Seventeen security vulnerabilities disclosed in X.Org client libraries
Multiple X.Org client libraries have been patched to address seventeen newly disclosed vulnerabilities including buffer overflows and denial of service risks.
Summary
Following recent disclosures for X.Org Server and XWayland, seventeen additional vulnerabilities have been made public affecting several X.Org client libraries. The flaws, discovered by various researchers, primarily involve out-of-bounds reads and writes, heap buffer overflows, and potential denial of service. Users should update to the patched versions of libX11, libXi, libXpm, libXrender, and libXtst.
Affected libraries and fixes
- libX11: Updated to 1.8.14
- libXi: Updated to 1.8.4
- libXpm: Updated to 3.5.20
- libXrender: Updated to 0.9.13
- libXtst: Updated to 1.2.6
- Vulnerability types include out-of-bounds reads/writes, heap buffer overflows, and denial of service.
Why it matters
These vulnerabilities affect the foundational client libraries used by many Linux desktop environments and applications relying on the X Window System.
Original reference: www.phoronix.com →