RLSA-2024:2145

Synopsis

Moderate: libX11 security update

Description

The libX11 packages contain the core X11 protocol client library.

Security Fix(es):

* libX11: out-of-bounds memory access in _XkbReadKeySyms() (CVE-2023-43785)

* libX11: stack exhaustion from infinite recursion in PutSubImage() (CVE-2023-43786)

* libX11: integer overflow in XCreateImage() leading to a heap overflow (CVE-2023-43787)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 9.4 Release Notes linked from the References section.

Affected products

Rocky Linux 9 aarch64 Rocky Linux 9 ppc64le Rocky Linux 9 s390x Rocky Linux 9 x86_64

Fixes

2242252 2242253 2242254

CVEs

CVE-2023-43785 CVE-2023-43786 CVE-2023-43787

Affected packages

Rocky Linux 9 aarch64 - AppStream

libX11-0:1.7.0-9.el9.aarch64.rpm libX11-0:1.7.0-9.el9.src.rpm libX11-common-0:1.7.0-9.el9.noarch.rpm libX11-debuginfo-0:1.7.0-9.el9.aarch64.rpm libX11-debugsource-0:1.7.0-9.el9.aarch64.rpm libX11-devel-0:1.7.0-9.el9.aarch64.rpm libX11-xcb-0:1.7.0-9.el9.aarch64.rpm libX11-xcb-debuginfo-0:1.7.0-9.el9.aarch64.rpm

Rocky Linux 9 x86_64 - AppStream

libX11-0:1.7.0-9.el9.i686.rpm libX11-0:1.7.0-9.el9.src.rpm libX11-0:1.7.0-9.el9.x86_64.rpm libX11-common-0:1.7.0-9.el9.noarch.rpm libX11-debuginfo-0:1.7.0-9.el9.x86_64.rpm libX11-debugsource-0:1.7.0-9.el9.x86_64.rpm libX11-devel-0:1.7.0-9.el9.i686.rpm libX11-devel-0:1.7.0-9.el9.x86_64.rpm libX11-xcb-0:1.7.0-9.el9.i686.rpm libX11-xcb-0:1.7.0-9.el9.x86_64.rpm libX11-xcb-debuginfo-0:1.7.0-9.el9.x86_64.rpm

Rocky Linux 9 ppc64le - AppStream

libX11-0:1.7.0-9.el9.ppc64le.rpm libX11-0:1.7.0-9.el9.src.rpm libX11-common-0:1.7.0-9.el9.noarch.rpm libX11-debuginfo-0:1.7.0-9.el9.ppc64le.rpm libX11-debugsource-0:1.7.0-9.el9.ppc64le.rpm libX11-devel-0:1.7.0-9.el9.ppc64le.rpm libX11-xcb-0:1.7.0-9.el9.ppc64le.rpm libX11-xcb-debuginfo-0:1.7.0-9.el9.ppc64le.rpm

Rocky Linux 9 s390x - AppStream

libX11-0:1.7.0-9.el9.s390x.rpm libX11-0:1.7.0-9.el9.src.rpm libX11-common-0:1.7.0-9.el9.noarch.rpm libX11-debuginfo-0:1.7.0-9.el9.s390x.rpm libX11-debugsource-0:1.7.0-9.el9.s390x.rpm libX11-devel-0:1.7.0-9.el9.s390x.rpm libX11-xcb-0:1.7.0-9.el9.s390x.rpm libX11-xcb-debuginfo-0:1.7.0-9.el9.s390x.rpm