x11-lib: CVE-2023-3138 on libx11

[CamberLoid]

CVE IDs

CVE-2023-3138

Other security advisory IDs

• Debian: https://security-tracker.debian.org/tracker/DSA-5433-1
• Ubuntu: https://ubuntu.com/security/notices/USN-6168-1

Description

A vulnerability of libx11 was discovered, a component of x11-lib in AOSC OS repository. The vulnerability is assigned CVE-2023-3138, and it may result in a denial of service.

See https://www.openwall.com/lists/oss-security/2023/06/15/2 for details

Severity: Moderate (elevated from low)

• Limited impact, may only cause X11 to crash. (flagged as low)
• X11 is a core component of AOSC OS's desktop experience. (elevate to moderate)

Patches

Update libx11 in x11-lib to 1.8.6

PoC(s)

N/A

[jiegec]

Updated to 1.8.8