ELA-979-1 libx11 security update
Package : libx11
Version : 2:1.6.2-3+deb8u7 (jessie), 2:1.6.4-3+deb9u6 (stretch)
Related CVEs :
CVE-2023-43785
CVE-2023-43786
CVE-2023-43787
Several vulnerabilities were found in libx11, the X11 client-side
library.
CVE-2023-43785
Gregory James Duck discovered an out of bounds memory access in
_XkbReadKeySyms, which could result in denial of service.
CVE-2023-43786
Yair Mizrahi found an infinite recursion in PutSubImage when
parsing a crafted file, which would result in stack exhaustion
and denial of service.
CVE-2023-43787
Yair Mizrahi discovered an integer overflow in XCreateImage
when parsing crafted input, which would result in a small buffer
allocation leading into a buffer overflow. This could result
in denial of service or potentially in arbitrary code execution.
A libx11 security update has been released for Debian GNU/Linux 8 and 9 Extended LTS to address several vulnerabilities.
