Debian DLA-685-2 : libxi regression update

A regression was found in the previous libxi update. An uninitialized pointer could be freed, causing crashes. For Debian 7 'Wheezy', these problems have been fixed in version 2:1.6.1-1+deb7u3. We recommend that you upgrade your libxi packages. NOTE: Tenable Network Security has extracted the...

[SECURITY] [DLA 685-1] libxi security update

Package : libxi Version : 2:1.6.1-1+deb7u2 CVE ID : CVE-2016-7945 CVE-2016-7946 Debian Bug : 840440 Tobias Stoeckmann from the OpenBSD project discovered the following vulnerability in libXi, the X11 input extension library: Insufficient validation of data from the X server can cause out of...

SUSE SLED12 / SLES12 Security Update : X Window System client libraries (SUSE-SU-2016:2505-1)

This update for the X Window System client libraries fixes a class of privilege escalation issues. A malicious X Server could send specially crafted data to X clients, which allowed for triggering crashes, or privilege escalation if this relationship was untrusted or crossed user or permission...

X.Org libXi Denial of Service Vulnerability

X.Org libXi is an X input extension library operated by the X.Org Foundation. A security vulnerability exists in X.Org libXi 1.7.6 and earlier versions, which can be exploited by an attacker to cause a denial of service out-of-bounds memory access or infinite loop...

X.Org libXi Denial of Service Vulnerability (CNVD-2016-08890)

X.Org libXi is an X input extension library operated by the X.Org Foundation. A security vulnerability exists in X.Org libXi, which can be exploited by attackers to cause a denial of service out-of-bounds memory access or infinite loop...

[SECURITY] Fedora 25 Update: libXi-1.7.7-1.fc25

X.Org X11 libXi runtime library...

Fedora 24 : libXi (2016-cabb6d7ef7)

Security fix for CVE-2016-7945, CVE-2016-7946 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

[SECURITY] Fedora 24 Update: libXi-1.7.7-1.fc24

X.Org X11 libXi runtime library...

CVE-2016-7945

Multiple integer overflows in X.org libXi before 1.7.7 allow remote X servers to cause a denial of service out-of-bounds memory access or infinite loop via vectors involving length fields...

CVE-2016-7946

X.org libXi before 1.7.7 allows remote X servers to cause a denial of service infinite loop via vectors involving length fields...

Debian GNU/Linux Data Compromise

The multiple vulnerabilities in the libxi-dev package of the Debian GNU/Linux operating system may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

Amazon Linux: Security Advisory (ALAS-2014-452)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Red Hat Enterprise Linux Data Compromise

The multiple vulnerabilities in the libXi-1.7.2 package of the Red Hat Enterprise Linux operating system can be exploited, which may lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

Red Hat Enterprise Linux Data Compromise

The multiple vulnerabilities in the libXi-devel-1.7.2 package of the Red Hat Enterprise Linux operating system can be exploited, leading to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

Debian GNU/Linux Data Compromise

The multiple vulnerabilities in the libxi package of the Debian GNU/Linux operating system may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

Red Hat Enterprise Linux Data Compromise

The multiple vulnerabilities in the libXi-debuginfo-1.7.2 package of the Red Hat Enterprise Linux operating system can be exploited, resulting in violations of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

USN-2568-1 libx11, libxrender vulnerability

Abhishek Arya discovered that libX11 incorrectly handled memory in the MakeBigReq macro. A remote attacker could use this issue to cause applications to crash, resulting in a denial of service, or possibly execute arbitrary code. In addition, following the macro fix in libx11, a number of other...

Amazon Linux AMI : libX11 / libXcursor,libXfixes,libXi,libXrandr,libXrender,libXres,libXt,libXv,libXvMC,libXxf86dga,libXxf86vm,libdmx,xorg-x11-proto-devel (ALAS-2014-452)

Multiple integer overflow flaws, leading to heap-based buffer overflows, were found in the way various X11 client libraries handled certain protocol data. An attacker able to submit invalid protocol data to an X11 server via a malicious X11 client could use either of these flaws to potentially...

Medium: libX11, libXcursor, libXfixes, libXi, libXrandr, libXrender, libXres, libXt, libXv, libXvMC, libXxf86dga, libXxf86vm, libdmx, xorg-x11-proto-devel

Issue Overview: Multiple integer overflow flaws, leading to heap-based buffer overflows, were found in the way various X11 client libraries handled certain protocol data. An attacker able to submit invalid protocol data to an X11 server via a malicious X11 client could use either of these flaws t...

Scientific Linux Security Update : X11 client libraries on SL6.x i386/x86_64 (20141014)

Multiple integer overflow flaws, leading to heap-based buffer overflows, were found in the way various X11 client libraries handled certain protocol data. An attacker able to submit invalid protocol data to an X11 server via a malicious X11 client could use either of these flaws to potentially...