Red Hat Security Advisory

RHSA-2024:2973

libX11 security update

Released 2024-05-22 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) libX11-1.6.8-8.el8, libX11-common-1.6.8-8.el8, libX11-devel-1.6.8-8.el8 +1

TI-2023-23478 CVE-2023-43787 · GHSA-8x43-mjg3-6x36

LOW 37

A vulnerability was found in libX11 due to an integer overflow within the XCreateImage() function.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00475 Published 2023-10-10 Partial fix · 1.8.7, 1.6.8-8.el8 +1 CWE-122

TI-2023-23476 CVE-2023-43785 · GHSA-9368-fgh5-gh2f

LOW 30

A vulnerability was found in libX11 due to a boundary condition within the _XkbReadKeySyms() function.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00669 Published 2023-10-10 Partial fix · 1.8.7, 1.6.8-8.el8 +1 CWE-787

TI-2023-23477 CVE-2023-43786 · GHSA-35w7-h3v9-8qw4

LOW 25

A vulnerability was found in libX11 due to an infinite loop within the PutSubImage() function.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00475 Published 2023-10-10 Partial fix · 3.5.17, 1.6.8-8.el8 +1 CWE-400