ELSA-2024-2146

Описание

[3.5.13-10]

• Drop hardening patches from previous version to keep ABI compatibility

[3.5.13-9]

• CVE-2023-43786 libX11: stack exhaustion from infinite recursion in PutSubImage()
• CVE-2023-43787 libX11: integer overflow in XCreateImage() leading to a heap overflow
• CVE-2023-43788 libXpm: out of bounds read in XpmCreateXpmImageFromBuffer()
• CVE-2023-43789 libXpm: out of bounds read on XPM with corrupted colormap