFiEYL3ExRpvAvBuLrxVibHKAGAdqZ82VXkEbDRGUq6uVsaLpcDjemA8hL J9Bm1HHk30CAvox9OT6jDIs3Gj0pGOOF87kbQ+6sVpXZxksqJqG7IkLvl/2SpsoyaOVP2diHfrP4e 9ZzcwyV1TSQoQ3RxlmcKcupYt94hY8kjEU+iUeGki9IhgecYSVFvkyKvzNdPl7U5gG9RxtVA6t0O5 omC7EtOzUKANhcCnCybs/hHOzc9wbqeVtor8+U/K6CUlDpqD4+JTGm00G0sXHXYTTPcsZXufQOpWU 6cxwSlBJzBdmUOs6mRQhHWbF2d6RxbJQ==;
- Old-return-path: <carnil AT seger.debian.org>
- Priority: urgent
- Resent-date: Wed, 21 Jun 2023 09:28:41 +0000 (UTC)
- Resent-from: debian-security-announce AT lists.debian.org
- Resent-message-id: <1giBm4IukpJ.A.8BE.JLskkB@bendel>
- Resent-sender: debian-security-announce-request AT lists.debian.org
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
- -------------------------------------------------------------------------
Debian Security Advisory DSA-5433-1 security AT debian.org
https://www.debian.org/security/ Salvatore Bonaccorso
June 21, 2023 https://www.debian.org/security/faq
- -------------------------------------------------------------------------
Package : libx11
CVE ID : CVE-2023-3138
Debian Bug : 1038133
Gregory James Duck reported that missing input validation in various
functions provided by libx11, the X11 client-side library, may result in
denial of service.
For the oldstable distribution (bullseye), this problem has been fixed
in version 2:1.7.2-1+deb11u1.
For the stable distribution (bookworm), this problem has been fixed in
version 2:1.8.4-2+deb12u1.
We recommend that you upgrade your libx11 packages.
For the detailed security status of libx11 please refer to its security
tracker page at:
https://security-tracker.debian.org/tracker/libx11
Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/
Mailing list: debian-security-announce AT lists.debian.org
-----BEGIN PGP SIGNATURE-----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=XLRD
-----END PGP SIGNATURE-----
- [IT-SecNots] [SECURITY] [DSA 5433-1] libx11 security update, Salvatore Bonaccorso, 21.06.2023
Archiv bereitgestellt durch MHonArc 2.6.24.