Red Hat Security Advisory: X11 client libraries security, bug fix, and enhancement update
🔗 CVE IDs covered (27)
📋 Description
CVE-2013-1981 — libX11: Multiple integer overflows leading to heap-based buffer-overflows CVE-2013-1982 — libXext: Multiple integer overflows leading to heap-based buffer-overflows CVE-2013-1983 — libXfixes: Integer overflow leading to heap-based buffer overflow CVE-2013-1984 — libXi: Multiple integer overflows leading to heap-based buffer-overflows CVE-2013-1985 — libXinerama: Integer overflow leading to heap-based buffer overflow CVE-2013-1986 — libXrandr: Multiple integer overflows leading to heap-based bufer overflows CVE-2013-1987 — libXrender: Multiple integer overflows leading to heap-based bufer overflows CVE-2013-1988 — libXRes: Multiple integer overflows leading to heap-based bufer overflows CVE-2013-1989 — libXv: Multiple integer overflows leading to heap-based bufer overflows CVE-2013-1990 — libXvMC: Multiple integer overflows leading to heap-based buffer overflows CVE-2013-1991 — libXxf86dga: Multiple integer overflows leading to heap-based buffer overflows CVE-2013-1992 — libdmx: Multiple integer overflows leading to heap-based bufer overflows CVE-2013-1995 — libXi: Sign extension issues resulting in heap-based buffer overflow CVE-2013-1997 — libX11: Multiple Array Index error leading to heap-based OOB write CVE-2013-1998 — libXi: Multiple Array Index error leading to heap-based OOB write CVE-2013-1999 — libXvMC: Array Index error leading to heap-based OOB write CVE-2013-2000 — libXxf86dga: Array Index error leading to heap-based OOB write CVE-2013-2001 — libXxf86vm: Multiple Array Index error leading to heap-based OOB write CVE-2013-2002 — libXt: Array Index error leading to heap-based OOB write CVE-2013-2003 — libXcursor: Integer overflow leading to heap-based buffer overflow CVE-2013-2004 — libX11: unbounded recursion leading to stack-overflow CVE-2013-2005 — libXt: Memory corruption due to unchecked use of unchecked function pointers CVE-2013-2062 — libXp: Integer overflow leading to heap-based buffer overflow CVE-2013-2063 — libXtst: Integer overflow leading to heap-based buffer overlow CVE-2013-2064 — libxcb: Integer overflow leading to heap-based buffer overflow CVE-2013-2066 — libXv: Array Index error leading to heap-based OOB write CVE-2013-7439 — libX11: buffer overflow in MakeBigReq macro
🎯 Affected products200
- Red Hat Enterprise Linux Desktop (v. 6)
- Red Hat Enterprise Linux Desktop Optional (v. 6)
- Red Hat Enterprise Linux HPC Node (v. 6)
- Red Hat Enterprise Linux HPC Node Optional (v. 6)
- Red Hat Enterprise Linux Server (v. 6)
- Red Hat Enterprise Linux Server Optional (v. 6)
- Red Hat Enterprise Linux Workstation (v. 6)
- Red Hat Enterprise Linux Workstation Optional (v. 6)
- libX11-0:1.6.0-2.2.el6.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)
- libX11-0:1.6.0-2.2.el6.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)
- libX11-0:1.6.0-2.2.el6.i686 as a component of Red Hat Enterprise Linux Server (v. 6)
- libX11-0:1.6.0-2.2.el6.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)
- libX11-0:1.6.0-2.2.el6.ppc as a component of Red Hat Enterprise Linux Server (v. 6)
- libX11-0:1.6.0-2.2.el6.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)
- libX11-0:1.6.0-2.2.el6.s390 as a component of Red Hat Enterprise Linux Server (v. 6)
- libX11-0:1.6.0-2.2.el6.s390x as a component of Red Hat Enterprise Linux Server (v. 6)
- libX11-0:1.6.0-2.2.el6.src as a component of Red Hat Enterprise Linux Desktop (v. 6)
- libX11-0:1.6.0-2.2.el6.src as a component of Red Hat Enterprise Linux HPC Node (v. 6)
- libX11-0:1.6.0-2.2.el6.src as a component of Red Hat Enterprise Linux Server (v. 6)
- libX11-0:1.6.0-2.2.el6.src as a component of Red Hat Enterprise Linux Workstation (v. 6)
- libX11-0:1.6.0-2.2.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)
- libX11-0:1.6.0-2.2.el6.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)
- libX11-0:1.6.0-2.2.el6.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)
- libX11-0:1.6.0-2.2.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)
- libX11-common-0:1.6.0-2.2.el6.noarch as a component of Red Hat Enterprise Linux Desktop (v. 6)
- libX11-common-0:1.6.0-2.2.el6.noarch as a component of Red Hat Enterprise Linux HPC Node (v. 6)
- libX11-common-0:1.6.0-2.2.el6.noarch as a component of Red Hat Enterprise Linux Server (v. 6)
- libX11-common-0:1.6.0-2.2.el6.noarch as a component of Red Hat Enterprise Linux Workstation (v. 6)
- libX11-debuginfo-0:1.6.0-2.2.el6.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)
- libX11-debuginfo-0:1.6.0-2.2.el6.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)
- +170 more not shown
✅ Remediation
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258
🔗 References (30)
- selfhttps://access.redhat.com/errata/RHSA-2014:1436
- externalhttps://access.redhat.com/security/updates/classification/#moderate
- externalhttp://www.x.org/wiki/Development/Security/Advisory-2013-05-23/
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=959040
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=959046
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=959048
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=959049
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=959056
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=959059
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=959061
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=959066
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=959068
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=959070
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=959072
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=959077
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=959108
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=959112
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=960345
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=960346
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=960347
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=960349
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=960350
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=960352
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=960357
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=960362
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=960367
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=960369
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=971626
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1119322
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1436.json