MGASA-2013-0186

Source
https://advisories.mageia.org/MGASA-2013-0186.html
Import Source
https://advisories.mageia.org/MGASA-2013-0186.json
JSON Data
https://api.osv.dev/v1/vulns/MGASA-2013-0186
Related
Published
2013-06-26T18:17:24Z
Modified
2022-01-22T02:45:17Z
Summary
Updated X.org packages fix multiple security vulnerabilities
Details

Ilja van Sprundel of IOActive discovered several security issues in multiple components of the X.org graphics stack and the related libraries: Various integer overflows, sign handling errors in integer conversions, buffer overflows, memory corruption and missing input sanitising may lead to privilege escalation or denial of service (CVE-2013-1981, CVE-2013-1982, CVE-2013-1983, CVE-2013-1984, CVE-2013-1985, CVE-2013-1986, CVE-2013-1987, CVE-2013-1988, CVE-2013-1989, CVE-2013-1990, CVE-2013-1991, CVE-2013-1992, CVE-2013-1993, CVE-2013-1994, CVE-2013-1995, CVE-2013-1996, CVE-2013-1997, CVE-2013-1998, CVE-2013-1999, CVE-2013-2000, CVE-2013-2001, CVE-2013-2002, CVE-2013-2003, CVE-2013-2004, CVE-2013-2005, CVE-2013-2062, CVE-2013-2063, CVE-2013-2064, CVE-2013-2066).

An out-of-bounds access flaw was found in Mesa. If an application using Mesa exposed the Mesa API to untrusted inputs (Mozilla Firefox does this), an attacker could cause the application to crash or, potentially, execute arbitrary code with the privileges of the user running the application (CVE-2013-1872).

References
Credits

Affected packages

Mageia:3 / libdmx

Package

Name
libdmx
Purl
pkg:rpm/mageia/libdmx?distro=mageia-3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.1.3-1.mga3

Ecosystem specific

{
    "section": "core"
}

Mageia:3 / libfs

Package

Name
libfs
Purl
pkg:rpm/mageia/libfs?distro=mageia-3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.0.5-1.mga3

Ecosystem specific

{
    "section": "core"
}

Mageia:3 / libx11

Package

Name
libx11
Purl
pkg:rpm/mageia/libx11?distro=mageia-3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.6.0-1.mga3

Ecosystem specific

{
    "section": "core"
}

Mageia:3 / libxcb

Package

Name
libxcb
Purl
pkg:rpm/mageia/libxcb?distro=mageia-3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.9.1-1.mga3

Ecosystem specific

{
    "section": "core"
}

Mageia:3 / libxcursor

Package

Name
libxcursor
Purl
pkg:rpm/mageia/libxcursor?distro=mageia-3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.1.14-1.mga3

Ecosystem specific

{
    "section": "core"
}

Mageia:3 / libxext

Package

Name
libxext
Purl
pkg:rpm/mageia/libxext?distro=mageia-3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.3.2-1.mga3

Ecosystem specific

{
    "section": "core"
}

Mageia:3 / libxfixes

Package

Name
libxfixes
Purl
pkg:rpm/mageia/libxfixes?distro=mageia-3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.0.1-1.mga3

Ecosystem specific

{
    "section": "core"
}

Mageia:3 / libxi

Package

Name
libxi
Purl
pkg:rpm/mageia/libxi?distro=mageia-3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.6.2.901-1.mga3

Ecosystem specific

{
    "section": "core"
}

Mageia:3 / libxinerama

Package

Name
libxinerama
Purl
pkg:rpm/mageia/libxinerama?distro=mageia-3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.1.3-1.mga3

Ecosystem specific

{
    "section": "core"
}

Mageia:3 / libxp

Package

Name
libxp
Purl
pkg:rpm/mageia/libxp?distro=mageia-3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.0.2-1.mga3

Ecosystem specific

{
    "section": "core"
}

Mageia:3 / libxrandr

Package

Name
libxrandr
Purl
pkg:rpm/mageia/libxrandr?distro=mageia-3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.4.1-1.mga3

Ecosystem specific

{
    "section": "core"
}

Mageia:3 / libxrender

Package

Name
libxrender
Purl
pkg:rpm/mageia/libxrender?distro=mageia-3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.9.8-1.mga3

Ecosystem specific

{
    "section": "core"
}

Mageia:3 / libxres

Package

Name
libxres
Purl
pkg:rpm/mageia/libxres?distro=mageia-3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.0.7-1.mga3

Ecosystem specific

{
    "section": "core"
}

Mageia:3 / libxt

Package

Name
libxt
Purl
pkg:rpm/mageia/libxt?distro=mageia-3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.1.4-1.mga3

Ecosystem specific

{
    "section": "core"
}

Mageia:3 / libxtst

Package

Name
libxtst
Purl
pkg:rpm/mageia/libxtst?distro=mageia-3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.2.2-1.mga3

Ecosystem specific

{
    "section": "core"
}

Mageia:3 / libxv

Package

Name
libxv
Purl
pkg:rpm/mageia/libxv?distro=mageia-3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.0.8-1.mga3

Ecosystem specific

{
    "section": "core"
}

Mageia:3 / libxvmc

Package

Name
libxvmc
Purl
pkg:rpm/mageia/libxvmc?distro=mageia-3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.0.8-1.mga3

Ecosystem specific

{
    "section": "core"
}

Mageia:3 / libxxf86dga

Package

Name
libxxf86dga
Purl
pkg:rpm/mageia/libxxf86dga?distro=mageia-3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.1.4-1.mga3

Ecosystem specific

{
    "section": "core"
}

Mageia:3 / libxxf86vm

Package

Name
libxxf86vm
Purl
pkg:rpm/mageia/libxxf86vm?distro=mageia-3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.1.3-1.mga3

Ecosystem specific

{
    "section": "core"
}

Mageia:3 / mesa

Package

Name
mesa
Purl
pkg:rpm/mageia/mesa?distro=mageia-3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
9.1.3-1.1.mga3

Ecosystem specific

{
    "section": "core"
}

Mageia:3 / x11-driver-video-openchrome

Package

Name
x11-driver-video-openchrome
Purl
pkg:rpm/mageia/x11-driver-video-openchrome?distro=mageia-3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.3.3-1.mga3

Ecosystem specific

{
    "section": "core"
}

Mageia:3 / mesa

Package

Name
mesa
Purl
pkg:rpm/mageia/mesa?distro=mageia-3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
9.1.3-1.1.mga3.tainted

Ecosystem specific

{
    "section": "tainted"
}