Red Hat Security AdvisoryRHSA-2017:1865
X.org X11 libraries security, bug fix and enhancement update
Released 2017-08-01 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) libICE-1.0.9-9.el7, libX11-1.6.5-1.el7, libX11-common-1.6.5-1.el7 +38
- Red Hat Enterprise Linux Client Optional (v. 7) drm-utils-2.4.74-1.el7, libICE-devel-1.0.9-9.el7, libX11-devel-1.6.5-1.el7 +44
- Red Hat Enterprise Linux ComputeNode (v. 7) libICE-1.0.9-9.el7, libX11-1.6.5-1.el7, libX11-common-1.6.5-1.el7 +29
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) drm-utils-2.4.74-1.el7, libICE-devel-1.0.9-9.el7, libX11-devel-1.6.5-1.el7 +46
- Red Hat Enterprise Linux Server (v. 7) libICE-1.0.9-9.el7, libICE-1.0.9-9.el7.ppc, libICE-devel-1.0.9-9.el7 +47
- Red Hat Enterprise Linux Server Optional (v. 7) drm-utils-2.4.74-1.el7, libXdmcp-devel-1.1.2-6.el7, libXdmcp-devel-1.1.2-6.el7.ppc +42
- Red Hat Enterprise Linux Workstation (v. 7) libICE-1.0.9-9.el7, libICE-devel-1.0.9-9.el7, libX11-1.6.5-1.el7 +47
- Red Hat Enterprise Linux Workstation Optional (v. 7) drm-utils-2.4.74-1.el7, libXdmcp-devel-1.1.2-6.el7, libXfont-devel-1.5.2-1.el7 +24
Fixes 3 records
Priority MEDIUM 52
Multiple integer overflows in libXpm before 3.5.12, when a program requests parsing XPM extensions on a 64-bit platform, allow remote attackers to cause a denial of service (out-of-bounds write) or execute arbitrary code…
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0759 · Published 2017-02-01 · Partial fix CWE-119
Priority LOW 30
It was discovered that libXdmcp before 1.1.2 including used weak entropy to generate session keys.
CVSS 3.0MEDIUM 6.5· Local · Low privileges · No interaction · EPSS 0.00534 · Published 2018-07-27 · Partial fix CWE-331
Priority LOW 25
It was discovered that libICE before 1.0.9-8 used a weak entropy to generate keys.
CVSS 3.0MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00464 · Published 2018-07-27 · Partial fix CWE-331
