Alerts This Week
Warning Icon 1 916
Alerts This Week
Warning Icon 1 916

Mageia: 2020-0334 Moderate: LibX11 Heap Corruption Issue

mageia
Calendar Grey August 18, 2020
Dist Mageia Esm H88
The recent LibX11 security patch addresses heap corruption vulnerabilities linked to integer overflow scenarios. A crucial update for users of Mageia.
The X Input Method (XIM) client implementation in libX11 has some integer overflows and signed/unsigned comparison issues that can lead to heap corruption when handling malformed m...

Summary

The X Input Method (XIM) client implementation in libX11 has some integer overflows and signed/unsigned comparison issues that can lead to heap corruption when handling malformed messages from an input method (CVE-2020-14344).
The libx11 package has been updated to version 1.6.10 which fixes this issue.
The x11-proto-devel package has been updated to remove the "/usr/include/X11/extensions/XKBgeom.h" header file which has been moved to the libx11-devel package.

References

- https://bugs.mageia.org/show_bug.cgi?id=27030

- https://lists.x.org/archives/xorg-announce/2019-June/002997.html

- https://lists.x.org/archives/xorg-announce/2019-October/003025.html

- https://lists.x.org/archives/xorg-announce/2020-July/003052.html

- https://lists.x.org/archives/xorg-announce/2020-July/003050.html

- https://www.cve.org/CVERecord?id=CVE-2020-14344

Topics%20covered

Topics Covered

security advisory heap corruption input method integer overflow libx11 mageia

Resolution

SRPMS

- 7/core/libx11-1.6.10-1.1.mga7

- 7/core/x11-proto-devel-2018.4-4.1.mga7

Severity
important
Lowest
Low
Medium
High
Critical

Publication date: 18 Aug 2020
URL: https://advisories.mageia.org/MGASA-2020-0334.html
Type: security
CVE: CVE-2020-14344

Topics%20covered

Topics Covered

security advisory heap corruption input method integer overflow libx11 mageia

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here