ELSA-2024-2145

ELSA-2024-2145 - libX11 security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2024-05-02

Description

[1.7.0-9]
- Fix CVE-2023-43785: out-of-bounds memory access in _XkbReadKeySyms()
- Fix CVE-2023-43786: stack exhaustion from infinite recursion in
PutSubImage()
- Fix CVE-2023-43787: integer overflow in XCreateImage() leading to
a heap overflow

Related CVEs

CVE-2023-43786

CVE-2023-43787

CVE-2023-43785

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	libX11-1.7.0-9.el9.src.rpm	b281537ce17843e87e1dfad628618009afddf5d9de0a961e4f1f6d15723cab6d	-	ol9_aarch64_appstream
	libX11-1.7.0-9.el9.aarch64.rpm	ce687cba4b8d580b9f7bbe9156cd00ccd6d8af4923ad8a8bea4e55495f10ed2f	-	ol9_aarch64_appstream
	libX11-common-1.7.0-9.el9.noarch.rpm	da2ac781a2470fe1f5ccdeffc47f769c10188e493c1e048b6a7decf2e2ecee78	-	ol9_aarch64_appstream
	libX11-devel-1.7.0-9.el9.aarch64.rpm	96ed74664cdedb296f51fa138facdcc1dc7963ef26967e23326dafd101b2f8e2	-	ol9_aarch64_appstream
	libX11-xcb-1.7.0-9.el9.aarch64.rpm	ae57aadead84cec0e2b92294b4dac58e07195a123be1acc7f24f3e7521ba29f2	-	ol9_aarch64_appstream
Oracle Linux 9 (x86_64)	libX11-1.7.0-9.el9.src.rpm	b281537ce17843e87e1dfad628618009afddf5d9de0a961e4f1f6d15723cab6d	-	ol9_x86_64_appstream
	libX11-1.7.0-9.el9.i686.rpm	c3ce51b1866146f0795008f82b87b3c6d930d7eec97e1eec8c6dc432831387cc	-	ol9_x86_64_appstream
	libX11-1.7.0-9.el9.x86_64.rpm	e8c1dd15cfa109dcdddb10cfd03322235400148248944ef282ea93db39b8a51d	-	ol9_x86_64_appstream
	libX11-common-1.7.0-9.el9.noarch.rpm	da2ac781a2470fe1f5ccdeffc47f769c10188e493c1e048b6a7decf2e2ecee78	-	ol9_x86_64_appstream
	libX11-devel-1.7.0-9.el9.i686.rpm	70c06bd1661fe289dd5704c0dbc42f06168be58c306fc2a5a939f4e3f280c518	-	ol9_x86_64_appstream
	libX11-devel-1.7.0-9.el9.x86_64.rpm	5af3f49604c2dd6b28963aacb5feabce3b3a7e2afffd8051de58f26371d5c2af	-	ol9_x86_64_appstream
	libX11-xcb-1.7.0-9.el9.i686.rpm	762c6f9557a1049ebea05d84a8b1ee7ef8b104e1770811f50aaabffab62d040a	-	ol9_x86_64_appstream
	libX11-xcb-1.7.0-9.el9.x86_64.rpm	a60b8b47f11338dfeaa6580450997320c659dfd3ea3348469faf39e5d343fe6d	-	ol9_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team