安全公告/【CVE-2023-5380】

基本信息

漏洞描述

在xorg-x11-服务器中发现了一个释放后使用漏洞。如果指针从一个屏幕上的窗口内扭曲到另一个屏幕的根窗口，并且如果原始窗口被破坏，然后另一个窗口被破坏了，则在非常特定和传统的配置（具有多个协议屏幕的多屏幕设置，也称为Zaphod模式）中可能会发生X服务器崩溃。

漏洞判定

执行命令yum info PackageName获取软件包版本号，版本小于修复版本，则受此漏洞影响，版本大于等于修复版本，则此漏洞已修复

修复方式

软件包升级
dnf update xorg-x11-server

参考

https://bugzilla.redhat.com/show_bug.cgi?id=2244736
https://lists.x.org/archives/xorg-announce/2023-October/003430.html
https://access.redhat.com/security/cve/CVE-2023-5380
https://www.debian.org/security/2023/dsa-5534
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SN6KV4XGQJRVAOSM5C3CWMVAXO53COIP/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3RK66CXMXO3PCPDU3GDY5FK4UYHUXQJT/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AKKIE626TZOOPD533EYN47J4RFNHZVOP/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2WS5E7H4A5J3U5YBCTMRPQVGWK5LVH7D/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HO2Q2NP6R62ZRQQG3XQ4AXUT7J2EKKKY/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TJXNI4BXURC2BKPNAHFJK3C5ZETB7PER/
https://access.redhat.com/errata/RHSA-2023:7428
https://security.netapp.com/advisory/ntap-20231130-0004/
https://security.gentoo.org/glsa/202401-30
https://access.redhat.com/errata/RHSA-2024:2169
https://access.redhat.com/errata/RHSA-2024:2298
https://access.redhat.com/errata/RHSA-2024:2995
https://access.redhat.com/errata/RHSA-2024:3067