ELSA-2024-2974

Описание

[3.5.12-11]

• Drop hardening patches from previous version to keep ABI compatibility

[3.5.12-10]

• CVE-2023-43786 libX11: stack exhaustion from infinite recursion in PutSubImage()
• CVE-2023-43787 libX11: integer overflow in XCreateImage() leading to a heap overflow
• CVE-2023-43788 libXpm: out of bounds read in XpmCreateXpmImageFromBuffer()
• CVE-2023-43789 libXpm: out of bounds read on XPM with corrupted colormap