-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2020-cf0afbd27e 2020-09-25 16:31:57.888039 --------------------------------------------------------------------------------
Name : libX11 Product : Fedora 33 Version : 1.6.12 Release : 1.fc33 URL : http://www.x.org Summary : Core X11 protocol client library Description : Core X11 protocol client library.
-------------------------------------------------------------------------------- Update Information:
libX11 1.6.12, fixes for CVE-2020-14363 and CVE 2020-14344 -------------------------------------------------------------------------------- ChangeLog:
* Wed Aug 26 2020 Peter Hutterer peter.hutterer@redhat.com 1.6.12-1 - libX11 1.6.12 (CVE-2020-14363, CVE 2020-14344) * Fri Jul 31 2020 Adam Jackson ajax@redhat.com - 1.6.9-5 - Fix server reply validation issue in XIM (CVE 2020-14344) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1862255 - CVE-2020-14344 libX11: Heap overflow in the X input method client https://bugzilla.redhat.com/show_bug.cgi?id=1862255 [ 2 ] Bug #1872473 - CVE-2020-14363 libX11: integer overflow leads to double free in locale handling https://bugzilla.redhat.com/show_bug.cgi?id=1872473 --------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2020-cf0afbd27e' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------
package-announce@lists.fedoraproject.org
-
updates＠fedoraproject.org