Accepting request 1115072 from X11:XOrg

- update to 1.8.7
  This release contains fixes for the issues reported in security
  advisory here: 
    https://lists.x.org/archives/xorg-announce/2023-October/003424.html
  * fixes CVE-2023-43785 libX11: out-of-bounds memory access in 
    _XkbReadKeySyms() (boo#1215683)
  * fixes CVE-2023-43786 libX11: stack exhaustion from infinite recursion
   in PutSubImage() (boo#1215684)
  * fixes CVE-2023-43787 libX11: integer overflow in XCreateImage()
    leading to a heap overflow (boo#1215685)
  along with:
  * Fail XOpenDisplay() if server-provided default visual is invalid (!233)
  * Bring XKB docs in line with actual implementation (!231, !228)
  * Xutil.h: declare XEmptyRegion() and XEqualRegion() as Bool (!225)
  * Assorted updates to en_US.UTF-8 compose keys (!213, !214, !215, !216,
    !217, !219, !220, !222, !223, !226, !227, !229)

OBS-URL: https://build.opensuse.org/request/show/1115072
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libX11?expand=0&rev=50
This commit is contained in:
Ana Guerrero 2023-10-05 18:02:42 +00:00 committed by Git OBS Bridge
commit e921fefec1
4 changed files with 24 additions and 4 deletions

View File

@ -1,3 +0,0 @@
version https://git-lfs.github.com/spec/v1
oid sha256:59535b7cc6989ba806a022f7e8533b28c4397b9d86e9d07b6df0c0703fa25cc9
size 1859460

BIN
libX11-1.8.7.tar.xz (Stored with Git LFS) Normal file

Binary file not shown.

View File

@ -1,3 +1,23 @@
-------------------------------------------------------------------
Tue Oct 3 20:51:22 UTC 2023 - Stefan Dirsch <sndirsch@suse.com>
- update to 1.8.7
This release contains fixes for the issues reported in security
advisory here:
https://lists.x.org/archives/xorg-announce/2023-October/003424.html
* fixes CVE-2023-43785 libX11: out-of-bounds memory access in
_XkbReadKeySyms() (boo#1215683)
* fixes CVE-2023-43786 libX11: stack exhaustion from infinite recursion
in PutSubImage() (boo#1215684)
* fixes CVE-2023-43787 libX11: integer overflow in XCreateImage()
leading to a heap overflow (boo#1215685)
along with:
* Fail XOpenDisplay() if server-provided default visual is invalid (!233)
* Bring XKB docs in line with actual implementation (!231, !228)
* Xutil.h: declare XEmptyRegion() and XEqualRegion() as Bool (!225)
* Assorted updates to en_US.UTF-8 compose keys (!213, !214, !215, !216,
!217, !219, !220, !222, !223, !226, !227, !229)
-------------------------------------------------------------------
Sat Jul 15 14:44:18 UTC 2023 - Dirk Müller <dmueller@suse.com>

View File

@ -17,7 +17,7 @@
Name: libX11
Version: 1.8.6
Version: 1.8.7
Release: 0
Summary: Core X11 protocol client library
License: MIT