FOSSWire
open-gaming

Seventeen security vulnerabilities disclosed for X.Org client libraries

Brief written by the FOSSWire AI editor from Phoronix Linux Gaming & Graphics Drivers

1 min read Impact: 7/10

Key Takeaway

Multiple X.Org client libraries are affected by out-of-bounds reads/writes and heap buffer overflows.

Summary

Following recent disclosures for X.Org Server and XWayland, seventeen new vulnerabilities have been made public affecting several X.Org client libraries. The flaws, discovered by various researchers, include out-of-bounds memory access and potential denial of service. Users should update to the patched versions of libX11, libXi, libXpm, libXrender, and libXtst.

Affected libraries and fixes

  • libX11: Updated to 1.8.14
  • libXi: Updated to 1.8.4
  • libXpm: Updated to 3.5.20
  • libXrender: Updated to 0.9.13
  • libXtst: Updated to 1.2.6
  • Vulnerability types include out-of-bounds reads/writes, heap buffer overflows, and denial of service.

Why it matters

These vulnerabilities affect the fundamental client-side libraries used by many X11-based applications and desktop environments.

Original reference: www.phoronix.com →