Change logs for libx11 source package in Mantic

  • libx11 (2:1.8.6-1ubuntu1) mantic; urgency=medium
    
      * SECURITY UPDATE: out-of-bounds memory access in _XkbReadKeySyms()
        - d/p/0001-CVE-2023-43785-out-of-bounds-memory-access-in-_XkbRe.patch
        - CVE-2023-43785
      * SECURITY UPDATE: stack exhaustion from infinite recursion in
        PutSubImage()
        - d/p/0002-CVE-2023-43786-stack-exhaustion-from-infinite-recurs.patch
        - d/p/0003-XPutImage-clip-images-to-maximum-height-width-allowe.patch
        - CVE-2023-43786
      * SECURITY UPDATE: integer overflow in XCreateImage() leading to a heap
        overflow
        - d/p/0004-XCreatePixmap-trigger-BadValue-error-for-out-of-rang.patch
        - d/p/0005-CVE-2023-43787-Integer-overflow-in-XCreateImage-lead.patch
        - CVE-2023-43787
    
     -- Marc Deslauriers <email address hidden>  Tue, 03 Oct 2023 14:28:30 -0400
  • libx11 (2:1.8.6-1) unstable; urgency=medium
    
      * Team upload.
      * New upstream release
        - InitExt.c: Add bounds checks for extension request, event, & error codes
          (CVE-2023-3138)
    
     -- Julien Cristau <email address hidden>  Fri, 16 Jun 2023 14:36:12 +0200
  • libx11 (2:1.8.4-2ubuntu1) mantic; urgency=medium
    
      * SECURITY UPDATE: multiple buffer overflows
        - debian/patches/CVE-2023-3138.patch: add bounds checks for extension
          request, event, & error codes in src/InitExt.c.
        - CVE-2023-3138
    
     -- Marc Deslauriers <email address hidden>  Tue, 13 Jun 2023 07:23:54 -0400
  • libx11 (2:1.8.4-2) unstable; urgency=medium
    
      * rules: Drop --disable-thread-safety-constructor again.
    
     -- Timo Aaltonen <email address hidden>  Mon, 27 Feb 2023 20:31:15 +0200